This paper examines the conflict between criminal investigation interests and personal privacy rights, using the central question of whether a private investigator or internal auditor may breach privacy regulations to uncover fraud. Drawing on international examples — including Hong Kong's Personal Data (Privacy) Ordinance, the EU's consumer privacy initiatives, and an Italian court's criminal conviction of Google executives — the paper argues that the United States lags behind its international counterparts in protecting personal privacy. The author advocates for stronger U.S. privacy laws aligned with European standards and highlights Ken Anderson's "Privacy by Design" framework as a model for responsible personal information management.
This paper attempts to answer a fundamental question in the intersection of investigative practice and personal rights: Can a private investigator or internal auditor, for the sake of clarifying an allegation or suspicion of fraud, breach privacy regulations in order to access personal information? For the sake of argument, the answer here is no. This leads naturally to a second, broader question: Where should we draw the line between the public interest and the privacy interest?
In the United States, the situation has almost reached a point where there is no meaningful privacy left. Anyone with access to a computer and the funds to pay for it can retrieve virtually any type of information about another person — including criminal records, employment records, driving records, and financial records. Television programs about private investigators and detectives routinely depict characters accessing detailed personal information about individuals at any time, without those individuals' knowledge or consent.
In European countries and other common law jurisdictions, the situation is markedly different. In Hong Kong, for example, the Office of the Privacy Commissioner for Personal Data (PCPD) is an independent statutory body established to oversee enforcement of the Personal Data (Privacy) Ordinance (Cap. 486), which came into force on 20 December 1996.
On 13 June 2012, the PCPD held a conference attended by 260 delegates who discussed a range of privacy issues. One keynote speaker was Ken Anderson, Assistant Commissioner (Privacy) from Ontario, Canada, who presented on the topic "Privacy by Design: What's Been Happening?"
"Anderson's framework and international adoption"
"Criminal conviction over Italian privacy law"
The Google Italy case sheds light on an even bigger concern: privacy laws in the United States need to be changed to align more closely with those of our European colleagues. People in the United States need to reclaim their right to privacy.
You’re 46% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.