Fundamentals

The ‘Nothing to Hide’ Argument: Privacy Is Not Secrecy

By Daniel Sardá · Published on October 21, 2026

6 min read1,214 words

Having nothing unlawful to hide does not mean one must live under observation. Privacy protects boundaries, context, and autonomy without preventing justified investigations.

“If you have done nothing wrong, you have nothing to hide.” The phrase can seem reasonable because it appeals to a legitimate concern: preventing crime and protecting other people. It also suggests a simple exchange. An innocent person provides information and, because there is nothing compromising in it, loses nothing important.

The problem lies in that last step. A person’s innocence does not mean that anyone has a right to watch them, build a profile of them, or repurpose their data. Privacy does not exist only to conceal wrongdoing. It preserves boundaries among different parts of life and allows people to decide who may know what, for what purpose, and under what rules.

Key idea: Having nothing unlawful to hide is not the same as having nothing personal to protect.

What the “nothing to hide” argument claims

In its strongest form, the argument holds that surveillance harms only people who fear that misconduct will be discovered. If a measure contributes to security and a person is innocent, resisting it may seem suspicious—or at least selfish.

That position should not be caricatured. Investigating crime requires obtaining information, and some threats may justify urgent measures. The serious question is not whether all observation must be forbidden, but what makes an investigation legitimate and what prevents the power to observe from becoming arbitrary.

Legal scholar Daniel J. Solove explains that the argument rests on an overly narrow idea of privacy: it assumes that privacy matters only because it conceals embarrassing or incriminating information. Yet information-related harms can also arise from aggregation, use for a purpose other than the one intended, mistaken interpretation, or the inability to correct a record. None of those problems requires the person concerned to have committed a crime.

Privacy and secrecy are not the same

Secrecy aims to keep something entirely unknown. Privacy, by contrast, often concerns regulating access. A conversation may be known to a friend while remaining private from an employer. A physician may need information that should not be given to an advertiser. An address shared to receive a package does not thereby become available for every purpose.

For this reason, individual privacy does not require isolation or permanent anonymity. Participating in society involves disclosing information. What matters is retaining reasonable expectations about its recipient, purpose, and circulation.

Philosopher Helen Nissenbaum calls this understanding of privacy contextual integrity. Whether an information flow is appropriate depends on the context, the actors involved, the type of data, and the rules governing its transmission. Sharing information in one setting is not unlimited permission to combine it, publish it, or use it in another.

Key idea: Information need not be secret to be out of place when its recipient, purpose, or context changes.

The flaw is in the inference, not the concern for security

The argument combines two different questions:

1. Has this person engaged in unlawful conduct?
2. Is it justified to collect, retain, or repurpose information about them?

Answering “no” to the first question does not require answering “yes” to the second. Justifying an intrusion requires reasons related to its purpose, scope, and safeguards. The absence of guilt does not by itself grant a general license to observe.

Consider a phone’s location history. One coordinate may seem trivial. A long sequence can support inferences about routines, relationships, or places someone visits. Some inferences will be accurate and some will not. The important change is not whether each item of data is secret, but what their combination makes possible and who can act on it.

The same problem arises when information is taken out of context. A public photograph, a purchase, or an old comment can take on a different meaning when assembled into a profile. The observed person does not necessarily control the categories assigned to them or know which decisions those categories may influence.

This also explains why “you can share less” does not fully answer the objection. In contemporary life, providing some data is part of ordinary activities. And consenting to one transaction does not mean accepting every future use. Consent is meaningful only when the purpose and conditions are sufficiently clear.

Targeted investigation and indiscriminate surveillance

Defending the right to privacy does not mean denying the state every ability to investigate. It means distinguishing a measure supported by evidence and directed at a specific purpose from broad collection that treats everyone as a potential suspect.

Article 17 of the International Covenant on Civil and Political Rights protects people against unlawful or arbitrary interference with privacy. In the international human-rights framework, an interference may pursue a legitimate aim and still be arbitrary if it lacks necessity, proportionality, or adequate safeguards. This framework does not decide every case on its own or replace the rules of each jurisdiction, but it does reject the idea that invoking “security” ends the discussion.

A justified form of surveillance should be able to answer at least these questions:

• Purpose: What specific, legitimate objective does it pursue?
• Necessity: Why is this measure needed rather than a less intrusive alternative?
• Proportionality: Are its scope and duration related to the risk?
• Due process: What authorization, review, and avenues for challenge exist?
• Accountability: Who oversees access, retention, and subsequent uses?

Emergencies may require speed. That does not make safeguards useless: special procedures and subsequent review can exist. The point is to prevent an operational exception from becoming permanent, uncontrolled authority.

Key idea: The alternative is not choosing between security and privacy, but deciding whether the power to observe is subject to reasons, limits, and oversight.

Privacy protects a sphere of autonomy

Living with the constant possibility of being watched changes the relationship between an individual and whoever concentrates information about them. The asymmetry matters: an institution can gather scattered fragments, interpret them, and make decisions, while the individual may not know what that institution knows or how it reached its conclusions.

From a liberal perspective, limits on observation protect more than data. They preserve room to think, associate, speak, and experiment without having to justify every innocent act to an authority. That sphere does not grant impunity. It recognizes that freedom loses substance when every action is exposed to scrutiny by default.

The “nothing to hide” argument is right to remind us that privacy is not absolute. It fails when it turns that truth into absolute permission to surveil. An investigation based on reasons can be compatible with a free society; a gaze without a precise purpose, limits, or supervision requires innocent people to show continuously that they deserve not to be watched.

The right question, then, is not “What are you hiding?” It is “What justifies this observation, what will the information be used for, and who watches those who watch?” That is where a serious discussion of security, privacy, and limits on power begins.

Sources

• Daniel J. Solove, “I've Got Nothing to Hide” and Other Misunderstandings of Privacy, San Diego Law Review 44 (2007).
• Helen Nissenbaum, “Privacy as Contextual Integrity”, Washington Law Review 79 (2004).
• United Nations, International Covenant on Civil and Political Rights, art. 17.
• Office of the United Nations High Commissioner for Human Rights, A/HRC/39/29: The Right to Privacy in the Digital Age.