Why the NSA didn’t diminish your privacy but might have violated your right to privacy

According to a popular view, privacy is a function of people not knowing or rationally believing some fact about you. But intuitively it seems possible for a perpetrator to violate your right to privacy without learning any facts about you. For example, it seems plausible to say that the US National Security Agency’s PRISM program violated, or could have violated, the privacy rights of the people whose information was collected, despite the fact that the NSA, for the most part, merely collected information without examining it, and thus, for the most part, did not acquire knowledge about specific people. This pair of judgements creates the challenge of aligning one of the most popular accounts of what privacy is with a suitable account of the right to privacy. Call this the alignment challenge. In this paper, I criticize two recent attempts to answer the alignment challenge: one based on risk, proposed by Björn Lundgren, and one based on modal robustness, proposed by Carissa Véliz. I then offer my preferred response, which I call the inquiry account. According to this account, the right to privacy protects against certain forms of inquiry. This account explains why there is a gap between what privacy is a what the right to privacy protects people against. Moreover, it explains why it is possible to violate someone’s right to privacy without obtaining knowledge.