Examples of Right to Privacy Violations in the United States

Meta description: Explore examples of right to privacy violations in the U.S., from unlawful searches and data exposure to workplace monitoring and medical privacy breaches.

The right to privacy in the United States comes from several sources, not one all-purpose rule. Constitutional protections limit certain government actions, while federal and state laws and common-law claims address specific conduct by businesses, employers, neighbors, and others. As a result, an invasion of privacy is not automatically a legal violation. The facts, the actor involved, the information collected, and the state’s laws all matter.

What Counts as a Right to Privacy Violation?

A privacy violation occurs when conduct breaches a legal protection or recognized privacy right. The relevant rule may come from the U.S. Constitution, a statute, regulations, or state common law. Some rules apply only to government agencies; others cover private organizations or individuals. A person may find an action intrusive or unfair without having a legal claim, so the specific circumstances are important.

Constitutional privacy protections are often connected to the Fourth Amendment’s limits on unreasonable government searches and seizures. Courts have also recognized privacy interests in particular contexts, including certain decisions about personal and family life. Constitutional claims generally require government involvement, although private conduct may be regulated by laws such as the Health Insurance Portability and Accountability Act (HIPAA), state privacy statutes, or state tort law.

Common-law privacy claims vary by state but often include four recognized categories: intrusion upon seclusion, public disclosure of private facts, false light, and appropriation of a person’s name or likeness. These are not identical everywhere, and some states recognize only some of them. A privacy complaint therefore needs to be assessed under the law that applies to the people and events involved.

Examples of Constitutional Privacy Violations

Unreasonable Government Searches

A search of a home without a valid warrant, consent, or an applicable exception can raise a Fourth Amendment issue. For example, officers who enter a home and search it without lawful authority may violate constitutional protections. Whether a search is unreasonable depends on details such as the officers’ basis for acting, the scope of the search, and whether an exception applies.

Fourth Amendment rules also apply in some settings beyond homes, including vehicles and personal belongings, but the level of protection differs by context. A person generally needs a reasonable expectation of privacy in the place or information searched to bring a claim. Searches at borders, searches incident to arrest, and emergency actions can follow different rules.

Accessing Digital Devices or Location Data Without Proper Authority

Searching a cell phone after an arrest is not automatically permitted simply because officers may search some physical items incident to an arrest. In Riley v. California (2014), the U.S. Supreme Court held that police generally must obtain a warrant before searching digital information on a cell phone seized during an arrest, subject to case-specific exceptions.

Location records can also raise constitutional questions. In Carpenter v. United States (2018), the Court ruled that obtaining historical cell-site location information in the circumstances before it generally required a warrant supported by probable cause. The decision was limited; it did not declare all government access to digital records unconstitutional. The type of data, duration of tracking, and legal process used can matter.

Surveillance Without Adequate Legal Process

Secret government monitoring may violate privacy protections when it is conducted without the legal authorization required for that kind of surveillance. Federal law, including the Foreign Intelligence Surveillance Act, governs certain forms of national-security surveillance, while the Fourth Amendment and other statutes can apply in different circumstances. The legality of surveillance depends on its purpose, target, methods, and authorization—not merely on whether it was hidden.

Examples of Privacy Violations by Businesses and Individuals

Intrusion Into Private Spaces or Communications

Installing a hidden camera in a bedroom, bathroom, or changing area can be an example of intrusion upon seclusion and may also violate criminal or civil statutes. Recording laws differ by state. Some states require consent from all parties to record certain private conversations; others generally require consent from one party. Video surveillance rules can differ from audio-recording rules, so the location and type of recording matter.

Repeatedly accessing someone’s private email, messages, or online account without permission may also create legal problems. Depending on the facts, conduct may implicate federal or state computer-access laws, wiretap statutes, or common-law privacy claims. A person’s password access, account ownership, consent, and the method used to obtain information can affect the analysis.

Publishing Private Facts

Public disclosure of private facts is a recognized privacy tort in many states. A possible example is publishing highly personal information about someone’s health or intimate life when the information is not of legitimate public concern and the disclosure would be highly offensive to a reasonable person. The precise test varies by state, and truth does not automatically defeat this type of claim in every jurisdiction.

This claim must be distinguished from defamation. Defamation generally concerns a false statement that harms reputation. Public-disclosure claims may concern truthful information, but liability is limited by legal defenses and constitutional protections, particularly when the subject is a public figure or the information relates to a matter of public concern.

Using Someone’s Name or Image for Commercial Gain

Using a person’s name, photograph, voice, or likeness in advertising without permission can violate a state right-of-publicity law or support an appropriation claim. For example, a company might use a private individual’s recognizable image in a product advertisement in a way that suggests endorsement. The rules differ across states, and use in news reporting, commentary, art, or other expressive works may receive stronger legal protection.

False Light and Misleading Personal Portrayals

Some states recognize a false-light privacy claim when a publication portrays a person in a highly misleading way that would be highly offensive. For example, editing a person’s image or words to imply involvement in conduct they did not engage in could raise concerns. False light is not recognized in every state and may overlap with defamation. Public-figure cases can also require proof of actual malice under constitutional standards.

Health, Financial, and Personal Data Examples

Improper Disclosure of Medical Information

HIPAA protects certain identifiable health information held by covered entities, such as health plans, many health care providers, and health care clearinghouses, and by their business associates. Examples of potential violations include disclosing a patient’s medical records to an unauthorized person, leaving records accessible to the public, or using protected health information outside permitted purposes without the required authorization or other legal basis.

HIPAA does not cover every organization that holds health-related information. An employer’s employment records, for example, are generally not protected by HIPAA merely because they contain medical details. Other federal or state laws may apply. The U.S. Department of Health and Human Services’ Office for Civil Rights investigates many HIPAA complaints, and its guidance explains who is covered and how to submit a complaint.

Exposing Social Security Numbers or Account Details

Displaying or sharing sensitive identifiers—such as Social Security numbers, bank account numbers, or login credentials—without appropriate authority or safeguards can expose people to identity theft and may violate sector-specific or state data-security laws. A data breach is not automatically proof of a legal violation; investigators examine the organization’s obligations, security practices, the information involved, and the circumstances of the exposure.

State breach-notification laws generally require organizations to notify affected people, regulators, or both after certain breaches of personal information. Requirements differ by state and may set deadlines, define covered data differently, and include exceptions. The Federal Trade Commission can take action against certain unfair or deceptive data-security practices under its authority, while other regulators oversee particular industries.

Online Tracking and Data Collection

Websites and apps may collect browsing activity, device identifiers, location, or other personal information. Collection is not automatically unlawful, but it can raise legal concerns if it violates a privacy promise, occurs without consent where consent is required, involves children’s information, or breaches a state or industry-specific law. The Children’s Online Privacy Protection Act, for example, imposes requirements on certain online services directed to children under 13 and services with actual knowledge they collect personal information from children under 13.

State privacy laws may give residents rights to learn what personal information certain businesses collect, request deletion or correction, or opt out of particular uses such as targeted advertising or certain data sales. Coverage thresholds and exceptions vary. A privacy policy can describe a company’s practices, but it does not by itself guarantee that every practice is lawful.

Privacy Violations in the Workplace, Schools, and Housing

Workplace Monitoring and Employee Records

Employers may monitor company devices, workplace communications, and work areas for legitimate reasons, but monitoring is subject to legal limits. Recording private conversations without required consent, accessing protected accounts, or collecting sensitive information unlawfully may create liability. Employees generally have less privacy expectation on employer-owned systems when they have been clearly notified of monitoring, but notice does not override every law.

Employers also handle medical and disability-related information under laws such as the Americans with Disabilities Act. In covered situations, medical information must be treated confidentially and kept separately from ordinary personnel files, subject to statutory rules and exceptions. State laws, collective bargaining agreements, and workplace policies may add protections.

School Searches and Student Information

Public school officials are government actors, but student searches are assessed under a standard that differs from the ordinary warrant rule. Under New Jersey v. T.L.O. (1985), the Supreme Court held that a school search generally must be reasonable at its start and in scope. Searching a student’s belongings without a reasonable basis, or conducting a search excessively intrusive for the circumstances, may raise legal concerns.

Schools that receive certain federal funding are also subject to the Family Educational Rights and Privacy Act (FERPA), which governs access to and disclosure of education records. FERPA generally gives parents rights over eligible students’ records, with rights transferring to the student at age 18 or upon attendance at a postsecondary institution. The law includes exceptions, and it does not create a general privacy rule covering every fact about a student.

Tenant Privacy and Landlord Entry

Landlords may have legal rights to enter rental units for repairs, inspections, or emergencies, but state and local laws often regulate notice, timing, and acceptable reasons. Repeated entry without proper notice, installation of prohibited surveillance, or entry for harassment may violate a lease, housing law, or privacy protections. There is no single nationwide notice period that applies to every rental situation.

How to Tell Whether an Incident May Be Illegal

These questions can help identify the relevant privacy rules, though they do not replace legal advice:

• Who collected or disclosed the information? Government agencies, health care providers, employers, schools, landlords, and online companies may face different rules.
• What information or space was involved? Medical records, account credentials, private conversations, a home, and public-facing information have different legal protections.
• Was there consent or legal authority? A warrant, valid authorization, contractual permission, or statutory exception may change the analysis.
• Where did it happen? State recording laws, privacy statutes, and common-law claims vary geographically.
• What harm or exposure occurred? Some laws require notice or particular forms of proof; others provide regulatory remedies even without a conventional damages claim.

What to Do After a Suspected Privacy Violation

People who suspect a violation can preserve evidence before it disappears. Useful records may include dates, screenshots, letters, account alerts, names of witnesses, and copies of relevant privacy notices or consent forms. If a device or account may be compromised, changing passwords from a secure device and enabling multifactor authentication can reduce further exposure.

Complaints may be directed to the agency that oversees the relevant issue. The HHS Office for Civil Rights handles certain HIPAA complaints; the Federal Trade Commission accepts reports about many consumer privacy and identity-theft matters; and state attorneys general or state privacy regulators may enforce state laws. Workplace, school, housing, and law-enforcement complaints may have separate channels and filing deadlines.

For serious or ongoing harm, an attorney licensed in the relevant state can assess whether the facts support a lawsuit, administrative complaint, or other remedy. Potential outcomes differ by law and may include an order to stop certain conduct, statutory damages, compensation for proven losses, or regulatory penalties. Prompt advice matters because filing deadlines, evidence rules, and available remedies vary.

Credible Sources for U.S. Privacy Rules

• U.S. Supreme Court, Riley v. California — searches of cell-phone data incident to arrest.
• U.S. Supreme Court, Carpenter v. United States — historical cell-site location information.
• U.S. Department of Health and Human Services — HIPAA information for individuals and complaint guidance.
• U.S. Department of Education — FERPA requirements and education-record rights.
• Federal Trade Commission — privacy and data-security guidance for businesses and consumers.