Category: Law

Legally minded discussions

  • From the Archives: “Why I am opposed to ‘assumed consent’ for organ donation”

    I used to have one single solitary blog that I’d throw everything onto. Usually photos, but also sometimes a place where my political thoughts would spill over. For years these articles have lived on allmyfriendsarejpegs.com, but not really fitted in – so I’ve decided to slowly re-publish them here so they have a more suitable home. Note that these haven’t been edited since they were posted, and so may not necessarily reflect my current position.

    Why I am opposed to ‘assumed consent’ for organ donation

    First published: 25th October 2011

    Today on the news there was a story around organ donation, highlighting that Scotland has the highest figure of people signed up in the UK at a reported 37% of the population.

    As part of this, the question was again brought up as to whether or not we might move to an ‘opt-out’ system of registration rather than the current one, where people must actively state that they wish their organs to be used after their death where possible.

    I posted on Twitter with my rather blunt opposition to such an idea (something along the lines of fuck that), and was surprised (in a way) to see that there were a number of responses that were in complete disagreement. Rather than reply in bursts of 140 characters, I thought I’d try articulate things a bit better on here.

    What would the change mean?

    The policy that is being advocated is one of ‘assumed consent’. Essentially what this means is that if you die and your organs are able to be used, then it will be presumed that you would agree to such a thing in the interests of saving another person’s life, and they will be taken unless you have specifically stated that you do not wish this to be the case prior to your death.

    So what’s the problem?

    Why should anybody object to such an approach? It seems fairly straightforward surely? What happens to your body upon passing away is of no consequence to you, and if such a move will help increase the number of organs available and in turn save lives, then we should make it happen. After all, if they do have problems with the idea, they can still opt-out.

    However, it isn’t as simple as that, and there are subtle, but profound effects of such a decision. The utilitarian notion of the ‘greater good’ trumping the inconvenience of the few is as flawed here as it is in other ethical questions. To go into examples would be fruitless as it is debated at length elsewhere, and there are deeper questions involved that transcend any idea of accumulated communal wellbeing. In short, just because something may have a positive impact in one respect on a group of people as a whole, that does not mean that it is automatically the correct position to take; far from it.

    Why are rates so low?

    If the donor rates are so low, then why is this? Does that mean that people in society have some sort of moral deficiency? Does the act of not signing up not state exactly what opting out will do, but in a different way? If it is indeed true that people simply don’t have the knowledge, interest, or concern about the topic, then why should the State coerce them into a position that they have no desire to be involved in? By re-stating the question in a different way, do we not just twist the rules of morality to make them acceptable to our own standards, dominating the moral and political narratives that underpin our supposedly ‘free’ society, and ignoring any possible philisophical, ethical, theological or ideological differences?

    Ideology

    There is a massive ideological problem involved in the approach being proposed. There are a whole host of issues that we will set to one side for now, such as those involving how foreign nationals would be dealt with; those with a lack of mental capacity; basic human rights claims; the question of whether consent is really ‘informed’ or not; tensions and relationships with relatives in the event of a dispute… all of which are important, but there is a deeper question about the reach of the State itself.

    By creating such legislation, the Government would in effect be stating that it had an automatic right to ownership of your body (over and above even your closest family), unless you explicitly protest against it. This is an incredibly dangerous road to travel down, and is something that they do not, and should never have the authority to claim. That in of itself is enough to reject the proposal completely.

    We need to read behind the lines in decisions like this, and not just take things on an issue-by-issue basis. The precedent that this assertion would create would conceivably allow future Governments to make further claims on its back, with the steady erosion of control over our own being.

    Implied consent is not a common default with regards to other legal questions, and especially when it comes to matters regarding the body. Interestingly enough, the act (or contract!) of sexual intercourse requires active consent. The exact definition of what that entails is open to legal debate, but there is never assumed consent to engaging in sex. Whilst the comparison may be specious, it’s worth noting our attitude to issues relating to the person as distinct from other contractual matters, and on this hangs the crux: There is something important about the rights of a human being to their own constitution actually belonging to them without having to explicitly make this clear. No person, State or other entity should ever have the arrogance to over-ride this.

    Disclaimer: In the interests of full disclosure, it’s worth noting that I am a registered donor and have been since I was young. This isn’t a question about the value of organ donation in itself, but political interference in the process.

     

  • Real Punishments Needed for DMCA Takedown Abuse

    Note: The opinions expressed within are mine, and mine alone – not necessarily endorsed by Automattic or WordPress.com.

    Last week Automattic released an update to our transparency report, detailing the number of takedown and information requests that were received between January and the end of June this year – as well as the number that had been acted upon, or rejected. There has been some good coverage of what’s included in the report by TorrentFreak, ARSTechnica, and TechDirt.

    One area that’s particularly interesting is that relating to the DMCA notification and takedown process, regarding instances of alleged copyright infringement. The full figures are available on the page itself, but here are the highlights:

    WordPress.com Transparency Report

    If you’re like me, it can be difficult to pull out something meaningful from a table of figures, at least at first glance. The important thing to note here is that 43% of the total notices received were rejected – either for being incomplete, or abusive. This figure rises to 67% if you remove sites that were ultimately suspended for a terms of service violation from the ‘Percentage of notices where some or all content was removed’ column.

    Incomplete notices can be anything from the complainant not including a signature; failing to specify the content that they are claiming copyright over; or not including the required statements ‘under penalty of perjury’. Abusive notices include those that target material which is not copyrightable (such as trademarks or allegedly defamatory content); where the complainant misrepresents their copyright; or attempts to prevent fair use of the material – protected by US copyright law.

    Many complainants simply want to get content removed from the web, irrespective of which route they have to take to get it. As a result, a variety of different tactics are deployed, particularly when a third party agent is engaged to carry out the task. For example, the wording of takedown demands may be fudged in order to give them the appearance of a valid DMCA takedown notification, whilst failing to substantively fulfil the statutory requirements. In other cases, claims regarding alleged copyright infringement are mingled together with threats concerning trademark infringement or defamation – obfuscating the invalidity of the DMCA takedown itself in the process. Web Sheriff in particular have been known to adopt this practice, with ‘kitchen sink’ takedown demands listing what seems like every law passed in the last 20 years incase one of them might apply in any given scenario. The Pirate Bay have infamously mocked Web Sheriff in the past for some of their tactics:

    Pirate Bay Web Sheriff Mockery

    It can be a difficult process to manually review and untangle exactly what a complaint relates to, and whether or not it is a valid DMCA takedown. Clarification e-mails often go ignore, something that is particularly true in cases where the notifications are being generated by bots. Replying to point out that a notification is incomplete, or that the material is actually hosted elsewhere in many cases is met by nothing except a deaf ear, and a duplicate takedown demand the following day.

    Whilst the DMCA’s safe harbor provisions are designed to provide protection for third party intermediaries as well as the rights of copyright holders, the phenomenon of automated takedown demands has resulted in a massively lopsided burden on those service providers who take their responsibilities seriously, and do not just acquiesce to every single takedown notification automatically.

    Complainants are able to submit grossly inaccurate DMCA takedowns on a massive scale, routinely through the use of automated systems that indiscriminately target particular keywords across the web – all without any real fear of legal consequence. The sheer volume notices generated means that the vast majority of service providers simply remove content immediately and automatically, without scrutinising them for their formal completeness or legal validity. The few that do choose to go through them manually in order to protect their users (like WordPress.com), end up facing a huge burden.

    Without stronger statutory consequences for those who abuse the DMCA’s notification and takedown system, the battle for freedom of expression online will be increasingly difficult. The majority of service providers will inevitably default to censorship in the first instance, as the number of notifications (and therefore the resources required to push back effectively) increases.

  • How to Submit (Valid) DMCA Takedown Notices

    How to Submit (Valid) DMCA Takedown Notices

    So you’ve discovered that a website is using something you’ve created without permission, and you want them to stop. The quickest route to make this happen is to submit a ‘DMCA takedown notice’, though the process itself can seem daunting if you’re not familiar with the language involved.

    In short: The Digital Millennium Copyright Act, or ‘DMCA’ is a piece of American law that provides a mechanism for copyright holders to have allegedly infringing material taken down speedily from the Internet without having to resort to legal action – whilst also protecting the online service providers from liability for the actions of their users.

    Should you wish to follow up on the unauthorised use of your works online, this guide will give an idea of what’s involved, and how to submit a formally valid notice. Having seen thousands of these takedown notices as part of my job, I know a fair bit about the quirks that are involved.

    Things to Consider

    Before submitting a DMCA takedown notice, there are some general things to bear in mind:

    • The DMCA is American law. As a result, online service providers located outside of the US are not bound by its contents. There are similar provisions enacted in different jurisdictions, but generally the DMCA is seen as the industry standard. It is often the case that hosts will comply with valid takedown notices even if they technically are not required to by their local laws, but don’t expect bank on this.
    • Takedown notices do not prevent the spread of the material. Just because you manage to get something removed from one host, doesn’t mean that it won’t pop up again somewhere else – much like the ‘whac-a-mole’ game you see in American films. Sometimes giving attention to one instance of infringement can lead to a multiplication of the problem, rather than a solution. As a result, you need to question whether taking action will be worthwhile, or whether sleeping lions are best left undisturbed. This is relevant.
    • Not every use of copyrighted material is actionable. People are entitled to use copyrighted material without permission in certain circumstances, such as for the purpose of research, criticism, education, or news reporting; known as the ‘fair use’ doctrine. You have an obligation to consider this possibility before submitting a takedown notice for the use of content in which you hold a copyright interest.

    The Takedown Notice

    The DMCA takedown notice itself isn’t very complicated, but it does require a number of specific elements in order to be considered formally valid. It’s amazing how often people screw this up.

    They are:

    • A signature from the copyright holder, or somebody who they have authorised to act on their behalf. This can either be a physical, or electronic signature.
    • An identification of the material that is being used without permission. In other words, what photograph, text, or other content is it?
    • An identification of where the infringing material is located. Where exactly is the content being used without permission? Include a direct link to the page where it exists, and be careful not to include dynamic URLs, as this can delay the process.
    • Details to allow the service provider to contact the complainant, such as address, telephone number, or e-mail address.
    • A ‘good faith belief’ that the material’s use is not authorised by the copyright owner, agent, or the law.
    • A statement that the notice is ‘accurate, and under penalty of perjury, that the complaining party is authorised to act on behalf of’ the copyright holder.

    That’s all. There are various examples available on the web that add in a whole lot of extraneous information about the obligations of service providers and so forth, but legally this is not required. Whilst some smaller hosts may be intimidated this approach, the extra verbiage more often than not can seem as if the complainant is clutching at straws in a desperate bid to have material taken offline.

    Some things that are worth noting:

    • You can have somebody submit the DMCA takedown notice on your behalf, if you would rather.
    • The signature must be of a person. This sounds obvious but in other words, you can’t sign your company name – it must be either yours or the third party acting as your agent for the submission.
    • Though some service providers specifically ask for it, the DMCA does not require you to provide all of your contact details. As a general rule, I would only supply the minimum necessary, and avoid giving up personal phone numbers and addresses This is particularly true as a copy of the notice can often then forwarded on to the user who published the material in the first place (depending on the policies of the host in question). An e-mail address should suffice.
    • If you do not want to supply your own details, the DMCA allows for you to submit a takedown notification through a third party agent, acting on your behalf.

    A sample DMCA takedown notice is as follows:

    Subject: DMCA Takedown Notification

    To whom it may concern,

    This e-mail is notification under USC 17 §512, the Digital Millennium Copyright Act (DMCA), of instances of copyright infringement operating on site(s) under your control.

    The copyrighted work at issue is as follows:

    ** INSERT DESCRIPTION OF COPYRIGHTED WORK **

    The unauthorized, and infringing copy is available the following URL(s):

    ** INSERT URLs WHERE THE COPYRIGHTED WORK CAN BE FOUND **

    I have a good faith belief that use of the copyrighted materials described above as allegedly infringing is not authorized by the copyright owner, its agent, or the law.

    I swear, under penalty of perjury, that the information in the notification is accurate and that I am the copyright owner or am authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.

    I demand that you expeditiously remove or disable access to the material in question.

    I may be contacted on:

    ** NAME **
    ** ADDRESS **
    ** TELEPHONE NUMBER **
    ** E-Mail Address **

    The following should be considered my electronic signature for the purposes of §512(c)(i):

    ** TYPE OUT FULL LEGAL NAME **

    This can be downloaded over on Github.

    PROTIP:

    • Don’t submit these DMCAs by post, or in PDF format. Unless you want to be really, really annoying (which you might!), this will only serve to slow down the actual process of getting your material removed, which should really be the priority.

    The Process – What Happens Now?

    Once you have submitted a valid DMCA takedown notice, the process is as follows:

    • The online service provider must act ‘expeditiously’ to ‘remove or disable access to’ the material that you have identified as infringing upon your copyrights.
    • The user who published the material has the option to submit a counter notice, asserting their right to legally use the material. At this point you will be notified, and if you do not give notification of beginning legal proceedings, the content in question will be restored between 10 and 14 days after the submission of the counter notice.

    So there are a number of possibilities for what could happen:

    • Nothing. The service provider ignores your takedown notice, which can happen for a variety of reasons (such as their location outside of the US). At this point you are left with little option but to undertake legal action to have the material removed.
    • The material is removed by the service provider, and stays offline. The best possible outcome.
    • The material is removed by the service provider, but a counter notice is received shortly thereafter, leading to it being restored within the 10-14 day window unless you pursue legal action.

    NB: This is not to be taken as legal advice.

  • Blow Struck by WordPress.com Against Fraudulent DMCAs

    Blow Struck by WordPress.com Against Fraudulent DMCAs

    Abuse of the American online copyright takedown system (DMCA) is rife. People frequently submit fraudulent notifications to online service providers in order to censor views that they disagree with, curbing legitimate freedom of expression. Examples include those trying to stifle negative reviews about their businesses or products, preventing political satire, and even inappropriately targetting the normative use of a trademark.

    All too often, OSPs simply shrug their shoulders when confronted with these scenarios, and process the notices anyway in order to avoid losing their safe harbor protections. Even when alerted to what’s going on in specific circumstances, many choose a policy of non-intervention, rather than to defend their users.

    The result of one of two cases which were filed by Automattic in response to fraudulent takedown notifications submitted concerning material posted by WordPress.com was released a few days ago, Westlaw citation: 2014 WL 7894441. The judgement concerned a notice sent by a group called ‘Straight Pride UK’, who objected to the publication of an e-mail interview which a journalist Oliver Hotham had conducted. Under §512(f) of the DMCA, Automattic were awarded a total of just over $25,000 in damages – $960 of which was for Hotham’s time.

    The outcome was a ‘default judgement’, as the defendant’s (unsurprisingly) didn’t turn up to the hearing, despite being served properly through the standard international processes. It’s unlikely that either Automattic or Hotham will ever see any of the money, so it is largely a symbolic victory. However, it should not be dismissed too quickly, as the case highlights a number of important issues:

    • The DMCA is frequently abused, with few consequences for those who misrepresent their copyrights
    • Taking action against this abuse is expensive, and happens extremely infrequently
    • Enforcing damages against those from outside the US is difficult, and so there is a hole in the remedies available where those who abuse the system fall into this category
    • Even where organisations or individuals are resident in the US, major online service providers do nothing about the fraudulent notices they receive that could be actionable
    • In order for damages to be awarded, material must be removed as the result of a misrepresentation. There are no consequences for fraudulent notifications that are caught by diligent service providers first – at their own risk

    The DMCA is a blunt tool that has an incredible power to silence dissenting voices without recourse. The only way in which this is going to change is if service providers begin to stand up against the abuses, using the considerable resources as their disposal – both to further the conversations in this area, and also to take legal action where possible.

    Transparency: I am a Community Guardian for WordPress.com.

     

  • DMCA Rejection Retaliation

    Every day WordPress.com receive a sizeable number of DMCA takedown notifications, and every day I personally reject a fair number of them for being incomplete, invalid, or fraudulent.

    Many of those who find their takedown notifications being rejected are displeased with the decision, used to service providers choosing to automatically process them, shifting the burden of proof onto the user, rather than take on the risk of liability for themselves. Unsurprisingly, this displeasure is often most aggressively expressed by dedicated third party agents whose sole business model is based on scouring the web for potentially infringing acts, and who get paid per removal. Some people may say that with a results-driven financial incentive to have material taken offline, that there is more of a chance for the DMCA process to be used inappropriately – but that’s something you’ll need to make your minds up on independently.

    Yesterday a colleague let me know about one such organisation that had evidently found some of their notifications rejected in the past, who had then chosen to take to Twitter to voice their displeasure about me doing my job.

    Screen Shot 2015-02-24 at 23.49.14

    The image they linked to was of me, lying on the grass clutching a bottle of Buckfast – the weekend of the Queen’s Jubilee, if memory serves correctly.

    The one they used wasn’t really very good quality though, so here’s a higher resolution one incase they want to try again:

    crail

    I’m not entirely sure what they were trying to achieve to be honest. It’s not as if pictures of me intoxicated are really all that hard to find, after all. My occasional penchant for Buckfast isn’t exactly a secret at Automattic either, given that I did my first annual ‘flash talk’ at the all-company Grand Meetup in Utah on the ol’ tonic wine.

    Somebody (who shall remain nameless) suggested we reply to say:

    Even smashed on Bucky, Clicky Steve knows more about the DMCA than RemoveYourMedia

    Which is so beautiful it almost brought a tear to my eye.

    That wasn’t the only tweet they aimed at me though.

    Screen Shot 2015-02-24 at 23.49.26

    It’s pretty bizarre that they would choose to use that case about Napster to illustrate the potential liability for service providers guilty of contributory infringement, since there are far more recent, compelling, and relevant judgements they could have made their point with. Ah well, better luck next time, eh? As far as I’m aware they never actually sued after these bold statements on social media, but maybe they’re still preparing the paper work.

    At the end of the day, whilst this has given me a hearty chuckle before I turn in for the night, there’s no getting away from the fact that it’s not only petty, but ridiculously unprofessional. Making ad hominem attacks on employees of a company for rejecting your legal demands is pretty sad. If I was a copyright holder, I wouldn’t be too impressed to find the agency I had employed to protect my intellectual property deploying tactics like this. Then again, it might be a bigger deal if they had more than 1200 followers…

    In the world of the DMCA, there’s only one thing dumber than submitting bogus takedown notifications, and that’s having a tantrum on Twitter when your bogus takedowns are rejected.

  • Hyperlinks, Copyright Infringement, and the DMCA

    Hyperlinks, Copyright Infringement, and the DMCA

    Hyperlinks are a fundamental part of the core fabric of the web. As the basic tool used to connect pieces of information together, it’s difficult to imagine how the Internet could function without them. 

    Despite its critical nature, the role of hyperlinks has attracted the attention of those seeking to prevent particular kinds of information from being shared. One of the prime examples relates to copyright, and efforts to disrupt the dissemination of materials without authorisation. As part of this, the delivery mechanism of the hyperlink – as well as the infringing act itself – has come under fire.

    Hyperlinks and Case Law

    There is not a sizeable wealth of case law available that directly relates to the question of whether a hyperlink can constitute copyright infringement. As a result, discussions concerning potential liability often draw upon analogies taken from older cases – sometimes with judgements over a century old – in order to apply established legal principles to the uncertainties thrown up by technological evolution.

    In the case of Hird v. Wood from 1984, the defendant was seated near to a sign on which defamatory messages were displayed. Despite not having created the sign, it was held that he incurred liability simply through the act of drawing attention to it. In the later case of Byrne v. Dean, Hird was referenced, the judge noting the following:

    If defamatory matter is left on the wall of [a] premises by a person who has the power to remove the defamatory matter from the wall he can be said to have published the defamatory matter to the persons who read it.

    Applied to our topic, it would appear that this principle would impose an obligation on the operators of websites (as well as their hosts) to remove hyperlinks that led to illegal material.

    The Supreme Court in Crookes v. Newton did not completely accept the above analogy. Instead, they found the argument put forward by the respondent to be more persuasive: a comparison between hyperlinks and footnotes. In other words, both are ‘content neutral’, communicating the existence of something, but not necessarily commenting on the content. This view is one also supported by Tim Berners-Lee, credited with the creation of the World Wide Web:

    The intention […] was that normal links should simply be references, with no implied meaning.

    However, the court also recognised that the Internet is ‘a potentially powerful vehicle’ for defamation, and that the context itself was important in establishing possible liability. In the words of the court:

    Individuals may attract liability for hyperlinking if the manner in which they have referred to content conveys defamatory meaning.

    Analogy is one instrument that can be used when considering the relationship between the use of hyperlinks and the law; powerful, albeit imprecise. The issues involved in real life situations are more complex than can be addressed by analogy alone, and courts have often taken differing approaches in making their determinations.

    One of the first cases to directly challenge the legality of the use of hyperlinks, and their potential to constitute an infringement of copyright concerned their use on the website of a Scottish newspaper named the ‘Shetland News’.

    The links in question were published on the Shetland News website. They took the form of headlines copied from the site of a rival paper: the ‘Shetland Times’. By visiting the Shetland News website and clicking on these links, visitors were taken to the corresponding articles on the Shetland Times website. Confused yet? The way things were set up meant it was possible to completely avoid having to visit the Shetland Times’ homepage, and therefore missing out on its advertising. As a result, the Shetland News website was receiving ad-based income for providing direct links to articles that they themselves had not authored. 

    Understandably, the Shetland Times weren’t too pleased about this, and succeeded in having the use of the links halted through the use of an interim interdict. The reasoning for the decision was that the links came in the form of headlines that had been copied verbatim from the other site, and so there was potential copyright infringement. Disappointingly from an academic point of view, the case was settled out of court, with no final judgement made on the actual liability arising from the use of the links.

    One of the first significant cases in the US regarding the status of hyperlinks was that of Kelly v. Arriba Soft Corp. This concerned the display of thumbnail images from a professional photographer’s website in search results. The images were available both as resized thumbnails, and full sized previews, which is akin to the functionality provided by Google Images. Arriba was sued for copyright infringement, and the appeal judgement from the Ninth Circuit Court in San Francisco found that the thumbnails were protected under the doctrine of fair use. However, there was liability incurred for the displaying of the images in a new display window – a practice known as ‘in-line linking’. After an amicus brief filed by the EFF, the judgement was revised; the concerns about the in-line linking removed, with the fair use affirmation standing. 

    In the case of Intellectual Reserve, Inc. v. Utah Lighthouse Ministry, Inc., the court found that hyperlinks pointing towards illegally distributed material could in of themselves be considered to be contributory copyright infringement. In this particular situation, the facts were complicated because the owner of the website in question had originally stored copies of the protected content on their own servers, before replacing them with hyperlinks to copies stored elsewhere. It was the context of these actions that was important – echoing the ratio decidendi in Hird.

    One of the more commonly cited cases in this area is the infamous Grokster case, in which the Supreme Court introduced a new potential for liability: that of inducement. It was held that where technology is created for the intended or actual purpose of encouraging its users to breach copyright, then the creators themselves could be held liable for contributory copyright infringement. Ultimately, Grokster was shut down. Despite the concern by service providers over the precedent of this case, the facts were very particular to this situation, with the platform actively fostering the ‘blatant and overwhelming’ infringing activity of their users. It is extremely unlikely that the same definition would be applied to the majority of contemporary online intermediaries.

    Hyperlinks, the DMCA, and Contributory Infringement

    Online service providers often receive DMCA takedown notifications that target hyperlinks leading to allegedly infringing material, rather than material that resides on their servers. They are faced with an interesting quandary as a result: whether or not to remove the link.

    On the one hand, hyperlinks generally do not constitute copyright infringement. However, it is the context that is the determining factor when considering potential for liability. A link created by a user to illegal material may well be infringing, but where does this leave the service provider?

    Service providers are afforded safe harbor immunity from the infringing actions of their users, provided they ‘remove or disable access to’ material upon receipt of a valid DMCA takedown notification. However, it is unclear how this would apply in the case of hyperlinks. In our example, the infringing material itself is located on servers out-with their control, but there is still potentially infringing activity taking place on their platform. Would a host be liable for a failure to remove a hyperlink to material, where that hyperlink was found to be an infringing act, based on the context?

    We can take some insight into how the decisions of future courts may fall in this scenario by considering the ‘server test’ discussed in the Perfect 10 cases. Here, the facts concerned the display of websites in Google’s Image search that were infringing upon the copyright interests of the plaintiff. It was found that Google was not liable for direct infringement on the basis that the material at issue did not reside on their servers, and was served up from another host through their use of framing, or ‘in-line linking’. With regards to contributory infringement specifically, the court held that there was no liability, as the infringing activity itself would still exist irrespective of whether or not Google Images existed. In other words, they were not found to be encouraging the copyright infringement.

    In Flava, the defendants were operators of a ‘social bookmarking’ service called myVidster that allowed users to share videos from different locations around the web, which were then embedded on their platform, served up from the original locations. They were sued for contributory copyright infringement, based on the actions of users that were sharing clips that had been uploaded without authorisation.

    The service provider had already received a number of takedown notifications regarding the material, and it was argued that they had not taken enough action as required to qualify for safe harbor protections. However, that is not the be all and end all. In the words of the court: ‘a non-infringer doesn’t need a safe harbor.’ The parties who uploaded the videos in the first place were the ones whose activity was infringing, and the question is whether myVidster had encouraged their infringing activity to an extent that constituted contributory infringement. The court did not find this to be the case, holding that myVidster was neither a direct or contributory infringer. In other words, they were too far removed from the infringing activity, 

    My View

    Irrespective of the potential for individuals to incur liability based on the context of hyperlinks which they create, the application of the DMCA should not extend to their removal.

    Part of the criticism of the DMCA is that there is a substantial burden placed on copyright holders to track down and report instances of infringement across the web. Much like the mythological Hydra, as one falls, more spring up to take its place. Slaying the beast requires attacking the root of the problem; treating hyperlinks as valid subjects of takedown notifications is to mis-understand the task, and only serves in the creation of extra conceptual heads to pursue.

    Rather than target hyperlinks, the focus of enforcement efforts should be on the actual source of the infringing material: the host. Take out the location pointed to by hyperlinks, and they are instantly rendered obsolete. This is not only a far more effective approach in tacking infringing activity, but one that also avoids creating extra and unnecessary work. Financially, this means less is paid to third party agents such as DMCA.com, whose revenue is based on successful takedown notifications.

    The DMCA is already a blunt, and powerful tool. Abuse of the system is rife, and often deployed for the purposes of censoring legitimate expression, rather than to curb copyright infringement. To extend its remit to include the removal of hyperlinks is a dangerous step, that fundamentally alters our relationship with a core structural element of the web, and risks a (further) chilling effect on freedom of speech.

    Despite recent case law seeming to support this principle, the judgements have been extremely dependent on the circumstances involved, and there has been no definitive authorities. As a result, it is up to online service providers to shape the approach to the issue, rejecting DMCA notification takedowns that concern hyperlinks. Policy decisions such as this create the normative frameworks that have the power to help ensure or hinder a free and open web, and it’s critical that tech companies lead the charge, rather than taking a minimum risk stance.

  • The Scottish Government’s Plans for a National Identity Database

    The Scottish Government’s Plans for a National Identity Database

    Over the past couple of weeks, it has come to light that the Scottish Government are holding a public consultation on changes to the National Health Service Central Register (Scotland) Regulations 2006. 

    The NHSCR is essentially a database that holds records on every single person in Scotland who was either born – or registered with a GP – in the country. This is tied to a unique number called the UCRN. Since the bulk of us need to see the doctor now and then – and don’t have private healthcare – that means pretty much all of us is on there. The changes would allow the register to collect some additional information (in the form of postcodes), and then share that data with other public sector organisations.

    The proposed aims of these changes are as follows:

    i. Improve the quality of the data held within the NHSCR

    ii. Assist the tracing of certain persons, for example, children who are missing within the education system and foreign individuals who received NHS treatment in Scotland and left the country with outstanding bills

    iii. Enable the approach to secure and easy access to online services (myaccount) to extend beyond services of Scottish local authorities and health boards to a wider range of public services

    iv. Enable the identification of Scottish tax payers to ensure the accurate allocation of tax receipts to Scotland associated with the Scottish Rate of Income Tax.

    So hold on, how on earth will changes made to a register held by the NHS help trace missing people, or to sort income tax? I’m glad you asked!

    Data Sharing

    Despite being buried away in a seemingly minor consultation in an innocuous piece of legislation, the proposals are actually pretty significant. In essence, they are seeking to use NHS records as a central location for a whole manner of other organisations to track details about people resident in Scotland.

    On the face of it, the sheer dishonesty involved in appropriating a database which has been collected through public trust for other purposes is dismaying enough. However, there are some legitimate aims in there. After all, who could argue with attempting to trace missing children more efficiently? Given the sensitive nature of the information involved, I’m sure that we can expect that the other organisations which would gain access to view and share these types of personal details would be small, and tightly controlled. Right?

    Wrong.

    In the proposed new schedule, there are 98 different organisations listed who would get access to a core set of records. Amongst them are:

    • The Scottish Ministers
    • The Scottish Parliament
    • Revenue Scotland

    Well, okay… not great, but hard to really justify spitting the dummy out over.

    But wait, there’s more:

    • The Foods Standard Agency in Scotland
    • The Drinking Water Quality Regulator in Scotland
    • The Queen’s Printer for Scotland

    Err… what?

    That’s not all though!

    • Glasgow Prestwick Airport
    • Cairngorms National Park Authority
    • Scottish Canals

    and… possibly the best one of them all:

    • Quality Meat Scotland

    Yep, that’s right. Quality Meat Scotland.

    Don’t believe me? See the full list for yourself.

    Now, correct me if I’m wrong, but I see absolutely no reason for these people to have access to my private information:

    Scotsheep 2012 Kings Arms 053

    I’m sure they’re wonderful human beings that do a great job, but when I go to see the doctor about a private matter, I don’t expect that information to then be available to anybody else, especially not a seemingly arbitrary selection of other public organisations.

    Here’s some other possible data exchanges that I find curious:

    • The Forestry Commission sharing information on people with the National Library of Scotland (to find out which books are pulped most, perhaps?)
    • SQA (the exams people) sharing information on people with The Crofters Commission (finding under-qualified Crofters?)
    • Scottish Canals sharing information on people with The Board of Trustees of the Royal Botanic Gardens, Edinburgh (?!?!)

    There are other, more serious potential implications though:

    • The address information of vulnerable people being discovered, or exposed to disgruntled or abusive ex-partners
    • Details of people’s personal medical records (including mental health issues such as depression) being laid bare for others to access – with the potential for discrimination on that basis markedly high

    These possibilities are purely hypothetical at this point, and would arguably be outside of the scope of the proposals in their current form. However, they illustrate the risks that are presented by linking up disparate data-sets in this manner. Once the UCRN is deployed across the public sector, there is little to prevent the above examples from being enabled. The consultation does not the risks that are presented by this, and haven’t given the impression of any sort of detailed consideration about either the privacy implications, or general public interest of this move.

    One would expect there should be detailed regulations in place to control the sort of information transfer being described, yet the consultation remains remarkably quiet on the matter, stating only the following:

    In each of the proposed amendments outlined above the minimum amount of data would be shared for the specific purposes outlined. The organisation will provide information on the individual they wish to identify and will receive equivalent information from the NHSCR and the principal reference number which is the UCRN. Where an organisation wishes to take advantage of this legislation it will also require to have in place data sharing agreements to ensure that appropriate processes are put in place and followed and that the data is used for the specific purpose identified.

    That’s all very well and good, but there is a worryingly scant supply of details on the framework that would ensure these protections would be afforded, or what these ‘appropriate processes’ might be to prevent extra data being shared between organisations without justification. There is also nothing to stop this limited, and disparate set of aims (tracking missing children, establishing a more efficient online user account system for public services, and ensuring Scottish people pay income tax) from expanding in the future to share much more data.

    This is a far bigger issue than it is being presented as.

    Here is a summary of the issues:

    • The proposed changes would create a single national identity database in Scotland
    • There have been no adequate considerations of the privacy or data implications outlined in the consultation
    • There is no way to guarantee that the scope of the data to be shared would not increase in future, once the mechanism is established
    • The changes would undermine the public’s trust in the NHS, by using it as a vehicle to deliver these proposals

    The consultation is woefully inadequate for the significance of these proposals, and the questions framed as if their premise is already universally accepted as a good thing. Almost laughably, instead of leaving space for any potential concerns, the consultation asks about suggestions for other organisations who the data should be shared with. That’s in addition to Prestwick Airport and Quality Meat, for the record.

    The Scottish Government should halt the proposals, and instead move to recognise these changes for what they are: a significant development in our relationship with public sector organisations, requiring a full debate in Parliament, with the chance for both MSPs and the public to scrutinise them.

    Read more from the Open Rights Group on this here.

    Details on the Consultation itself is here. If you’re looking to do so, make sure and get yours in quick, as the closing date is the 25th of February.

  • The Smith Commission Report

    Today saw the release of the report from the ‘Smith Commission’, which was set up in the aftermath of the Scottish independence referendum to discuss the devolving of greater powers to Scotland.

    This was the result of last minute promises (or ‘the vow’) from the main party leaders in Westminster, in the face of polls that showed a majority of support for Scottish independence.

    The vow, and the Commission itself is shrouded in politics and controversy, but I’ve taken a look through the decisions in the report to see for myself what stands out. I’ve tried to take them at face value with my lawyer hat on, rather than look at any of them from an ideological standpoint that supports independence.

    Here’s what I’ve found:

    The Scottish Parliament

    Screen Shot 2014-11-27 at 13.37.37This is a bit of a strange one. Designed to assuage fears that Westminster would dissolve the Scottish Parliament at a whim, it’s nothing more than a symbolic statement. Whilst it’s true that Westminster could theoretically disband the Scottish Parliament (as it is nothing more than a creature of statute), its existence was already guaranteed as much as it could be by constitutional convention. Even with new UK legislation to state the supposed permanence, the doctrine of parliamentary sovereignty dictates that the decisions of one parliament are unable to bind any other – so it doesn’t bring much to the table that wasn’t already there.

    Elections

    Screen Shot 2014-11-27 at 13.49.06

    This is good news, with the parties looking to bring these changes in in time to allow 16 and 17 year olds to vote in the 2016 Scottish Parliamentary elections. Note that whilst this is a great progressive step that corrects some inconsistencies with our approach to the age of consent in Scotland, the same 16 and 17 year olds will not be able to vote in Westminster elections until they reach 18.

    Screen Shot 2014-11-27 at 13.48.45

    Foreign Policy

    Foreign policy remains reserved to Westminster, which isn’t a great shock really. What’s more interesting is the weak approach to the UK’s involvement with the European Union. When a matter relates to Scotland, the Scottish Ministers views should be ‘taken into account’. We all know what that really means.

    Screen Shot 2014-11-27 at 13.55.42The BBC

    Screen Shot 2014-11-27 at 13.58.38

    Interesting, but nothing to write home about. No mention of the license fee, or any other substantive elements of broadcasting in Scotland. Pretty weak, and something that should have really always been the case.

    Pensions

    Screen Shot 2014-11-27 at 14.00.28

    Remain with Westminster.

    Benefits

    Elements of some benefits payments – such as the creation of new benefits – is being given to Scotland. However, a large number of these remain reserved to Westminster. It’s an area that’s relatively long, and not one I claim to have any great knowledge over, so I’ll defer to others for analysis here.

    Minimum Wage

    Screen Shot 2014-11-27 at 14.09.02

    Stays under the control of Westminster. Can’t have Scotland paying a higher minimum wage than the rest of the UK after all, that would be scandalous. Worth noting that Labour were against giving the Scottish Parliament the power to introduce a living wage. Party of the people, indeed.

    Equality Act 2010

    Screen Shot 2014-11-27 at 14.11.49

    Reserved to Westminster. Whilst it’s important to ensure that Scotland wouldn’t slip below the standards set out in the Equality Act 2010, that seems less of a plausible threat than future Tory governments in London doing the same thing. On balance, I don’t see why this should remain a reserved matter.

    Transport

    Nothing all that notable here, with the exception of one massive devolution of power to the Scottish Parliament of course:

    Screen Shot 2014-11-27 at 14.15.45

    Ahem.

    Fracking

    Screen Shot 2014-11-27 at 14.17.17

    A bit of a surprise one, given the economic importance of fracking. The powers relating to this will now lie with the Scottish Government. I suspect we’ll be hearing more about this though. Watch this space.

    Misc.

    Screen Shot 2014-11-27 at 14.18.58

    Good, but… bizarre.

    Income Tax

    Screen Shot 2014-11-27 at 14.20.33
    This one has received a lot of press attention, but it seems to be a case of wilful blindness to what the powers actually entail.

    • Income tax will continue to exist across the UK
    • The Scottish Parliament will have powers to vary the rate of income tax
    • Any income tax received as the result of an adjustment by the Scottish Parliament will go to the Scottish Parliament

    BUT, note the point at the end of 78: that any increase in the amount of money collected through income tax will be met by a ‘corresponding adjustment’ to the amount of money that Scotland receives through the UK. That means that changes to the income tax levels won’t have any real effect on the actual amount of money Scotland gets. This is a clever way to give the impression of the Scottish Parliament getting more powers, whilst making sure they are toothless with regards to delivering any change.

    Other Tax

    Screen Shot 2014-11-27 at 14.25.40

    Pretty much all reserved to Westminster, with the exception of Air Passenger Duty. Note that this includes oil and gas revenues. No big shocker there.

    Screen Shot 2014-11-27 at 14.26.41

    The costs of implementation of a separate system would have to be passed back to Westminster, making it a fairly unattractive power to implement.

    There are also some changes to VAT, where Scotland will apparently generate income from the first part of any collection, but again this corresponds to a reduction in the amount received from the UK block grant, so it’s not worth even paying any attention to.

    Fuel

    Screen Shot 2014-11-27 at 14.28.34

    You guessed it!

    Summary

    I felt pretty good about the results of the Smith Commission when I read the brief reports coming from elsewhere. I dismissed the cynicism I saw from other pro-independence campaigners as inevitable. However, reading through the report for myself is pretty disappointing.

    • No real new powers devolved to the Scottish Parliament
    • A couple of minor victories with regards to 16 and 17 year olds voting in Scottish Parliamentary elections
    • Some symbolic language, which doesn’t give any further legal status to the devolved organs
    • Headline suitable devolutions of certain taxes, which won’t result in any increase in the Scottish Parliament’s budget

    The last one is the most galling of all. It means that even if they make use of the powers to modify the rate of income tax, the Scottish Parliament won’t actually receive any more money. Rather, it’s the source of the money that will change, rather than any powers over the level. This is a sham designed to deliver good headlines.

    Of course, none of this is binding. Westminster still needs to accept the recommendations, which could be another interesting battle.

    You can download the report for yourself here. It’s not too long – only 28 pages. Worth a read for yourself.

     

  • Facebook’s Real Name Policy is Back

    Facebook’s Real Name Policy is Back

    Facebook have pushed ahead with the enforcement of their ‘real name’ policy, which requires users to use their real, or ‘authentic’ name.

    This comes after a previous attempt stalled, following an uproar from the community which forced Facebook to give a rare apology.

    Here’s the gist of the requirements:

    Screen Shot 2014-11-27 at 12.26.07

    Source: https://www.facebook.com/help/112146705538576

    Sounds fair enough on the surface of it, and gives enough room for interpretation to allow aliases or nicknames – precisely what appeased the criticisms from last time. However, the practical implementation seems quite different.

    Screen Shot 2014-11-27 at 12.26.23

    Again, these additional requirements don’t seem too restrictive. If anything, they seem fairly flexible, whilst retaining some sort of continuity. However, the practical implementation has been completely different.

    Today, there have been reports that users have been locked out of their accounts, after Facebook has deemed their names to not be ‘authentic’ enough. This included a determination that the name ‘Daz’ (a common offshoot of Darren) was not acceptable, and ‘Nikki’ should be changed to ‘Nicola’ – despite the insistence that shortened nicknames (like ‘Bob’ in the case of Robert) are fine.

    Now comes the kicker. In order to get back into your account, you either need to provide a ‘real’ name, or some sort of ‘acceptable identification’ to prove that you are known by the name or alias you had beforehand.

    Let’s take a look at what the acceptable forms of identification are, according to Facebook:

    Screen Shot 2014-11-27 at 12.44.06

    Uhm, sorry… what? Despite their warning that you should be sure to blank out any other personal information, there is no reason in hell that anybody should ever be giving copies of the above documents to Facebook. The idea that this would ever be requested is completely ridiculous. If Facebook demanded I send a copy of my passport – redacted or otherwise – then they would be politely told where to shove it.

    But hey! Should you not wish to share such an important piece of sensitive ID with a social network based in a different country, you have another option. You can provide two bits of ID from the following list:

    Screen Shot 2014-11-27 at 12.46.29

    This just becomes more ludicrous. Here’s why:

    • There is no way for Facebook to verify any of the above properly.
    • All of this ‘evidence’ can easily be doctored by any muppet.
    • Even if you are known by a certain name in your everyday life, you won’t have that alias on official documents that require your legal name. In which case, how on earth are you meant to prove the existence of a nickname?
    • WTF is a ‘permit’ anyway?

    There are plenty of reasons why people would legitimately want to avoid using their full, legal name online (those in teaching, or the health service, or…); those who have already lost the ability to remain hidden in searches thanks to previous changes, with the process to use a nickname or alias instead verging on the impossible. But there’s something far more fundamental here: That it’s absolutely fuck all to do with Facebook what name you choose to go by. Making determinations about what is and isn’t ‘authentic’ is evidence of an organisation that has no concern for its users other than its own commercial interests.

    We need to find a better way to communicate than this by using this lot.

  • Obama’s Immigration Plan: Hollow Words

    Obama’s Immigration Plan: Hollow Words

    Immigration. The ugly political topic that quickly ignites guttural feelings from across the political spectrum, allowing fundamentalists to gain ground whilst those seeking compromise rush to take shelter from the crossfire.

    Whilst we in the UK have questions about freedom of movement within the EU to deal with, the situation in America is decidedly different. With far poorer neighbours just across a land border to the south, a history of ignorance, and marriage regulations that vary from state to state, it is a complex issue.

    As part of his Presidential election campaign in 2008, Obama promised to be the one to bring much needed reform to the immigration policies of the US. His voting record at the time (#) appeared to back up his stance on a more liberal approach – such as giving permanent residence to particular categories of workers who are without a legal right to remain in the country.

    In amongst a litany of other broken political promises (Guantanamo Bay, anyone?), there was the specific guarantee to deliver an immigration bill within his first year of office – something that has drawn substantial criticism.

    ‘I cannot guarantee that it is going to be in the first 100 days. But what I can guarantee is that we will have in the first year an immigration bill that I strongly support and that I’m promoting. And I want to move that forward as quickly as possible.’ (#)

    Finally, it was announced a couple of days ago that Obama plans to take executive action to make changes in the way that immigration is handled.

    This is to concentrate on three main areas:

    1. Providing more resources to ‘stem the flow of illegal crossings’ at the border.
    2. Making it easier for ‘high-skilled immigrants’ to stay and work in the US.
    3. Moving to ‘deal responsibly’ with those immigrants who already live in the US illegally.

    The first two issues are almost a necessity to be mentioned in any proposed change to immigration rules, in order to appease those who will (and have) inevitably been outraged by the prospect of any sort of move that isn’t seen to be ‘cracking down’ on the problem. (#) There’s always a feeling in immigration discussions that political parties are simply moving chairs around on the deck of the Titantic; a lot of what’s being proposed (such as ‘Visa Modernization’) sounds fine and well, but isn’t really anything different to what we’ve been told by any other government before. (More detail #)

    The third  issue however, made for some interesting reading, and it’s what Obama spent most of his time explaining in his speech. Obama-Immigration-Transcript.

    The gist of it is as follows:

    • There are millions of undocumented immigrants living in America, who contribute to the society. (That’s putting it lightly. Arguably, the whole American economy relies on the exploitation of those living there illegally).
    • It is impractical to track down and deport all of those people.
    • Giving an unconditional amnesty would be unfair to those who had followed the rules to migrate legally.
    • If people (who have been in the US for a certain amount of time, as well as other conditions) are willing to pay taxes, they can register to ‘come out of the shadows and get right with the law’.

    Unsurprisingly, this was a clever speech, designed to appeal to all parts of society… Biblical references and all.

    ‘Scripture tells us that we shall not oppress a stranger, for we know the heart of a stranger – we were strangers once, too.’

    It is clear that this was as much about a President in his final term forcing the hand of Congress to act, after the Democrats recently suffering a heavy defeat in the midterm elections. This was about throwing a political stake in the sand to try and force change.

    ‘And to those Members of Congress who question my authority to make our immigration system work better, or question the wisdom of me acting where Congress has failed, I have one answer: Pass a bill.’

    It is symbolic, and an admirable aim. However, it appears that this might be all it is.

    Obama’s speech was heavy on rhetoric, and almost non-existent on actual content. Looking closer, it is unclear what it actually means to ‘come out of the shadows and get right with the law’. He explicitly stated that this would not grant a permanent right of residence, or any other rights of citizenship.

    ‘It does not grant citizenship, or the right to stay here permanently, or offer the same benefits that citizens receive’

    It isn’t obvious then, why exactly anybody who is currently living in America illegally (and who meets the criteria) would come forward. All this does is give a temporary reprieve from the threat of deportation, which as the President admitted himself, is a threat that would never realistically come to fruition for many people. Wo why take the risk of stepping out of the shadows in the first place? I wouldn’t.

    Whilst a highly symbolic, and sophisticated political move, this doesn’t actually confer any real benefit on those who Obama spoke passionately about in his speech: those who ‘work hard, often in tough, low-paying jobs’, who go to the same churches and schools as everyone else, who support families, whose ‘hopes, dreams, and patriotism are just like ours’.

    The end game of this move way well be to try and push Congress to make positive changes, but that isn’t the way Obama dressed it up. Instead, he painted a red white and blue striped picture of a glorious America that was embracing brothers and sisters with open arms; as if these changes would give people fundamental and significant protections that they currently don’t have.

    They don’t.

    It’s infuriating enough on its own to listen to yet more politicking on immigration, but especially so given the false hope that Obama has given to those people that he praised as part of American life.

    ‘That’s what this debate is all about. We need more than politics as usual when it comes to immigration; we need reasoned, thoughtful, compassionate debate that focuses on our hopes, not our fears.’

    These are powerful words, but words which ring hollow in the face of scrutiny.

    Sadly people seem more interested in whether this is ‘smart politics’ or legal than about the people the proposed changes are meant to help.

    And that’s the problem.