General · EdgepediaSeptember 17, 20269 min read

Privacy

Privacy is the condition or right of a person to control access to themselves and to information about themselves, protected in modern law as a moral and human right covering personal data, the home, communications, and personal decisions. There is no single definition of the term in ordinary language or in philosophical, political, and legal discourse; the concept has broad historical roots in legal, ethical, sociological, and anthropological writing, and the rules protecting it have been driven by developments in different political and social areas.¹

Key fact	Detail
First definition of informational privacy	Samuel Warren and Louis Brandeis, "The Right to Privacy" (1890), defined privacy as "the right to be let alone"¹
Human right	Article 12 of the 1948 Universal Declaration of Human Rights protects against arbitrary interference with privacy, family, home, or correspondence; Article 17 of the ICCPR (1966) repeats it in slightly different terms¹
US constitutional privacy	First recognized explicitly by the Supreme Court in Griswold v. Connecticut (1965), centered on decisional privacy; Dobbs v. Jackson Women's Health Organization (2022) overruled Roe v. Wade and returned abortion regulation to the states¹
EU data protection	The 1995 Data Protection Directive was followed by the General Data Protection Regulation (GDPR), in law since 2016 and enforceable since 2018, which requires breach notification within 72 hours¹^•²
Distinct EU rights	The 2000 Charter of Fundamental Rights formally separated a right to respect for private and family life (Article 7) from a right to protection of personal data (Article 8), the first such distinction in an international declaration of rights¹
Regulatory philosophy	"Privacy by design and by default" means building data protection into systems from the start and ensuring default settings protect individuals' data³
US approach	The United States regulates privacy sectorally, with different regimes for different contexts and sectors, rather than through an omnibus law⁴

Conceptual history

The private sphere. Aristotle's distinction between the public sphere of politics, the polis, and the private domestic sphere of the family, the oikos, is the starting point for philosophical discussions of privacy. He portrays the private realm as a sphere of necessity, limitation, enclosure, and obedience to natural and reproductive laws; in the view of Aristotle, and of the contemporary Aristotelian Hannah Arendt, a social ontology renders it natural that some things, people, and activities should count as private while others belong to the public.¹ In liberal theory from Hobbes and Locke to Rawls, the public/private distinction instead marks the appropriate realm of governmental authority against the realm reserved for self-regulation. Almost all theories of privacy from the last five decades hold that this division is conventional rather than natural.¹

Informational privacy. The modern history of the moral right to informational privacy begins with Warren and Brandeis's 1890 essay. Citing "political, social, and economic changes" and the "right to be let alone", they argued that existing law already afforded a way to protect individual privacy, and they focused on the invasion of privacy brought by the burgeoning newspaper industry and recent inventions such as photography. They grounded the right in a principle of "inviolate personality", part of a general right to the immunity of the person, and their central concept, the right to be left alone, remains the most influential formulation of the right to control information about oneself.¹ A historical-sociological account of the same period notes that Warren and Brandeis, members of Boston's upper-class social scene who had attracted unwanted tabloid attention, were arguably also part of a broader legal strategy by late nineteenth-century elites to protect their reputations in the face of disruptive social and technological change.⁵

To systematize the privacy right emerging in US tort law, William Prosser wrote in 1960 that four distinct interests had developed: intrusion into a person's seclusion or private affairs; public disclosure of embarrassing private facts; publicity placing one in a false light; and appropriation of one's likeness for another's advantage.¹

Legal protection

During the twentieth century the right to privacy was advanced to the status of a human right. It was a novel entry in the Universal Declaration of Human Rights, unusual in lacking predecessors in state constitutions or basic laws, and it has since become one of the most important human rights.¹ In Europe, Article 8 of the European Convention on Human Rights (drafted 1950) guarantees respect for private and family life, home, and correspondence; the 1981 Convention 108 set specific rules for automatic processing of personal data; and the 2000 Charter of Fundamental Rights separated privacy from data protection as distinct rights.¹

The German line. In 1970 West Germany approved what is considered the country's first modern data privacy protection for public sector data, in the state of Hesse, followed by a 1977 Federal Data Protection Act. A landmark 1983 decision of the Federal Constitutional Court, striking down parts of the Census Act, declared the right of "self-determination over personal data" a fundamental right, reasoning that a legal order is incompatible with informational self-determination if citizens cannot tell who knows what personal information about them, at what time and on which occasion.¹^•⁶ This European caution about data collection is traced in part to the Nazi regime's systematic abuse of private data to identify Jews and other minority groups.⁶

The GDPR. The 1995 Data Protection Directive aimed both to harmonize data protection laws to facilitate cross-border trade and to protect rights and freedoms when personal data are used. In 2016 it was followed by the GDPR, whose provisions became enforceable in 2018; it is described as the most consequential regulatory development in information policy in decades, imposing significant fines for non-compliance and requiring firms anywhere in the world that collect data on EU citizens to let users see, move, or delete that information and to report breaches within 72 hours.¹^•² Under the GDPR, organizations must implement technical and organizational measures at the earliest stages of design, an approach known as data protection by design, and are responsible for demonstrating compliance with all data protection principles.⁷

The United States. US constitutional privacy took a different course, focused on decisional privacy, the right to make decisions about one's body without interference. In Griswold v. Connecticut (1965) the Supreme Court overturned convictions for dispersing contraceptive information to married persons, with Justice Douglas describing a zone of privacy covering marriage and the sexual relations of married persons. The right was later relied on in decisions on interracial marriage, obscene matter in the home, and contraception, and most famously in Roe v. Wade (1973), where Justice Blackmun wrote that the right of privacy is broad enough to encompass a woman's decision whether or not to terminate her pregnancy. In June 2022, Dobbs v. Jackson Women's Health Organization overruled Roe and Planned Parenthood v. Casey, holding that the Fourteenth Amendment's implied privacy right does not include a right to abortion, leaving states free to regulate access.¹ In Europe, by contrast, same-sex marriage and abortion are conceived as rights to personal freedom and have not been discussed in the context of privacy theories.¹ US data protection law remains fragmented, with many data protection principles incorporated mainly through Federal Trade Commission settlements, though developments such as the California Consumer Privacy Act of 2018 may move US law closer to the EU model.¹

Critiques

Several lines of argument challenge privacy as a distinct right. Judith Jarvis Thomson's reductionism holds that cases thought to violate privacy are adequately explained as violations of property rights or rights over the person, so that the right to privacy is merely a cluster of more basic rights and any privacy violation is better understood as the violation of one of them. Thomas Scanlon replied that rights directly corresponding to interests such as not being looked at would be too broad for a workable system, and grounded privacy in the special interests people have in freedom from certain kinds of intrusion.¹

Economic and communitarian critiques. Richard Posner argued from economic analysis that privacy should be protected only when access to personal information would reduce its value, since concealment and selective disclosure are often used to mislead others or for private economic gain, making individual privacy protection less defensible than its advocates suppose. Communitarian thinkers, including Michael Sandel and Amitai Etzioni, question grounding privacy in individual negative freedom; they conceive privacy as protection given to practices that depend on being sheltered from the view of others, conceded to the individual as a member of the community rather than claimed as an autonomous being.¹

Privacy in the digital age

Recent technology has produced previously unimagined ways of obtaining information about people, observing them, listening in on conversations, monitoring activities, and locating whereabouts, and these technologies fundamentally change the social practices in which they are embedded. Beyond collection, personal data are used to create profiles exploited for political and commercial purposes.¹

Autonomy and control. A loss of privacy does not automatically imply a loss of autonomy, which is about control, whereas privacy concerns knowledge of and access to information. In the digital age, however, the two typically converge: constant observation produces the panopticon (Bentham's circular prison where inmates feel always watched) experience of an interiorized gaze, and profiling driven by invisible algorithms lets institutions nudge and seduce individuals for reasons advantageous to the institution, so that when privacy is under threat the independence of individual decisions is typically also compromised.⁸

Contextual integrity. Helen Nissenbaum, professor of information science at New York University, proposed in Privacy in Context (2009) that what people care about is not simply restricting the flow of information but ensuring that it flows appropriately. Normative standards are set by the contexts in which information flows, such as health care, education, religion, and family, and data storage, monitoring, and tracking are allowed insofar as they serve the goals of the context. The model has been influential in law and policy, though critics note that its notion of context is underspecified and that flagging departures from entrenched norms is inherently conservative.⁸

Social approaches. A shift in emphasis from the individual to the social dimension of privacy has gained importance in both law and philosophy. The European Court of Human Rights, which once stressed data protection as an individual's right not to be interfered with, increasingly focuses on privacy as protection of individuals' relationships with other human beings, and many scholars now study privacy as a norm that regulates and structures social life rather than solely as an individual interest.⁸

International framework

International human rights law provides a framework for the right to privacy, including in the context of domestic and extraterritorial surveillance, interception of digital communications, and collection of personal data; treaty bodies, courts, and independent experts have given guidance on the meaning of "interference" with privacy, and any interference must be necessary and proportionate under that law.⁹^•¹⁰ The OECD's privacy guidelines include a Collection Limitation Principle and require that personal data be protected by reasonable security safeguards against risks such as loss, unauthorized access, destruction, use, modification, or disclosure.¹¹

References

Initially written Sep 17, 2026 · Reviewed: Sep 30, 2026; Oct 25, 2026 · Edited: Sep 30, 2026; Oct 25, 2026