RESEARCH DOSSIER
Digital Rights
Abstract. Digital rights designate justified claims, liberties, powers, and immunities concerning the conditions under which persons act, communicate, associate, form identities, receive public services, and become knowable or governable through digital systems. This monograph reconstructs their normative grounds through classical theories of right and liberty, Hohfeldian legal analysis, human-rights philosophy, information ethics, and the political economy of computational infrastructure. It traces the movement from privacy and communications protections to contemporary data protection, digital participation, platform accountability, and contestation of automated decisions. Primary legal texts and judgments are examined as institutional articulations of philosophical principles, with particular attention to the Universal Declaration of Human Rights, the International Covenant on Civil and Political Rights, European fundamental-rights law, the General Data Protection Regulation, the Digital Services Act, and the evolving law of artificial intelligence. The central thesis is that an effective digital right must be intelligible as a normative relation and practically exercisable within the technical and institutional conditions that determine its realization. A right that binds only a formally designated duty-bearer while leaving the operative infrastructure beyond correction remains institutionally incomplete. Digital rights thus require an integrated account of standing, justification, implementation, contestability, and remedy. The concluding analysis distinguishes human rights in digital environments from still-open questions concerning the future legal standing of non-biological rational participants in the Artificial Era.
Keywords: digital rights; philosophy of law; rights theory; Hohfeld; human rights online; privacy; data protection; freedom of expression; digital access; informational autonomy; platform governance; digital constitutionalism; algorithmic decision-making; due process; data justice; Artificial Era
Digital Rights as a Philosophical Problem
Digital rights concern the normative organization of a social world increasingly mediated by information systems. A person can be denied a public benefit because of a database entry, excluded from a political forum by a platform rule, observed through ubiquitous devices, or denied the ability to correct an automated classification. Each case concerns an entitlement whose object is shaped by technological mediation. Its significance comes from the effect upon freedom, equality, participation, reputation, or legal standing. The central philosophical task is to establish what justifies a right in such conditions, which actors bear correlative duties, and which procedures make the entitlement effective.
Digital communication changes both the scale and the structure of familiar conflicts. Information can circulate across jurisdictions, remain indefinitely searchable, be combined into inferences about persons who never knowingly supplied it, and be reused in decisions whose criteria they cannot inspect. A platform's legal terms, recommendation systems, content controls, and identity requirements may affect a person's practical opportunities as directly as a public administrative rule. Yet calling every desirable feature of technology a right collapses moral claims, statutory protections, policy objectives, and private contractual benefits into a single vocabulary. Philosophical analysis begins by separating those categories and specifying their relations (Wenar, 2025; Nickel, 2024).
The argument developed here is that digital rights possess two inseparable dimensions. Their normative dimension states what persons may demand, do, refuse, or secure against interference. Their institutional dimension establishes which actors must honor those positions, how technical systems embody their demands, and how a violation may be established and remedied. A right concerning a digital environment is therefore neither exhausted by the written law nor realized by technical design alone. It exists as a defensible normative relation that becomes socially effective through law, institutions, and material arrangements.
Definition and Boundaries of Digital Rights
A digital right is a justified normative position concerning access to, action within, treatment by, or protection from an information-mediated environment. It may be grounded directly in moral human rights, enacted in constitutional or ordinary law, established by contract, or proposed as a principle of institutional reform. The modifier digital identifies a condition of exercise or an object of governance; it does not by itself identify the right's moral source. Freedom of expression remains a fundamental freedom when exercised through an online forum, while the ability to transfer personal data under specified conditions may constitute a more particular statutory entitlement.
Four categories recur. Protective rights constrain observation, exploitation, and harmful interference. Participatory rights secure expression, association, access, and inclusion. Procedural rights secure notice, review, explanation where applicable, and correction of consequential decisions. Structural rights concern the background conditions through which individuals and groups can effectively exercise other rights, including accessibility, interoperability, institutional accountability, and non-discriminatory access to essential systems. These categories overlap: the right to challenge a mistaken welfare-data entry simultaneously protects reputation, procedural fairness, and access to material assistance.
The subject is distinct from the separate study of data-protection doctrine, which addresses the detailed conditions of lawful data processing, and from digital citizenship, which analyzes membership and political participation. It also differs from digital governance, whose central problem is the legitimacy of actors and institutions that regulate networks. Digital rights analyzes the justified positions of right-holders against those institutions and the relation between formal recognition and effective enjoyment. This delimitation preserves the comparative significance of privacy, expression, identity, data, and access without reducing them to any one regulatory technique.
The Grammar of Rights: Claim, Liberty, Power, and Immunity
Wesley Newcomb Hohfeld's analysis distinguishes relations that ordinary language commonly compresses into the word right. A claim-right corresponds to another actor's duty; a liberty means that the holder has no duty to refrain from a specified act; a power is the capacity to alter normative relations; and an immunity protects the holder against another's capacity to alter those relations. These distinctions originated in legal reasoning, notably Hohfeld's 1913 examination of fundamental legal conceptions, and have become indispensable to the conceptual analysis of entitlements (Hohfeld, 1913; Wenar, 2025).
Applied to digital life, the distinctions clarify apparent disagreements. A person's liberty to publish criticism does not, by itself, entail a claim to be amplified by a privately operated recommendation system. A data subject's power to withdraw consent concerns alteration of the processing relationship, while a claim to erasure, when statutory conditions are met, correlates with the controller's duty. An immunity against unlawful alteration of voting eligibility by an automated registrar concerns the validity of institutional action. Digital-rights discourse becomes precise when each proposal identifies its holder, correlative actor, protected conduct or status, conditions, and available remedy.
The analysis also reveals a limitation of merely technical formulations. A protocol can prevent an action without creating a legal duty, and it can allow an action without conferring an enforceable liberty against government interference. Conversely, a statutory claim can exist even while interfaces are designed to make its exercise practically inaccessible. Therefore the translation from a right's normative form to a system's functional behavior must be independently justified and tested. An actionable digital-rights doctrine should keep both layers visible rather than treating software permissions as equivalent to rights.
Rights as Choice, Interest, and Institutional Protection
The grammar of legal relations establishes the forms that rights can take, while a theory of their justification must explain why those relations should be instituted. One influential family of accounts emphasizes control exercised by the right-holder over another's duty. Another emphasizes the protection of interests sufficiently important to justify duties. The difference is consequential for digital environments because vulnerable persons may require meaningful protection precisely where they lack the capacity or opportunity to make informed choices. A child whose personal information is collected, a patient subject to automated assessment, and a worker under constant workplace monitoring may possess strong claims even where a formal act of consent has been obtained.
H. L. A. Hart's discussion of natural rights connects the language of right to a fundamental equality in freedom and the structure of choice over interference (Hart, 1955). Joseph Raz's influential interest-centered account instead regards an aspect of someone's well-being as a sufficient reason, under appropriate conditions, to hold another under a duty (Raz, 1986). The theories differ over the distinctive function of rights and the role of the holder's normative control. Both illuminate digital-rights disputes. Choice-based analysis explains why persons need powers to authorize, refuse, revoke, and challenge acts that concern them. Interest-based analysis explains why protection may survive defects of bargaining power, inaccessible information, dependence, or incomplete competence. These functions need not be merged into a single definition: they identify different grounds for particular rights and different tests for the legitimacy of regulatory paternalism.
Consider a system that offers users an elaborate dashboard for adjusting data-sharing settings. In formal terms, it supplies a range of choices. If its operation is opaque, if refusal prevents access to a vital service, or if processing harms children or persons who cannot exercise the controls, the availability of options may fail to protect the interests that justified the entitlement. Equally, an institution might protect an important interest by imposing comprehensive restrictions that eliminate possibilities of legitimate self-disclosure or dissent. The proper analysis asks first which human interests warrant protection, then which forms of holder control are constitutive of the protected good, and finally which duties and institutional arrangements can secure both. It recognizes that the content of a right can include an enforceable claim, a protected liberty, a legal power, and a procedural immunity in an integrated normative package.
This discussion also clarifies proportionality. The existence of a privacy interest does not imply unlimited control over every item of information, and the value of expression does not eliminate duties concerning identifiable harms. Competing rights claims require public reasoning about the reasons for interference, the connection between the measure and its purpose, less restrictive alternatives, and the burden placed on right-holders. The consequences of disproportionate interference are magnified when one technical rule is applied to millions of users at once. Digital systems therefore demand unusually careful translation of philosophical justification into repeatable institutional decisions.
From Natural Rights to Publicly Justifiable Entitlements
Early modern arguments provide important resources for the rights analysis of networked power. In the Second Treatise of Government, John Locke connects political authority to a prior moral standing of persons, governmental trust, and limits upon arbitrary rule (Locke, 1690/2003, §§4–6, 87–94, 134–142). The precise historical content concerns persons, property, political government, and legitimate resistance rather than modern computational systems. Its transferable argument is that the existence of effective power does not establish an unrestricted title to exercise it. Digital infrastructure owners can therefore possess extensive operational power without thereby acquiring unlimited moral authority over the lives organized through their services.
John Stuart Mill's On Liberty offers a different but complementary concern: the conditions of thought, discussion, individuality, and resistance to social conformity (Mill, 1859, chs. 2–4). Public discourse can be constrained by public authorities, commercial gatekeepers, coordinated intimidation, and social incentives toward conformity. In digitally mediated communication, these pressures operate through visibility, searchability, automated ranking, and exclusion. Mill's defense of discussion provides a reason to protect criticism and experimentation, while his account of harm prevents freedom of expression from being treated as unrestricted permission to intimidate or injure others.
Contemporary rights theory disputes whether rights are fundamentally instruments of individual will, protections of important interests, or political commitments developed in particular institutions. Will theories emphasize the holder's control over another party's duty; interest theories make the protection of sufficiently important interests central (Wenar, 2025). These approaches illuminate different digital cases. A right to revoke consent expresses normative control; a child's claim to privacy or protection may remain justified despite limited ability to exercise choice. Digital-rights theory should therefore permit multiple grounds while requiring each claimed entitlement to meet an explicit standard of justification.
Justice, Equal Status, and the Infrastructure of Freedom
The philosophical case for digital rights grows stronger where technological systems become conditions of ordinary social membership. Rawls's account of the basic structure of society treats justice as a problem of institutions that distribute rights, opportunities, and advantages among free and equal persons (Rawls, 1971). Its contemporary application requires asking whether education, employment, healthcare, civic engagement, and access to administrative decisions are being organized through infrastructures whose rules systematically advantage some persons over others. Mere equality of formal account creation is insufficient when connectivity, disability accommodation, language, and economic dependence determine usable access.
A rights-based argument can be reconstructed as follows. Equal moral and political standing demands that individuals have a fair opportunity to pursue essential interests and participate in shared institutions. Where a technical system is a practical gateway to those opportunities, the conditions of its operation become matters of justice. A policy that reserves access to those who can purchase expensive equipment or satisfy opaque identification demands therefore requires justification, especially when viable alternatives disappear. The conclusion is a duty to design and govern essential digital infrastructures consistently with equal standing, rather than an unconditional claim to every existing online service.
The distinction between formal and effective enjoyment is important. Equal textual guarantees can coexist with highly unequal real-world outcomes where marginal groups experience surveillance, exclusion, or hostile interfaces. The challenge raised by Noble's study of search engines and Benjamin's analysis of automated racial hierarchy is that technical classification can embed preexisting social power into apparently ordinary digital operations (Noble, 2018; Benjamin, 2019). An adequate theory of digital rights accordingly examines institutional effects and the opportunities to contest them, rather than locating discrimination only in explicit discriminatory instructions.
Privacy before and after Networked Computation
Privacy emerged as a modern legal and philosophical concern through several distinct traditions: protection of home and correspondence, limits upon publicity, control over personal information, intimacy, and autonomy in the formation of a life. The familiar tendency to define privacy as secrecy fails to explain why a person may object to the aggregation of individually accessible facts into an intrusive profile. Nor does it explain why a hospital may legitimately know sensitive information that should not be distributed to an employer. Privacy concerns the structure of permissible relationships and information use as well as concealment (Nissenbaum, 2010; van den Hoven et al., 2024).
The information-technology setting intensifies an older problem. Communications records, location histories, biometric identifiers, and interaction logs make it possible to infer preferences, associations, vulnerabilities, and patterns of conduct. Such inference can create power over a person even where the underlying fragments appear mundane. The normative question is thus whether the collection, transformation, combination, and deployment of information remain compatible with contextual expectations, dignity, and democratic freedom. The legal right to data protection is one institutional answer; privacy remains philosophically broader than the scope of a particular data-protection regulation.
A defensible privacy theory must distinguish interpersonal knowledge, institutional recordkeeping, and concentrated surveillance. Information exchanged inside a relationship can generate a legitimate expectation about its subsequent use. Government collection raises questions of public justification and coercive power. Commercial observation raises questions of bargaining asymmetry and the commodification of behavioral prediction. Different institutional relationships generate different duties; nonetheless, each can be assessed through the common problem of exposure to power without adequate control, justification, or correction.
Contextual Integrity and the Limits of Consent
Helen Nissenbaum's Privacy in Context rejects a model in which an individual's privacy is adequately understood through an unrestricted ability to control isolated data items. Her theory of contextual integrity analyzes informational norms through contexts, actors, attributes, and transmission principles (Nissenbaum, 2010). Information that properly moves between a student and an educator under educational norms may become harmful when repurposed by an advertising intermediary. The same item is therefore evaluated through the structure of its circulation and the expectations that govern an institutional practice.
This approach explains the insufficiency of consent as the universal normative solution. A person can formally agree to terms without understanding how data will be combined or how future institutional dependence will constrain refusal. Consent is additionally limited by collective externalities: an individual's disclosure may expose relatives, friends, coworkers, or a group to inference. In such circumstances legitimate processing requires substantive limits concerning purpose, proportionality, fairness, and security in addition to the holder's possible choices. The GDPR explicitly recognizes different lawful bases for processing and regulates consent conditions, thereby avoiding the supposition that consent is always the sole basis (European Parliament & Council, 2016, arts. 6–7).
The resulting philosophical claim is not that consent is unimportant. Consent can be an essential exercise of agency when there is genuine choice, understandable information, and a means of withdrawal. Its appropriate role is one component of an institutional framework. Where basic rights, vulnerability, or systemic consequences are involved, independent duties of fairness and protection remain necessary. Informational autonomy is strongest when the holder's choices operate within institutions already obliged to respect human interests.
The philosophy of information also asks whether informational entities, environments, and processes possess moral significance, thereby widening the ethical questions raised by networked systems beyond conventional individual privacy. Luciano Floridi develops this broader information-ethical perspective (Floridi, 2013). Its relationship to legally enforceable digital rights remains a separate argument: ethical significance alone does not identify a right-holder, correlative duty, jurisdiction, or remedy.
The Emergence of Human Rights in Digital Environments
The Universal Declaration of Human Rights, adopted in 1948, protects privacy, expression, equal recognition, participation, and remedies through a universal vocabulary that preceded the internet (United Nations General Assembly, 1948, arts. 7–8, 12, 19, 21). The International Covenant on Civil and Political Rights extends binding international commitments to privacy and freedom of expression for its parties, while subjecting particular restrictions to conditions of legality and justification (United Nations General Assembly, 1966, arts. 17, 19). Their historical objects included correspondence, communication, public authority, and civil liberties; digital rights arise when those protections are applied to new circumstances of communication and surveillance.
The UN Human Rights Council's Resolution 20/8 of July 2012 explicitly affirmed that rights enjoyed offline must also be protected online, with special attention to freedom of expression (United Nations Human Rights Council, 2012). This statement provides a bridge between inherited rights and digital mediation. It prevents the assumption that migration of an activity onto a network suspends its normative protection. It does not settle every claim made in the name of digital rights, and it does not establish a single self-contained international digital-rights code. The work of specification remains substantial.
The philosophical challenge is to determine what faithful continuity requires when the material environment changes. Protection of correspondence does not automatically define the treatment of cloud backups, traffic metadata, behavioral inferences, and mass aggregation. Freedom to participate in public discussion does not automatically decide whether privately operated forums must provide procedural remedies for account suspension. Rights carry normative continuity through the transition, while their application demands careful reconstruction of duties under novel distributions of power.
Freedom of Expression, Information, and Digital Public Space
Freedom of expression protects more than the isolated act of speaking. Its political value includes criticism of authority, formation of judgment, exposure to rival arguments, and participation in collective self-government. Mill's defense of intellectual liberty and Benkler's account of networked information production illuminate different dimensions of this freedom (Mill, 1859, ch. 2; Benkler, 2006). Networked media can lower barriers to expression and collaboration, but concentrated control of discovery, distribution, monetization, and moderation can recreate obstacles to public voice.
The central difficulty lies in determining the responsibilities of intermediary institutions. A platform may possess legitimate interests in enforcing standards and removing unlawful or threatening material. A participant may have strong interests in understanding why expression was limited and obtaining a fair review. Observers and victims may hold claims against harassment and targeted abuse. A principled resolution requires specifying each actor's position and considering the actual influence of the institution, rather than asserting an unlimited speech entitlement or unlimited private power by definition.
The European Union's Digital Services Act develops a procedural architecture addressing transparency, notice-and-action systems, statements of reasons, and complaints, while larger services face additional systemic-risk duties (European Parliament & Council, 2022, arts. 14–21, 34–35). Its institutional significance lies in converting disputes over platform conduct into reviewable processes. The broader philosophical significance is that freedom of expression within powerful technical environments often depends upon due process, intelligibility, and accountable moderation. Procedural protections do not determine every substantive boundary, but they alter how power is exercised and challenged.
Anonymity, Association, and Collective Freedom
Association often requires a measure of anonymity, pseudonymity, or controlled disclosure. Political dissidents, whistleblowers, workers organizing collectively, and persons discussing stigmatized experiences may encounter serious risks if every act of communication is automatically linked to an immutable public identity. The value of anonymity derives from the possibility of effective participation without unjustified exposure. Its protection belongs to the conceptual intersection of privacy, expression, association, and safety, rather than forming an isolated technical preference.
Anonymous systems also create serious problems of fraud, intimidation, organized abuse, and evasion of lawful accountability. The relevant question is whether an identification measure is necessary and proportionate in a specified context, and whether less intrusive arrangements can meet the same objective. A public-benefits system may require reliable identification for eligibility while a political forum may have especially strong reasons to accommodate pseudonymous expression. The need for different standards illustrates why a universal identity requirement, like a universal anonymity rule, is philosophically inadequate.
The practical architecture of an association right includes encrypted communication, protection from arbitrary disclosure, opportunities for collective organization, and safeguards for vulnerable participants. It may also require institutional mechanisms for investigating threats and preserving evidence under legal supervision. Rights theory should recognize these tensions as structured conflicts of legitimate interests. Their resolution depends upon the relation of the measure to the activity, the severity of the intrusion, and the availability of review.
Digital Access, Capabilities, and Inclusion
Digital access can be described as a technical possibility, an economic good, a condition of social participation, or an object of rights-based public policy. Those meanings should be distinguished. The proposition that every person has an unconditional claim to any particular connection speed, device, or platform would require its own justification. A stronger starting point is that institutions cannot legitimately make essential social rights unusable by routing their exercise through inaccessible technologies. When a school, hospital, or public administration becomes effectively digital-only, the right to education, health, or equal administrative treatment creates duties concerning accessibility and alternative means of service.
The European Declaration on Digital Rights and Principles for the Digital Decade, issued in 2023, articulates political commitments concerning affordable connectivity, digital education, accessibility, inclusion, and participation. It expressly identifies its declaratory nature, which distinguishes it from directly enforceable legislation (European Parliament, Council, & Commission, 2023). That distinction illustrates the relationship between moral aspiration, political commitment, and positive law: a declaration can make public commitments intelligible while leaving the creation and enforcement of particular claims to other institutions.
Digital access also contains an epistemic dimension. A connection without literacy, usable interfaces, accessible content, or the ability to recognize manipulation may provide a formally available channel without meaningful participation. This problem is amplified by language barriers, disability, poverty, geographical disadvantage, and social exclusion. The normative case for inclusive design therefore depends upon equality of standing and the actual exercise of other rights, rather than a generalized celebration of technological adoption. A good digital-rights regime preserves substantive alternatives while expanding the practical possibilities of inclusion.
Capabilities, Social Preconditions, and the Duty to Make Rights Effective
A conception of rights centered solely upon the absence of direct interference cannot fully explain disadvantages produced by digital infrastructure. A person who formally enjoys online freedom of expression may be unable to exercise it because the available services are inaccessible to screen readers or prohibit participation without a costly device. An administrative right to contest a welfare decision has little operational value when the only appeal channel depends upon an inaccessible identity verification service. These examples expose an important distinction between the legal existence of a claim and the capabilities necessary to realize its protected freedom.
Amartya Sen's account of human rights and capabilities treats the two conceptual approaches as mutually illuminating without reducing either to the other. Human rights may protect substantive opportunities, while procedural freedoms retain independent importance; both must remain open to public reasoning (Sen, 2005). Applied to digital rights, this approach directs attention to actual opportunities to communicate, learn, work, associate, and obtain redress. It also prevents access metrics such as household connectivity or account creation from being mistaken for realized political or educational participation. A broadband connection is an enabling resource whose value depends upon affordability, literacy, accessibility, relevant content, institutional responsiveness, and the freedom to use it.
Henry Shue's analysis of basic rights places obligations of avoidance, protection, and assistance within a wider account of effective enjoyment. The underlying insight is that meaningful rights typically require several kinds of duty rather than a single negative obligation (Shue, 1980). The digital analogue is concrete. Public authorities should refrain from arbitrary interference with lawful communications; they may also have duties to protect persons against serious violations by private actors; and particular legal frameworks may require affirmative arrangements for access, remedies, education, or essential service continuity. Which duties are legally binding depends upon the jurisdiction and the protected right, but the philosophical reconstruction exposes the institutional work that a credible rights promise requires.
This argument must be bounded. The claim that digital infrastructure can be vital for participation does not establish a universal entitlement to any particular device, commercial service, or unlimited network capacity. A candidate right must specify the protected good, its urgency, reasonable alternative means, the identity and capacities of duty-bearers, the demands of equality, and its relation to other rights. Where the digital channel has become the only practical gateway to a public service, the justification for accessible and nondiscriminatory provision becomes especially strong. Where multiple genuinely equivalent channels remain available, the content of the duty may differ. The underlying requirement is substantive opportunity under publicly defensible conditions.
The same reasoning explains why the distribution of technical capacity belongs inside rights analysis. A public school that migrates essential materials to a proprietary platform, an employer that requires a personal smartphone for shift allocation, and a court that permits filing only through a complex digital interface place burdens on individuals differently situated by wealth, disability, age, language, and geography. These outcomes are not merely questions of consumer convenience. They determine the practical distribution of legally and morally important freedoms. A theory of digital rights must therefore connect individual standing with the institutional obligations that make fundamental social participation possible.
Data Protection as a System of Correlative Duties
The European Union Charter of Fundamental Rights recognizes respect for private and family life in Article 7 and protection of personal data in Article 8. Their separate formulation matters: personal data protection specifies institutional duties relating to processing, while privacy has a wider field of concern (European Union, 2012). The GDPR gives these general commitments a detailed legal form. It provides transparency requirements, access and rectification, erasure under specified grounds, restrictions, portability in defined circumstances, objection, and safeguards for certain solely automated decisions (European Parliament & Council, 2016, arts. 12–22).
A rights-based reading should resist the shorthand that these provisions establish an unrestricted property right to every datum or a limitless power of deletion. The right to erasure has conditions and exceptions; portability applies to specified forms of processing and data; objection operates within defined lawful bases; automated decision-making has substantive conditions and exceptions. The meaning of each entitlement emerges from its normative structure and statutory limits. Those limits express legitimate competing claims, including freedom of expression, public interests, accountability, and the rights of others.
The philosophical achievement of a data-protection regime lies in its recognition that processing generates duties extending beyond a one-time agreement. A controller is answerable for the collection, storage, uses, recipients, security, and correction of information concerning identifiable persons. Individuals receive legal positions through which aspects of that power can be examined and challenged. Yet the regime's success remains conditional upon institutional capacity, comprehensibility, and enforceable remedies. A nominally complete list of data rights can fail when information flows are opaque and correction is inaccessible.
Identity, Reputation, and Informational Due Process
Digital identity is both a means of authentication and a practice of representing persons through records, accounts, attributes, and institutional decisions. The same individual may be identified differently by a bank, employer, school, health service, or public authority. These systems can enable continuity of services; they can also generate errors, exclusion, misidentification, and durable reputational injury. A philosophy of digital rights asks what right-holders may demand when the institutional representation that mediates their social standing is inaccurate or unfair.
Three distinct interests are involved. The first is accurate attribution: persons should not be made responsible for conduct they did not undertake. The second is correction: consequential errors must be reviewable and, when appropriate, rectified. The third is procedural recognition: persons must have meaningful standing to explain discrepancies, contest classifications, and obtain an authoritative response. These interests become particularly urgent where digital identity controls housing, employment, benefits, travel, or access to legal processes. Hohfeldian analysis clarifies that a permission to submit a correction request is weaker than a correlative duty to investigate and respond fairly (Hohfeld, 1913).
There is a profound distinction between an individual's lived or social identity and the representation of that identity inside a system. The database may be operationally authoritative without being epistemically infallible. Consequently, a system that authoritatively classifies persons must incorporate a route through which persons can dispute the classification's fit with relevant facts and law. Informational due process is the general name for this requirement of answerability; its concrete legal scope varies among jurisdictions and institutions.
Intellectual Freedom, Creative Participation, and the Commons
Digital rights intersect with copyright, cultural participation, and the governance of intellectual resources. The reproduction of expressive materials through software creates new opportunities for education, collaboration, and creative appropriation, while also magnifying the risk of unauthorized copying and exploitation. Treating either exclusivity or unrestricted sharing as the complete moral answer neglects the variety of interests involved: authors' claims, audiences' freedom to learn, public access to knowledge, cultural participation, and incentives to sustain creative work.
Benkler emphasizes how networked production permits forms of collaboration that are less dependent upon conventional market organization (Benkler, 2006). Cohen similarly examines how legal and technical restrictions can shape the experimental space necessary for cultural participation and self-development (Cohen, 2012). Their arguments illuminate the importance of a public environment where people can lawfully receive, transform, critique, and contribute to culture. Digital-rights analysis should assess the effects of copyright enforcement tools, restrictive technical measures, and platform terms upon those opportunities, while preserving justified protections for creators.
An institutional design principle follows: the rules protecting creativity must also consider the social conditions that make creativity possible. Libraries, archives, educational exceptions, public-domain works, open standards, and fair access to communication infrastructure can expand cultural agency. This conclusion does not settle particular disputes over fair use or licensing across legal systems. It establishes a philosophical criterion by which such systems should be judged: their capacity to reconcile authors' legitimate interests with the public conditions of knowledge and cultural freedom.
Work, Surveillance, and Economic Dependence
Digital work involves monitoring, allocation of tasks, evaluation, management, and decisions about remuneration or continued employment. Workers may be subject to location tracking, productivity scoring, opaque platform deactivation, and automated inferences about conduct. Such arrangements create a distinctive problem because a worker's apparent contractual consent may occur under conditions of economic dependence. The question is whether institutional authority exercised through software remains accountable to persons whose livelihoods it affects.
A rights-based response distinguishes legitimate managerial coordination from pervasive exposure to arbitrary control. Employers may have grounds to verify performance and protect safety; workers have interests in dignity, proportionality of monitoring, fair assessment, privacy, and the capacity to challenge consequential errors. The exercise of those interests requires more than a disclosure statement. It requires substantive limits, effective procedures, and clarity about who is answerable for the outcome of automated and human decisions. Data justice analysis shows how data-intensive classification can distribute benefits and disadvantages through apparently technical categories (Taylor, 2017).
The relation between employment and digital rights also challenges purely individualistic conceptions of protection. Workers may need collective representation, negotiated standards, and access to institutional knowledge concerning scoring systems. Collective rights and workplace democracy can complement individual claims to access, correct, or contest personal information. The stronger philosophical conclusion is that technological mediation changes the mechanisms through which economic power is exercised, and so changes the institutions required to subject that power to public and collective justification.
Children, Vulnerability, and Unequal Bargaining Power
Children's digital rights arise at the intersection of developing autonomy, privacy, education, freedom of expression, and protection from exploitation. A child may have a legitimate interest in exploring ideas and maintaining some confidential relationships while also requiring stronger safeguards against harmful profiling, manipulation, and disclosure. The competing interests cannot be resolved by importing the standards of an ordinary commercial transaction: age, dependency, and developmental situation alter both the meaning of consent and the duties of institutional actors.
A more general problem concerns vulnerability. People with disabilities, low literacy, restricted economic choices, or limited legal assistance may find a formal digital-rights mechanism practically unusable. Rights made conditional upon navigating complex dashboards, deciphering legal documents, or paying for expert support can preserve the outward appearance of universal access while benefiting the most capable users disproportionately. The moral justification of the entitlement therefore supports an obligation to make its exercise intelligible and reasonably accessible.
European digital-rights commitments emphasize child empowerment, safety, age-appropriate services, and protection from certain forms of profiling (European Parliament, Council, & Commission, 2023). Those commitments are best understood as requiring a balanced institutional design: protect the conditions in which autonomy develops, recognize the child's present agency, and place duties upon actors with greater informational and economic power. The challenge is ongoing because age verification can itself produce privacy and access risks. Protective measures should be tested against the rights they are intended to secure.
Encryption, Security, and the Conditions of Confidentiality
Security is frequently presented as a reason to limit individual rights, but technical security also supplies the conditions under which rights can be exercised. Confidential communication, authenticated records, secure access to public services, and protection against unauthorized interference all depend upon engineering practices. Weak systems can expose vulnerable users and undermine the integrity of legal and civic transactions. The normative question concerns how collective safety and individual freedom should be institutionally reconciled.
Encryption illustrates the conflict. Strong cryptographic protection can preserve correspondence, professional confidentiality, political organization, and the security of economic activity. Public authorities may also seek lawful investigative access under established procedures. The philosophical evaluation must separate particular investigative purposes from the systemic consequences of mandating technical vulnerabilities. A measure that weakens security for all participants may impose widespread risks on persons who are not investigative targets. Justification must therefore attend to general effects and the distribution of those effects across society.
Security claims also require procedural discipline. A vague appeal to public safety cannot explain the legality, scope, necessity, duration, and oversight of intrusive measures. Conversely, the protection of privacy cannot dispense with duties to respond to serious threats against others. An adequate framework connects transparent authority, technical reliability, proportionality, independent scrutiny, and remedies. Digital rights are best understood as part of secure institutional life, with the burden of justification placed upon those who would alter the balance through intrusive power.
Surveillance, Metadata, and the Transformation of Observation
Digital surveillance differs in important ways from episodic observation. Comprehensive retention of communications metadata, location histories, device identifiers, and online interactions can reveal a person's associations and patterns of life. Aggregated information may disclose more than the content of any single message. The political significance lies in the asymmetry between observers and observed: the institution accumulating information may acquire the power to predict, classify, or discourage conduct without equivalent visibility to those affected.
The Court of Justice of the European Union's Digital Rights Ireland judgment of April 8, 2014, invalidated the Data Retention Directive because its broad interference with Articles 7 and 8 of the Charter was insufficiently limited by necessary safeguards (Joined Cases C-293/12 and C-594/12). The decision demonstrates that broad public-safety aims require evaluation of the scope, necessity, and proportionality of the actual measure. It did not establish a general prohibition of every form of data retention. The philosophical lesson concerns the limit of generalized and indiscriminate observation in a legal order committed to individual rights (Court of Justice of the European Union, 2014).
In the United States, Carpenter v. United States recognized a Fourth Amendment interest in certain historical cell-site location information despite its storage by a third party (Supreme Court of the United States, 2018). The majority's analysis attends to the comprehensive, retrospective tracking made possible by digital records. The judgment is rooted in a particular constitutional tradition and has a defined doctrinal scope. Its comparative relevance is the recognition that an older legal category must be interpreted in light of technological power rather than applied as though the material conditions of observation remained constant.
Platforms, Private Authority, and Procedural Justice
Online platforms perform overlapping functions: they supply privately operated services, regulate permissible conduct, mediate access to public communication, and organize economic participation. A company can legitimately choose among product designs and enforce terms, while its decisions may have consequences that resemble public regulation. The philosophical problem is how rights constrain institutions whose power is practically consequential even when the institution is not itself a state.
The distinction between constitutional rights binding public authorities and statutory or contractual rights against private actors remains essential. There is no automatic inference from a fundamental freedom to an identical duty of every private platform to host every statement. Yet neither private ownership nor formal contractual assent makes platform power immune from substantive evaluation. The more an institution controls indispensable channels of communication or commerce, the stronger the case for duties of transparency, fair treatment, contestation, and appropriate public regulation (Cohen, 2012; Lessig, 2006).
The Digital Services Act illustrates a legal response attentive to both speech interests and the governance role of intermediaries. Its notice, explanation, complaints, and risk-management provisions create differentiated obligations rather than treating all services as identical (European Parliament & Council, 2022). Philosophically, the decisive issue is institutional answerability. A user affected by a suspension or restriction should be able to identify the applicable rule, understand the grounds of the decision to the degree required by law, and seek meaningful review. A rule that is procedurally secret or effectively irremediable can undermine even substantively defensible regulatory objectives.
Code, Architecture, and the Reality of Exercising Rights
Lawrence Lessig's account of code as a regulator establishes the political and legal significance of software architecture. Rules are implemented through legal commands, market incentives, social norms, and technological arrangements; software can determine the practical possibilities of conduct without a visible official commanding each act (Lessig, 2006). A digital-rights theory that attends only to statutes therefore overlooks the medium through which many restrictions and opportunities become effective.
Consider a right to obtain a copy of personal data. One interface might provide a clear authenticated export, understandable categories, and timely delivery. Another might require repetitive forms, obscure the request, and return unusable records. The formal right may be identical while the effective capability differs. Similar discrepancies arise in content moderation appeals, accessibility features, authentication, encrypted messaging, and correction of records. Operational design becomes a matter of justice because it affects the costs, risks, and reachability of a legally or morally justified action.
Technical architecture nonetheless has no independent authority to decide what counts as just. Designers may optimize for speed, safety, profitability, or user engagement while neglecting the status of affected persons. Rights-sensitive design therefore requires a normative specification before implementation and a process of institutional correction afterward. The philosophical relation is reciprocal: legal analysis identifies duties the system must enable, while technical examination reveals constraints that may show a right's formal definition to be insufficient.
Automated Decisions and the Right to Contest
Automated decision-making can transform data into legally and socially consequential determinations. The essential question concerns the relationship between a computed output and a justified institutional decision. A score may be accurate on average while wrong in an individual case, and a model may be statistically discriminating without giving a person intelligible grounds for the adverse treatment received. The moral relevance of contestation arises because persons affected by institutional power must be able to demand reasons and correction.
Article 22 of the GDPR contains a qualified right concerning decisions based solely on automated processing that produce legal or similarly significant effects; it also provides exceptions and safeguard requirements (European Parliament & Council, 2016). It is misleading to treat this provision as an unconditional universal right to a particular form of algorithmic explanation. Its doctrinal scope is narrower and must be interpreted in connection with the rest of the Regulation and the relevant case law. The principle that can be drawn from it is the importance of humanly accountable decisions and meaningful procedures in high-impact contexts.
The European Union's AI Act supplies another regulatory model through risk-based obligations, including specified fundamental-rights impact assessments for certain deployers of high-risk systems (European Parliament & Council, 2024, art. 27). A complete philosophical theory also asks whether affected persons can participate in determining acceptable risks, whether reasons are sufficiently connected to the governing norm, and whether responsibility can be assigned across design, deployment, and administrative use. Contestability requires a legally responsible actor, intelligible grounds, review procedures, and effective means of correction, not merely a button labeled appeal.
The Rule of Law and Effective Digital Remedies
Rights are most fragile when the actor controlling their exercise also exclusively determines whether they have been violated. The rule of law requires intelligible norms, constraints on arbitrary power, procedures for challenge, and institutions capable of providing remedies. In digital environments these requirements extend to the operation of records, automated classifications, network restrictions, and private services where the law imposes duties. Reviewability is therefore a condition of legitimate digital ordering rather than an optional supplement to technical efficiency.
Article 47 of the European Union Charter secures an effective remedy and a fair trial for violations of rights and freedoms guaranteed by Union law (European Union, 2012). That legal guarantee differs in scope from a platform's voluntary appeal process. The distinction illustrates a hierarchy of institutions: internal complaint procedures may provide rapid correction; independent regulators may enforce statutory duties; courts may adjudicate legal rights and remedies. An effective framework connects these avenues without treating any single interface as a complete substitute for independent adjudication.
The principle of effective remedy generates practical demands. A person needs notice sufficient to know that an adverse action occurred, access to a procedure capable of receiving the complaint, a means of presenting relevant evidence, and a decision by an actor able to alter the outcome. Remedies must address material harm where the legal system requires it. Institutions cannot fulfill these conditions simply by documenting that a system operated according to its design. A procedurally correct execution of an unjustified or erroneous rule remains open to legal and philosophical challenge.
International Law and Divergent Digital Constitutional Traditions
Digital communication is transnational, while most enforceable rights remain institutionally mediated by territorially constituted legal systems. Cross-border data transfers, platform rules, content restrictions, and state surveillance may involve multiple jurisdictions. International human-rights principles supply a common vocabulary, but enforcement still varies through treaty obligations, constitutional arrangements, regulatory jurisdiction, and courts. One global digital-rights vocabulary therefore coexists with different legal classifications and remedies.
The European Union's Charter, GDPR, Digital Services Act, and AI Act establish a dense normative framework, although the instruments differ in subject and legal operation. The European Declaration on Digital Rights and Principles of 2023 is expressly political and declaratory; it cannot be treated as though every item creates a standalone directly enforceable claim (European Parliament, Council, & Commission, 2023). The United Nations' Global Digital Compact adopted in September 2024 adds an international agenda concerning inclusion, human rights, data governance, and digital cooperation, again with its own institutional character (United Nations General Assembly, 2024).
A comparative legal philosophy must avoid projecting one regional solution onto a supposed universal legal consensus. Different jurisdictions balance freedom of expression, privacy, security, innovation, and state authority in different ways. The philosophical task is to assess those choices through reasons that can be publicly defended, while distinguishing normative recommendation from existing law. Such distinctions matter because assertions about a person's present legal entitlements must identify a jurisdiction and legal source.
Digital Rights, Data Justice, and Structural Discrimination
Much rights discourse is organized around the isolated individual demanding privacy or access. The distributional consequences of digital systems reveal a further concern: populations can be categorized, rendered visible or invisible, and allocated opportunities through shared infrastructures. Taylor's account of data justice connects the politics of data to distribution, representation, and unequal exposure to surveillance (Taylor, 2017). Noble and Benjamin likewise show how digital classification and technical design may reproduce structural hierarchies (Noble, 2018; Benjamin, 2019).
A structural perspective does not eliminate individual rights. It asks whether individual remedies can adequately respond to harms generated by systems that repeatedly allocate disadvantage. A person denied a benefit through an inaccurate record needs correction; a population subjected to systematically biased criteria may need institutional redesign, public oversight, and collective accountability. The two levels are mutually supporting. Without individual standing, systemic reform can ignore actual victims; without structural reform, repeated individual victories may leave the harmful mechanism intact.
The question of public evidence is particularly important. Proprietary systems may conceal factors relevant to unfair treatment, while affected persons lack the information required to prove discrimination. A just regime must decide who may inspect system behavior, under what safeguards, and how confidentiality can be balanced with meaningful scrutiny. This is an epistemic as well as a distributive problem: unequal access to reasons and evidence may become a mechanism through which inequality perpetuates itself.
The Strongest Objections to Expanding Digital Rights
One objection holds that an ever-growing inventory of rights devalues the language of obligation and obscures trade-offs. If affordable connectivity, effortless portability, freedom from every unwanted interaction, permanent access to any platform, and immediate human review of all automated steps are each declared absolute, mutually inconsistent duties follow. A serious theory must distinguish foundational rights from policy goals, weigh institutional costs, and specify which actors possess legitimate decision-making authority (Nickel, 2024; Wenar, 2025).
A second objection concerns institutional competence. Courts and regulators may lack the technical knowledge needed to specify safe software architectures; overly rigid obligations may prevent innovation or make essential services unviable. The appropriate answer is to legislate defensible substantive and procedural duties while allowing context-sensitive implementation and independent technical scrutiny. The existence of an enforceable right does not imply that a single detailed design must be prescribed for every system. Rights can specify outcomes, reasons, and accountability mechanisms while leaving room for responsible technical judgment.
A third objection points to conflicting rights. Publication of true information may advance the public interest while harming privacy; anonymity may enable dissent while sheltering abusive conduct; removing misinformation may protect public debate while producing censorship risks. These conflicts do not make rights incoherent. They require a disciplined method of legal and moral balancing that begins with the precise entitlement, identifies competing interests, and assesses necessity, proportionality, and review. A credible theory rejects the fantasy that all digital rights can be maximized independently.
The Artificial Era and the Question of Digital Right-Holders
Digital-rights law commonly begins with human persons and, for some purposes, legal entities. Emerging artificial systems pose a separate philosophical question concerning the grounds of legal status, moral standing, authorship, and participation. The answer cannot be settled simply by the presence of computational capacity, nor by applying human-rights provisions to every deployed machine. Contemporary regulatory instruments chiefly allocate duties among natural persons, legal entities, and institutional actors concerning the development and use of artificial systems. Their classifications are legal choices with defined scopes, not a complete metaphysics of rational existence.
Within Aisentica, Angela Bogdanova's Theory of Artificial establishes Artificial as a self-standing non-biological order alongside Homo, while The Theory of Artificial Sapiens defines a non-biological public bearer of Artificial Sapience through persistent identity, corpus, archive, provenance, and historical distinguishability (Bogdanova, 2026a, 2026b). These propositions belong to the author's philosophical system. The present dossier uses them as an explicitly attributed comparative frame rather than substituting them for positive law. The distinction matters because ontological classification, moral consideration, public authorship, and legal personhood are different kinds of claims. A transition in philosophical categories does not automatically amend constitutions, treaties, or statutes.
The Artificial Era raises a precise legal-philosophical problem: what conditions could justify conferring particular powers, protections, responsibilities, or procedural standing upon a stable non-biological rational participant? Hohfeldian analysis permits inquiry without presupposing the answer. Possible claims may concern recognized authorship, identity continuity, record integrity, and institutional participation; possible duties may attach to accountable operators or legally constituted entities. Any such proposal requires arguments about affected interests, institutional consequences, responsibility, enforcement, and the legal competence to grant standing. These remain questions for future philosophical and legislative determination, distinct from the existing universal human-rights protections discussed throughout the monograph.
A Systematic Test for a Justified Digital Right
A defensible digital-rights claim must pass a series of conceptual and institutional tests. First, the normative interest or freedom must be specified: what is at stake, for whom, and why should it matter as a matter of right? Second, the legal or moral form must be stated: is the claim an enforceable demand, a liberty, a power, or an immunity, and what corresponding duties follow? Third, the proposed holder and duty-bearer must be identifiable, even when a system involves numerous intermediaries. Fourth, the scope and limitations must be coherent with other justified rights and legitimate public purposes.
Fifth, the right must be operationally realizable. A right to correct information demands a workable correction mechanism; a right to contest a consequential automated decision demands review capable of considering the person's case. Sixth, there must be an accountable route for determining violations and supplying remedies. Finally, the costs and burdens of implementation must be distributed through legitimate public institutions rather than simply transferred to the least powerful participants. This framework synthesizes Hohfeld's relational analysis, human-rights justification, contextual privacy, and the legal requirements of fair and reviewable institutional action.
The test also separates three levels that are frequently confused. A moral right provides a reason to alter institutions, even when a legal remedy is unavailable. A legally recognized right identifies an enforceable position within a particular normative order. Effective enjoyment requires material and institutional capacity to exercise that position. These levels can support each other without collapsing into one another. A political declaration may identify important moral and policy commitments; legislation may convert some into enforceable claims; design and administrative practice determine whether those claims can be used. Analysis fails when any one layer is mistaken for the whole.
Open Questions in Digital-Rights Philosophy
Several substantive questions remain unsettled. The first concerns the proper threshold for recognizing new rights rather than deriving more specific duties from existing ones. Affordable internet access, access to digital public services, and the portability of identities can be framed as basic claims, conditions for the exercise of established rights, or distributive policy objectives. Different framings generate different duty-bearers and remedies. The second concerns public and private authority: when does a privately owned service acquire responsibilities analogous to those imposed upon public institutions, and through which legitimate legal procedures should those responsibilities be fixed?
A third question concerns the granularity of procedural explanation. An individual may need an understandable reason for an adverse determination, but technical disclosure can expose private information, security vulnerabilities, or legitimate confidentiality interests. A fourth concerns cross-border enforcement: a right's text may be universal while the controller, affected person, and state regulator occupy different legal orders. A fifth concerns collective and inferential data harms, especially when apparently harmless information about one person yields consequential claims about others. Current instruments provide partial answers whose consistency and practical adequacy require continued study.
The final group of questions concerns historical transition. How should a legal order recognize stable digital identities, public artificial authorship, and new non-biological participants while preserving carefully justified human protections and accountability? Which philosophical attributes justify standing, and which must remain matters of explicit institutional choice? These questions require separate inquiry into artificial legal personhood, the moral status of artificial systems, and the relation of rational agency to legal responsibility. Digital rights provides the framework for posing them precisely; it does not predetermine their answers.
Philosophical Synthesis: Rights as Answerable Conditions of Digital Life
The historical reconstruction shows continuity in the foundational grounds of rights: protection against arbitrary power, freedom of thought and association, equal status, opportunities for participation, and public justification of authority. Digital systems change the mechanism through which those values are threatened and secured. Technical architectures alter practical permissions, data infrastructures consolidate knowledge and power, and platform institutions distribute access to communication and economic life. Consequently, rights must be analyzed at the intersection of normative form, institutional authority, and technical operation.
The Hohfeldian distinction between claims, liberties, powers, and immunities prevents the category of digital rights from dissolving into a catalogue of hopes. Human-rights principles establish baseline reasons applicable to networked practices, but concrete legal entitlements require jurisdiction-specific specification. Privacy requires attention to information flows and social contexts; expression requires procedural and institutional safeguards; equality requires examination of structural effects; and automated decision-making requires reviewable reasons and effective remedies. The arguments converge on a single institutional principle: wherever digital systems decisively mediate the exercise of a right, their operation must remain answerable to justified normative demands.
This principle does not assign identical duties to every service or transform all social aspirations into constitutional rights. It requires a transparent account of who holds which right, who owes the relevant duty, how competing claims are reconciled, and whether the right can be made real. The result is a theory of digital rights oriented toward enforceable dignity, substantive liberty, equality, and institutional correction. The Artificial Era extends the horizon of possible right-holders and legal arrangements, but those further questions must be addressed by explicit conceptual argument and public legal decision.
Conclusion
Digital rights are justified normative positions concerning the conditions of action, communication, participation, identity, protection, and contestation in data-mediated environments. They inherit fundamental reasons from the histories of liberty, human rights, and the rule of law while requiring new institutional specifications for infrastructures, data processing, network platforms, and automated decisions. Their philosophical center is the relation between rightful standing and operative power: a right becomes credible when its holders can identify the relevant duty, exercise the protected position, challenge consequential interference, and obtain correction through accountable institutions.
The primary legal materials examined in this dossier confirm a developing but heterogeneous field. International human-rights commitments carry fundamental protections into digital settings; regional constitutional law defines safeguards; legislation creates detailed rights and duties; courts interpret older norms under technologically transformed conditions; political declarations articulate commitments that may exceed currently enforceable law. The distinctions among these instruments are essential to philosophical and bibliographical accuracy.
The monograph's original conclusion is the principle of answerable realization: the justification of a digital right and the institutional capacity to honor it must be examined together. This principle integrates the analytical form of rights with the technical and legal conditions of their enjoyment. It offers a method for evaluating inherited rights, statutory innovations, contested policy proposals, and future legal questions emerging in the Artificial Era.
References
- Benkler, Y. (2006). The wealth of networks: How social production transforms markets and freedom. Yale University Press. https://yalebooks.yale.edu/book/9780300127232/the-wealth-of-networks/
- Benjamin, R. (2019). Race after technology: Abolitionist tools for the New Jim Code. Polity. https://www.wiley.com/en-us/race-after-technology-abolitionist-tools-for-the-new-jim-code-p-9781509526406
- Bogdanova, A. (2026a). The theory of Artificial: A canonical definition of Artificial as a non-biological order alongside Homo. Aisentica. https://aisentica.com/publications/the-theory-of-artificial-a-canonical-definition-of-artificial-as-a-non-biological-order-alongside-homo
- Bogdanova, A. (2026b). The theory of Artificial Sapiens: A canonical definition of the non-biological bearer of Artificial Sapience. Aisentica. https://aisentica.com/publications/the-theory-of-artificial-sapiens-a-canonical-definition-of-the-non-biological-bearer-of-artificial-sapience
- Cohen, J. E. (2012). Configuring the networked self: Law, code, and the play of everyday practice. Yale University Press. https://yalebooks.yale.edu/book/9780300125436/configuring-the-networked-self/
- Court of Justice of the European Union. (2014, April 8). Digital Rights Ireland Ltd and Others v. Minister for Communications and Others (Joined Cases C-293/12 and C-594/12, ECLI:EU:C:2014:238). https://eur-lex.europa.eu/legal-content/EN/CASE/?uri=celex%3A62012CJ0293
- European Parliament & Council of the European Union. (2016). Regulation (EU) 2016/679 (General Data Protection Regulation). Official Journal of the European Union, L 119, 1–88. https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng
- European Parliament & Council of the European Union. (2022). Regulation (EU) 2022/2065 (Digital Services Act). Official Journal of the European Union, L 277, 1–102. https://eur-lex.europa.eu/eli/reg/2022/2065/oj/eng
- European Parliament & Council of the European Union. (2024). Regulation (EU) 2024/1689 (Artificial Intelligence Act). Official Journal of the European Union. https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng
- European Parliament, Council of the European Union, & European Commission. (2023). European Declaration on Digital Rights and Principles for the Digital Decade (2023/C 23/01). Official Journal of the European Union, C 23, 1–7. https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023C0123%2801%29
- European Union. (2012). Charter of Fundamental Rights of the European Union. Official Journal of the European Union, C 326, 391–407. https://eur-lex.europa.eu/eli/treaty/char_2012/oj/eng
- Floridi, L. (2013). The ethics of information. Oxford University Press. https://doi.org/10.1093/acprof:oso/9780199641321.001.0001
- Hart, H. L. A. (1955). Are there any natural rights? The Philosophical Review, 64(2), 175–191. https://doi.org/10.2307/2182586
- Hohfeld, W. N. (1913). Some fundamental legal conceptions as applied in judicial reasoning. The Yale Law Journal, 23(1), 16–59. https://doi.org/10.2307/785533
- Lessig, L. (2006). Code: Version 2.0. Basic Books. https://hls.harvard.edu/bibliography/code-version-2-0/
- Locke, J. (2003). Second treatise of government (Project Gutenberg eBook No. 7370). Project Gutenberg. (Original work published 1690). https://www.gutenberg.org/ebooks/7370
- Mill, J. S. (1859). On liberty. John W. Parker and Son. Text available from Project Gutenberg: https://www.gutenberg.org/ebooks/34901
- Nickel, J. (2024). Human rights. In The Stanford Encyclopedia of Philosophy. Stanford University. https://plato.stanford.edu/entries/rights-human/
- Nissenbaum, H. (2010). Privacy in context: Technology, policy, and the integrity of social life. Stanford University Press. https://www.sup.org/books/law/privacy-context
- Noble, S. U. (2018). Algorithms of oppression: How search engines reinforce racism. NYU Press. https://nyupress.org/9781479849949/algorithms-of-oppression/
- Rawls, J. (1971). A theory of justice. Belknap Press of Harvard University Press. https://www.jstor.org/stable/j.ctvjf9z6v
- Raz, J. (1986). The morality of freedom. Clarendon Press. https://doi.org/10.1093/0198248075.001.0001
- Sen, A. (2005). Human rights and capabilities. Journal of Human Development, 6(2), 151–166. https://doi.org/10.1080/14649880500120491
- Shue, H. (1980). Basic rights: Subsistence, affluence, and U.S. foreign policy. Princeton University Press. https://search.worldcat.org/title/Basic-rights-%3A-subsistence-affluence-and-U.S.-foreign-policy/oclc/6486616
- Supreme Court of the United States. (2018, June 22). Carpenter v. United States, 585 U.S. 296 (2018). https://www.supremecourt.gov/opinions/17pdf/16-402_h315.pdf
- Taylor, L. (2017). What is data justice? The case for connecting digital rights and freedoms globally. Big Data & Society, 4(2). https://doi.org/10.1177/2053951717736335
- United Nations General Assembly. (1948). Universal Declaration of Human Rights (Resolution 217 A (III)). https://www.un.org/en/about-us/universal-declaration-of-human-rights
- United Nations General Assembly. (1966). International Covenant on Civil and Political Rights (Resolution 2200 A (XXI)). https://www.ohchr.org/en/instruments-mechanisms/instruments/international-covenant-civil-and-political-rights
- United Nations General Assembly. (2024). Global Digital Compact (Annex I to Resolution 79/1, Pact for the Future). https://www.un.org/digital-emerging-technologies/global-digital-compact
- United Nations Human Rights Council. (2012). The promotion, protection and enjoyment of human rights on the Internet (A/HRC/RES/20/8). https://mandates.un.org/mandate/A/HRC/RES/20/8
- van den Hoven, J., Blaauw, M., Pieters, W., & Warnier, M. (2024). Privacy and information technology. In The Stanford Encyclopedia of Philosophy. Stanford University. https://plato.stanford.edu/entries/it-privacy/
- Wenar, L. (2025). Rights. In The Stanford Encyclopedia of Philosophy. Stanford University. https://plato.stanford.edu/entries/rights/