Offering ‘Home’ Protection to Private Digital Storage Spaces
Authors
Jaap-Henk Hoepman* and Bert-Jaap Koops**
*Associate Professor, Digital Security Group, Radboud University,Nijmegen, The Netherlands. Email: jhh@cs.ru.nl. Postal address: Erasmusbuilding, room 19.08, iHub, Radboud University, PO box 9010, 6500GLNijmegen, The Netherlands. Associate professor, IT Law group, Faculty ofLaw, University of Groningen, Groningen, The Netherlands.
** Professor of Regulation and Technology, Tilburg Institute for Law,Technology, and Society (TILT), Tilburg University, Tilburg, TheNetherlands. Email: e.j.koops@tilburguniversity.edu
The law classically provides strong protection to whatever is inside a home. That protection is lost now that our photo albums, notes and other documents have become digital and are increasingly stored in the cloud. Even if their owner never intended these documents to be shared, their copies in the cloud may be accessed by law enforcement, under possibly lower conditions than apply to home searches. In this paper, we study this problem from a theoretical perspective, asking whether it is possible to establish home-equivalent legal protection of those private digital storage spaces (smartphones, private cloud storage accounts) that most closely resemble the home as a storage environment for private things. In particular, we study whether it is possible, using technological design, to clearly separate digital storage spaces that are used privately versus storage spaces used to share data with others. We sketch a theoretical architecture for such a ‘digital home’ that most closely resembles the physical home in terms of the space that is the most personal storage environment for private files. The architecture guarantees the data are indeed only stored for private use, and can never be shared with others unless the device used for storage itself is shared. We subsequently argue that the law should offer ‘home’ protection to data stored using this system, as an intermediate stepping-stone towards more comprehensive legal protection of cloud-stored data. Such protection is needed, since nowadays, not the home or the smartphone, but the smartphone/cloud ecosystem holds ‘the privacies of life’.
