Website Compliance: Privacy Policies, DMCA Safe Harbor, Terms of Service   Fulwider Patton LLP February 18, 2009 – Los Ang...
Website Compliance  <ul><li>Privacy Policy </li></ul><ul><li>Terms of Use </li></ul><ul><li>Safe Harbor from Copyright Inf...
Privacy Policy <ul><li>Policy under which: </li></ul><ul><ul><li>A company or organization  </li></ul></ul><ul><ul><li>ope...
Privacy Policy Examples <ul><li>http:// www.google.com/intl/en/privacy.html </li></ul><ul><li>https:// www.bankofamerica.c...
Why Privacy? <ul><li>Protects integrity of customer's personally-identifiable information </li></ul><ul><li>Customer can c...
Personally Identifiable Information <ul><li>name </li></ul><ul><li>age  </li></ul><ul><li>address  </li></ul><ul><li>phone...
Goals of Privacy Policy <ul><li>Reassure customers </li></ul><ul><li>Explain: </li></ul><ul><ul><li>why you want informati...
Privacy Policy: Some Sections <ul><li>1) What types of information you collect and how you use it </li></ul><ul><li>2) Why...
Privacy Policy Sections (cont.) <ul><li>4) Let customers view and edit their personal information  </li></ul><ul><li>5) Po...
Privacy Policy Sections (cont.) <ul><li>7) Write a privacy policy that people can understand   </li></ul>
Rule of Thumb <ul><li>‘Keep it simple’ </li></ul><ul><li>Be Straightforward </li></ul><ul><li>Honest & Complete  </li></ul>
Special Issues With Children <ul><li>Child Online Protection Act (COPA) </li></ul><ul><ul><li>Applies to Information Colle...
Example <ul><li>Los Angeles Times </li></ul><ul><ul><li>&quot;If you are under 13 years of age you may read this message b...
Special Issue: Financial Institutions <ul><li>California Financial Information Privacy Act </li></ul><ul><li>Customer can ...
Privacy Policy Enforcement <ul><li>Mrs. Fields Cookies matter </li></ul><ul><li>FCC </li></ul><ul><li>California Office of...
Privacy Policy Certification <ul><li>TRUSTe </li></ul><ul><ul><li>Outside company reviews your privacy policy </li></ul></...
Protection from Copyright Infringement <ul><li>Digital Milenium Copyright Act of 1998 (“DMCA”) </li></ul><ul><li>Process t...
DMCA SAFE HARBOR <ul><li>Valuable for web sites that allow users to upload and display text, graphics or other content </l...
US Copyright Law <ul><li>owner of a copyright has  exclusive  rights: </li></ul><ul><ul><li>right to reproduce the copyrig...
Copyright  Infringement   <ul><li>strict liability statute </li></ul><ul><li>innocent infringement not a defense </li></ul>
Potential Copyright Infringement Liability <ul><li>Problem </li></ul><ul><ul><li>Users upload a copyrighted work without a...
What to Do? <ul><li>User Agreement </li></ul><ul><ul><li>Make User Agree Not to Infringe Copyrights </li></ul></ul><ul><ul...
What to Do? (cont.) <ul><li>Monitor all uploads  </li></ul><ul><li>Delete infringing material before the material is displ...
Solution: DMCA Safe Harbor <ul><li>Digital Millennium Copyright Act (“DMCA”) 17 U.S.C. §512 </li></ul>
DMCA Safe Harbor (cont.) <ul><li>Simplest & Cheapest Approach </li></ul><ul><ul><li>Comply with requirements of DMCA; and ...
DMCA <ul><li>Title 17, US Code, § 512(c)(1): </li></ul><ul><li>&quot;a service provider shall not be liable for monetary r...
DMCA “Service Provider” <ul><li>A service provider is &quot;a provider of online services or network access, or the operat...
DMCA Does Not Apply!!!! <ul><li>Service provider knows that the material is infringing; </li></ul><ul><li>Is aware of fact...
DMCA Does Not Apply!!! (cont.) <ul><li>service provider has right and ability to control the infringing activity and  </li...
Other DMCA Requirements <ul><li>Must have agent for service of copyright infringement claim </li></ul><ul><li>Must post co...
Take Down Procedure <ul><li>Take down copyrighted material “expeditiously” </li></ul>
Protection Against Claims by Users <ul><ul><li>Service provider will &quot;not be liable to any person for any claim based...
Terms of Service
Terms of Service <ul><li>Rules by which one must agree to abide by in order to use a service. </li></ul><ul><li>Such terms...
Terms of Use Generally Covers <ul><li>Acceptable user behavior online </li></ul><ul><li>Company's marketing policies </li>...
Penalties for Violation of ToS <ul><li>Banish From Site </li></ul><ul><li>Report to Authorities </li></ul><ul><li>Civil Li...
Resources <ul><li>Privacy Policies </li></ul><ul><ul><li>TRUSTe Privacy Policy Certification </li></ul></ul><ul><ul><ul><l...
Resources (cont.) <ul><li>DMCA Safe Harbor </li></ul><ul><ul><li>Wikipedia Explanation of DMCA at </li></ul></ul><ul><ul><...
Resources (cont.) <ul><li>General Internet Law </li></ul><ul><ul><li>See Books by Prof. Michael D. Scott, Southwestern Uni...
Upcoming SlideShare
Loading in …5
×

Website Compliance 2009

838 views
720 views

Published on

Website Compliance:
Privacy Policies, DMCA Safe Harbor, Terms of Service, Feb. 2009

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
838
On SlideShare
0
From Embeds
0
Number of Embeds
19
Actions
Shares
0
Downloads
9
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Website Compliance 2009

  1. 1. Website Compliance: Privacy Policies, DMCA Safe Harbor, Terms of Service Fulwider Patton LLP February 18, 2009 – Los Angeles, CA SPEAKER: Scott R. Hansen, Esq.
  2. 2. Website Compliance <ul><li>Privacy Policy </li></ul><ul><li>Terms of Use </li></ul><ul><li>Safe Harbor from Copyright Infringement: DMCA </li></ul>
  3. 3. Privacy Policy <ul><li>Policy under which: </li></ul><ul><ul><li>A company or organization </li></ul></ul><ul><ul><li>operating a web site </li></ul></ul><ul><ul><li>handles the personal information </li></ul></ul><ul><ul><li>collected about visitors to the site </li></ul></ul>
  4. 4. Privacy Policy Examples <ul><li>http:// www.google.com/intl/en/privacy.html </li></ul><ul><li>https:// www.bankofamerica.com/privacy/Control.do?body = privacysecur_cnsmr </li></ul>
  5. 5. Why Privacy? <ul><li>Protects integrity of customer's personally-identifiable information </li></ul><ul><li>Customer can control disclosure to 3rd parties </li></ul><ul><li>Customer can avoid being bothered with advertisements when they don't want to be contacted  </li></ul>
  6. 6. Personally Identifiable Information <ul><li>name </li></ul><ul><li>age </li></ul><ul><li>address </li></ul><ul><li>phone number </li></ul><ul><li>credit card number </li></ul><ul><li>bank names </li></ul><ul><li>account numbers </li></ul><ul><li>health history </li></ul><ul><li>job information </li></ul><ul><li>etc. </li></ul>
  7. 7. Goals of Privacy Policy <ul><li>Reassure customers </li></ul><ul><li>Explain: </li></ul><ul><ul><li>why you want information </li></ul></ul><ul><ul><li>what you will do w/it </li></ul></ul><ul><li>Allay concerns with a clear, efficient Privacy Policy </li></ul>
  8. 8. Privacy Policy: Some Sections <ul><li>1) What types of information you collect and how you use it </li></ul><ul><li>2) Why your server and online operations are secure </li></ul><ul><li>3) Let customers opt out </li></ul>
  9. 9. Privacy Policy Sections (cont.) <ul><li>4) Let customers view and edit their personal information  </li></ul><ul><li>5) Policy changes </li></ul><ul><li>6) Who to contact </li></ul><ul><li>w/questions </li></ul>
  10. 10. Privacy Policy Sections (cont.) <ul><li>7) Write a privacy policy that people can understand   </li></ul>
  11. 11. Rule of Thumb <ul><li>‘Keep it simple’ </li></ul><ul><li>Be Straightforward </li></ul><ul><li>Honest & Complete </li></ul>
  12. 12. Special Issues With Children <ul><li>Child Online Protection Act (COPA) </li></ul><ul><ul><li>Applies to Information Collected from Children Under 13 </li></ul></ul><ul><ul><li>Many requirements (parental notification, etc.) </li></ul></ul><ul><ul><ul><li>Most Simply Don’t Collect Info from Children under 13 </li></ul></ul></ul>
  13. 13. Example <ul><li>Los Angeles Times </li></ul><ul><ul><li>&quot;If you are under 13 years of age you may read this message board, but you may not participate.&quot; </li></ul></ul>
  14. 14. Special Issue: Financial Institutions <ul><li>California Financial Information Privacy Act </li></ul><ul><li>Customer can &quot;opt-out&quot; of information-sharing between affiliated institutions </li></ul><ul><li>Customer must “opt in” for sharing of info w/nonaffiliated third parties </li></ul><ul><li>Controversial, bouncing around the courts </li></ul>
  15. 15. Privacy Policy Enforcement <ul><li>Mrs. Fields Cookies matter </li></ul><ul><li>FCC </li></ul><ul><li>California Office of Privacy Protection </li></ul>
  16. 16. Privacy Policy Certification <ul><li>TRUSTe </li></ul><ul><ul><li>Outside company reviews your privacy policy </li></ul></ul><ul><ul><li>Allows you to display the TRUSTe seal </li></ul></ul>
  17. 17. Protection from Copyright Infringement <ul><li>Digital Milenium Copyright Act of 1998 (“DMCA”) </li></ul><ul><li>Process to Avoid Copyright Infringement Lawsuits (“Safe Harbor”) </li></ul>
  18. 18. DMCA SAFE HARBOR <ul><li>Valuable for web sites that allow users to upload and display text, graphics or other content </li></ul><ul><li>Steps to protect website owners from copyright infringement liability </li></ul>
  19. 19. US Copyright Law <ul><li>owner of a copyright has exclusive  rights: </li></ul><ul><ul><li>right to reproduce the copyrighted work, </li></ul></ul><ul><ul><li>right to prepare derivatives of the work </li></ul></ul><ul><ul><li>right to distribute copies of the work to the public </li></ul></ul><ul><ul><li>right to display the work publicly. </li></ul></ul>
  20. 20. Copyright  Infringement   <ul><li>strict liability statute </li></ul><ul><li>innocent infringement not a defense </li></ul>
  21. 21. Potential Copyright Infringement Liability <ul><li>Problem </li></ul><ul><ul><li>Users upload a copyrighted work without a license to do so </li></ul></ul><ul><li>Example </li></ul><ul><ul><li>User uploads drawing of Mickey Mouse. Violates copyright of Disney </li></ul></ul>
  22. 22. What to Do? <ul><li>User Agreement </li></ul><ul><ul><li>Make User Agree Not to Infringe Copyrights </li></ul></ul><ul><ul><li>Make User Agree to Indemnify Website </li></ul></ul><ul><li>Problem </li></ul><ul><ul><li>Doesn’t Shield Website Owner </li></ul></ul>
  23. 23. What to Do? (cont.) <ul><li>Monitor all uploads </li></ul><ul><li>Delete infringing material before the material is displayed to the public </li></ul><ul><li>Problem: Too much time & expense </li></ul>
  24. 24. Solution: DMCA Safe Harbor <ul><li>Digital Millennium Copyright Act (“DMCA”) 17 U.S.C. §512 </li></ul>
  25. 25. DMCA Safe Harbor (cont.) <ul><li>Simplest & Cheapest Approach </li></ul><ul><ul><li>Comply with requirements of DMCA; and </li></ul></ul><ul><ul><li>Take appropriate action after receiving notice of copyright infringement </li></ul></ul><ul><ul><li>Will not be liable for money damages for users' uploaded content </li></ul></ul>
  26. 26. DMCA <ul><li>Title 17, US Code, § 512(c)(1): </li></ul><ul><li>&quot;a service provider shall not be liable for monetary relief, or . . . for infringement of copyright by reason of the storage at the direction of a user of material that resides on a system or network controlled or operated by or for the service provider.&quot;  </li></ul>
  27. 27. DMCA “Service Provider” <ul><li>A service provider is &quot;a provider of online services or network access, or the operator of facilities therefor&quot; and an &quot;entity offering the transmission, routing, or providing of connections for digital online communications, between or among points specified by a user, of material of the user's choosing, without modification to the content of the material as sent or received.&quot;  17 U.S.C. § 512(k)(1) </li></ul>
  28. 28. DMCA Does Not Apply!!!! <ul><li>Service provider knows that the material is infringing; </li></ul><ul><li>Is aware of facts or circumstances from which infringing activity is apparent; or </li></ul><ul><li>Does not quickly remove or disable access to the material upon obtaining knowledge or awareness of the infringing material. </li></ul>
  29. 29. DMCA Does Not Apply!!! (cont.) <ul><li>service provider has right and ability to control the infringing activity and </li></ul><ul><li>receives financial benefit directly attributable to the infringing activity, then </li></ul><ul><li>service provider will not be protected by Section 512 of the Digital Millennium Copyright Act. </li></ul>
  30. 30. Other DMCA Requirements <ul><li>Must have agent for service of copyright infringement claim </li></ul><ul><li>Must post contact info for agent of service </li></ul><ul><li>Must register agent contact information with the Copyright Office </li></ul><ul><ul><li>Go to Copyright Office website </li></ul></ul><ul><ul><li>Fill out a form </li></ul></ul><ul><ul><li>Send in money </li></ul></ul>
  31. 31. Take Down Procedure <ul><li>Take down copyrighted material “expeditiously” </li></ul>
  32. 32. Protection Against Claims by Users <ul><ul><li>Service provider will &quot;not be liable to any person for any claim based on the service provider's good faith disabling of access to, or removal of, material or activity claimed to be infringing or based on facts or circumstances from which infringing activity is apparent, regardless of whether the material or activity is ultimately determined to be infringing.&quot;  17 U.S.C. § 512(g)(1) </li></ul></ul>
  33. 33. Terms of Service
  34. 34. Terms of Service <ul><li>Rules by which one must agree to abide by in order to use a service. </li></ul><ul><li>Such terms may be legally binding </li></ul><ul><li>Examples: eBay and PayPal </li></ul><ul><ul><li>high level of community trust  </li></ul></ul><ul><ul><li>transactions involving money </li></ul></ul>
  35. 35. Terms of Use Generally Covers <ul><li>Acceptable user behavior online </li></ul><ul><li>Company's marketing policies </li></ul><ul><li>DMCA Notification of Take Down policy and Agent </li></ul><ul><li> Copyright notices </li></ul>
  36. 36. Penalties for Violation of ToS <ul><li>Banish From Site </li></ul><ul><li>Report to Authorities </li></ul><ul><li>Civil Liability </li></ul><ul><li>Criminal Penalties </li></ul>
  37. 37. Resources <ul><li>Privacy Policies </li></ul><ul><ul><li>TRUSTe Privacy Policy Certification </li></ul></ul><ul><ul><ul><li>www.TRUSTe.org </li></ul></ul></ul><ul><ul><li>California Office of Privacy Protection </li></ul></ul><ul><ul><ul><li>http:// www.oispp.ca.gov/consumer_privacy/online.asp </li></ul></ul></ul><ul><ul><li>Center for Democracy and Technology, CDT's Guide to Online Privacy </li></ul></ul><ul><ul><ul><li>www.cdt.org /privacy/guide/ </li></ul></ul></ul><ul><ul><li>Electronic Privacy Information Center, Online Privacy Tools </li></ul></ul><ul><ul><ul><li>www.epic.org/privacy/tools.html </li></ul></ul></ul>
  38. 38. Resources (cont.) <ul><li>DMCA Safe Harbor </li></ul><ul><ul><li>Wikipedia Explanation of DMCA at </li></ul></ul><ul><ul><ul><li>http:// en.wikipedia.org/wiki/Digital_Millennium_Copyright_Act </li></ul></ul></ul><ul><ul><li>Text of Section 512 (“Safe Harbor”) </li></ul></ul><ul><ul><ul><li>http://www4.law.cornell.edu/uscode/17/512.html </li></ul></ul></ul><ul><ul><li>Responding to Take Down Notice </li></ul></ul><ul><ul><ul><li>Fair Use Network (NYU School of Law) </li></ul></ul></ul><ul><ul><ul><ul><li>http:// fairusenetwork.org/reference/td.php </li></ul></ul></ul></ul>
  39. 39. Resources (cont.) <ul><li>General Internet Law </li></ul><ul><ul><li>See Books by Prof. Michael D. Scott, Southwestern University School of Law </li></ul></ul><ul><ul><ul><li>INTERNET AND TECHNOLOGY LAW DESK REFERENCE </li></ul></ul></ul><ul><ul><ul><li>8th ed. (Aspen Publishers, 2007) </li></ul></ul></ul><ul><ul><ul><li>SCOTT ON INFORMATION TECHNOLOGY LAW , 3rd ed. (Aspen Publishers, 2006) </li></ul></ul></ul>

×