CIPT practice question 14 of 30

Users of a web-based email service have their accounts breached through compromised login credentials. Which possible consequences of the breach illustrate the two categories of Calo’s Harm Dimensions?

Full set: 220 questions
Answer options
A: Financial loss and blackmail.
B: Financial loss and solicitation.
C: Identity theft and embarrassment. Correct answer
D: Identity theft and the leaking of information.
Correct Answer:
C. Identity theft and embarrassment.
Explanation

Ryan Calo’s framework categorizes privacy harms into two dimensions: objective and subjective. Objective harms are tangible, observable injuries like financial loss or physical harm. Subjective harms are internal, emotional, or psychological injuries. "Identity theft" is an objective harm, as it leads to concrete financial and reputational damages. "Embarrassment" is a classic example of a subjective harm, representing emotional distress and a feeling of humiliation resulting from the exposure of private information. This pair perfectly illustrates the two distinct categories of Calo's harm dimensions.

Why Incorrect

A. Financial loss and blackmail are both objective harms, as they involve tangible loss or the threat of tangible consequences, failing to represent both of Calo's categories.
B. Financial loss is an objective harm, but solicitation is an action, not a harm itself. The resulting harm could be objective (a scam) or subjective (annoyance), making it less precise.
D. Identity theft is an objective harm, but "leaking of information" is the privacy breach event itself, not the resulting harm or consequence to the individual.

References

1. Calo, R. (2011). The Boundaries of Privacy Harm. Indiana Law Journal, 86(3), Article 1. pp. 1131-1162. Calo explicitly distinguishes between "subjective harms (i.e., the anxiety or emotional distress that can accompany a privacy violation)" and "objective harms (i.e., concrete injuries like financial loss or unwelcome solicitation)."

2. Solove, D. J. (2006). A Taxonomy of Privacy. University of Pennsylvania Law Review, 154(3), 477-560. https://doi.org/10.2307/40041279. While not Calo's work, Solove's taxonomy complements it by detailing how information collection and processing can lead to harms like "distortion" (embarrassment) and "insecurity" (identity theft).

3. Nissenbaum, H. (2009). Privacy in Context: Technology, Policy, and the Integrity of Social Life. Stanford University Press. Chapter 4 discusses how privacy violations can lead to a range of harms, both tangible and intangible, aligning with Calo's objective/subjective dichotomy.

Scroll to Top