The rapid advancement of artificial intelligence and the extensive collection of personal data have heightened concerns over privacy in the digital age. Despite decades of emerging technologies that compromise personal information—from internet usage to smartphone tracking—the issue remains unresolved, with many experts warning that current approaches are insufficient to protect individuals’ rights.

Daniel J. Solove, a law professor at George Washington University and an expert in privacy issues, highlights that while people increasingly care about privacy, existing legal frameworks often fall short. He points to a proliferation of privacy laws worldwide, including in the United States where approximately 40% of states have enacted broad consumer privacy statutes. Additionally, laws targeting specific data types, such as biometric, health, and children’s data, have been introduced. However, many of these regulations attempt to place control over data squarely in the hands of individuals—a strategy Solove deems unrealistic given the sheer volume of companies collecting data and the complexity of artificial intelligence analyzing it.

Solove argues that placing the onus on individuals to manage their data risks and consent is ineffective, as people rarely have the time or capacity to understand lengthy privacy policies or grasp how seemingly benign data might reveal sensitive information through AI inference. For example, data about everyday purchases could be used without consent to deduce health conditions, religious beliefs, or political affiliations.

Instead, Solove advocates for a shift towards holding companies accountable for privacy harms. Drawing parallels to historical public health and safety regulations—such as those governing food safety and automobile design—he suggests privacy laws should require rigorous oversight before digital technologies and AI systems enter the market. He notes that in sectors like food and automobiles, meaningful review processes and legal liability for manufacturers have led to significant safety improvements, whereas privacy law enforcement remains weak, often lacking mechanisms for individuals to sue companies for violations.

Encouraging signs exist, according to Solove, as privacy legislation now increasingly includes provisions once deemed unfeasible in the United States. For instance, the right to delete personal data is now commonly embedded in many state laws, a feature long established in the European Union. Data minimization requirements, which limit the collection and use of data strictly to necessary purposes, are also gaining traction.

Looking ahead, Solove calls for more thoughtful and stringent privacy legislation that avoids both industry pushback claiming regulation stifles innovation and reactionary proposals with unintended consequences. He criticizes laws mandating invasive age verification practices, which can exacerbate privacy risks by forcing companies to gather more sensitive user information, including biometric data.

Proposed future protections include liability for negligent data practices or harmful algorithms, incorporation of privacy safeguards during technology development, and mandatory testing and review based on multi-stakeholder standards. Solove underscores public demand for stronger privacy safeguards, emphasizing that policymakers must rise to the challenge rather than continue to implement inadequate measures.

In sum, while privacy remains under threat amid technological advances, experts like Solove contend that with well-designed accountability frameworks and proactive regulation, meaningful progress could still be achieved in safeguarding digital privacy.