Where Does It Travel? The Contextual Integrity Router

Nissenbaum’s insight is that privacy is not secrecy but appropriate flow: a fact is governed by the norms of the context in which it arose. Pick a piece of information, send it somewhere new, and toggle the excuses institutions actually use — a signed form, a de-identification step, a vendor contract. Watch the lawful verdict and the appropriate verdict separate. Then strip the identifiers and see how little that buys.