<?xml version="1.0" encoding="UTF-8"?>
<!--Generated by Squarespace Site Server v5.11.81 (http://www.squarespace.com/) on Fri, 25 May 2012 01:28:34 GMT--><feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/"><title>web.tech.law</title><subtitle>Legal Notes</subtitle><id>http://webtechlaw.com/posts/</id><link rel="alternate" type="application/xhtml+xml" href="http://webtechlaw.com/posts/"/><link rel="self" type="application/atom+xml" href="http://webtechlaw.com/posts/atom.xml"/><updated>2012-05-23T12:34:09Z</updated><generator uri="http://www.squarespace.com/" version="Squarespace Site Server v5.11.81 (http://www.squarespace.com/)">Squarespace</generator><entry><title>The President, his penis and the Streisand Effect</title><category term="Brett Murray"/><category term="Goodman Gallery"/><category term="Portrait"/><category term="President Zuma"/><category term="The Spear"/><category term="case study"/><category term="court cases"/><category term="defamation"/><category term="freedom of expression"/><category term="penis"/><category term="reputation"/><id>http://webtechlaw.com/posts/the-president-his-penis-and-the-streisand-effect.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/the-president-his-penis-and-the-streisand-effect.html"/><author><name>Paul Jacobson</name></author><published>2012-05-19T14:53:00Z</published><updated>2012-05-19T14:53:00Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<h3>Background</h3>

<p>If you have missed the controversy that arose in the last few days about a depiction of President Zuma with his penis exposed called "The Spear", this is what it is all about:</p>

<div style="text-align:center;"><img src="http://www.goodman-gallery.com/files/upload/inventory/12868Inventory22258-1020.jpg" alt="" width="640" height="" border="0" /></div> <br />

<p>The painting is part of an exhibition by <a href="http://www.goodman-gallery.com/artists/brettmurray">Brett Murray</a> called "Hail to the Thief II", a sequel to his 2010 series "Hail to the Thief". It is currently on display at <a href="http://www.goodman-gallery.com/">the Goodman Gallery</a> which describes the exhibition as follows: <br />

<blockquote>Established Cape Town based artist Brett Murray returns to Goodman Gallery Johannesburg with Hail to the Thief II. This body of satirical work continues his acerbic attacks on abuses of power, corruption and political dumbness seen in his 2010 Cape Town show Hail to the Thief. In this sequel show, Murray’s bronzes, etchings, paintings and silk-screens form part of a vitriolic and succinct censure of bad governance and are his attempts to humorously expose the paucity of morals and greed within the ruling elite.</blockquote></p>

<h3>The ANC and Presidency Responds</h3>

<p>The ANC was outraged by the depiction of the President and other works in the exhibition criticising the ANC for, among other things, its apparent corruption and emphasis on material wealth. The ANC released <a href="http://www.anc.org.za/show.php?id=9614">a statement</a> on 17 May which reads as follows: <br />

<blockquote><b>ANC outraged by Brett Murray`s depiction of President Jacob Zuma</b><p>17 May 2012</p><p>The African National Congress is extremely disturbed and outraged by the distasteful and indecent manner in which Brett Murray and the Goodman Gallery in Johannesburg is displaying the person of Comrade President Jacob Zuma.</p>
<p>This disgusting and unfortunate display of the President was brought to our attention by one of the media houses and we have physically confirmed this insulting depiction of the President. We have this morning instructed our lawyers to approach our courts to compel Brett Murray and Goodman Gallery to remove the portrait from display as well as from their website and destroy all printed promotional material. We have also detected that this distasteful and vulgar portrait of the President has been displayed on a weekend newspaper and its website, we again have instructed our lawyers to request the said newspaper to remove the portrait from their website.</p>
<p>It is in our view and we remain steadfast in that the image and the dignity of our President as both President of the ANC, President of the Republic and as a human being has been dented by this so-called piece of art by Brett Murray at Goodman Gallery. We are also of the view that this distasteful depiction of the President has violated his individual right to dignity as contained in the constitution of our country.</p>
<p>The same gallery has displayed the logo of the ANC without the permission of the ANC, with the inscription FOR SALE on it, both these portraits are a clear calculation to dismember and denigrate the symbols and the representative of the ANC, chief amongst them, the President of the ANC.</p>
<p>The ANC believes in both freedom of the press and artistic expression. The vulgar portrait and the dismembering of the ANC logo by Brett Murray is an abuse of freedom of artistic expression and an acute violation of our constitution, apart from being defamatory. That is why we have instructed our lawyers to approach the courts in-view of these violations and the defaming nature of the so-called President Zuma portrait titled ”The Spear”.</p>
<p>Issued by:<br />
Jackson Mthembu<br />
African National Congress</p>
<p>Enquiries:<br />
Jackson Mthembu 082 370 8401<br />
Keith Khoza 082 823 9672</p>
</blockquote></p>

<p>The Presidency similarly published <a href="http://www.presidency.gov.za/pebble.asp?relid=6070">a strongly worded statement the following day</a>: <br />

<blockquote><h3>Presidency disgusted at violation of President Zuma’s rights</h3>

<p>The Presidency is shocked and disgusted at the grotesque painting by Brett Murray depicting President Jacob Zuma in an offensive manner.</p>

<p>We are amazed at the crude and offensive manner in which this artist denigrates the person and the office of the President of the Republic of South Africa.</p>

<p>The Presidency is concerned that Brett Murray fails to appreciate that freedom carries a deep responsibility. The President was amongst the primary architects of our Constitution and shall defend the rights enshrined in our Bill of Rights, including the freedom of artistic expression. However, in exercising these rights, people should at all times be conscious that they are not absolute.</p> 

<p>Nobody has a right to violate the dignity and rights of others while exercising their own. Other than his position as Head of State and as President of the ruling party, President Zuma as a citizen has a right to human dignity, which is enshrined in the Constitution of the Republic. No human being deserves to be denigrated in this shocking manner.</p>

<p>We are also concerned that the painting perpetuates a shocking new culture by some sections of the artistic world, of using vulgar methods of communicating about leading figures in the country, in particular the President. </p>

<p>Intense hatred of the new democratic administration or the ruling party should not translate into distorting South Africa’s value system of emphasising respect and of ensuring that disagreements are expressed in a cultured and civilised manner, which these artists are failing to do. It is shocking as well that some media houses find this distasteful work worth displaying on their websites and are eager to publish it repeatedly.</p>

<p>The President reserves his rights in this matter.</p>
 
<p>Enquiries: Mac Maharaj on 079 879 3203.</p>

<p>Issued by: The Presidency <br />
Pretoria</p></blockquote></p>

<h3>The Goodman Gallery and the City Press Resist</h3>

<p>Both the Goodman Gallery and the City Press, which published a photograph of the image, have refused to accede to the ANC's demands that the images be removed, the art itself removed from view and all promotional materials relating to the work, stating that doing so would amount to censorship. Ferial Haffajee wrote <a href="http://www.citypress.co.za/Columnists/The-spear-of-the-nation-stays-up-20120518">a column which appeared in the City Press</a> in which she explained the paper's position. Here is an extract of her column which is worth reading in its entirety: <br />

<blockquote><p>Did we think the image of President Jacob Zuma by Brett Murray was particularly beautiful to persuade us to publish it? No. <br><br>Would it be something I would hang at home? No.<br><br>

There is a copy stuck on my office window, along with two others from Murray’s explosively angry exhibition of satirical graphic art. <br><br>

Murray, now facing a demand from the governing ANC that he destroy the work, designed some of the anti-apartheid movement’s most iconic resistance art. <br><br>

… <br><br>

Our Constitution explicitly protects artistic expression as a subset of free expression, to which its detractors will respond as they have all week: they draw the line at art that impugns presidential dignity.<br><br>

But I’ve learnt that the commitment to clauses like free expression (be it in art or journalism) is never going to be tested by still lifes of bowls of flowers or by home decor magazines. <br><br>It is always going to be tested by art that pushes boundaries and journalism that upsets holy cows, which is why our clever founders enshrined the right in our Constitution.<br><br>They knew our artists and journalists would, if we stayed true to the founding South African DNA of questioning and truth-saying, need protection.<br><br>In the past week – and in the one to come – we will hear again this clash of free expression and dignity.</p></blockquote></p>

<p>Not convinced, the ANC served an application on the Goodman Gallery and the City Press seeking to interdict them from "displaying and exhibiting on their website or any other platform including the online channels the offensive and distasteful so-called portrait". What the ANC doesn't seem to realise just yet is that its application, due to be heard in the Johannesburg High Court on Tuesday at 12:00, has already failed.</p>

<p>For one thing, the ANC is almost certainly on the wrong side of the law in this matter. As always, Constitutional law expert, Pierre De Vos, has published a somewhat sarcastic but insightful article on some of the reasons the application will fail. His post is titled "<a href="http://constitutionallyspeaking.co.za/on-the-president-his-penis-and-bizarre-attempts-to-censor-a-work-of-art/">On the President, his penis, and bizarre attempts to censor a work of art</a>" and is a must-read if you are interested in some of the legalities that will likely be considered including the following considerations: <br />

<blockquote><p>The ANC may not be aware of the fact that section 16(1)(c) of the Constitution states that everyone has the right to freedom of expression, which includes ”freedom of artistic creativity”.  It is true that no right is unlimited but even where the right to free expression is limited an exception is usually made for artistic expression. Our law often distinguishes between real depictions of individuals and art works and hardly ever allows for the censoring of the latter. For example, section 12 of the Promotion of Equality and Prevention of Unfair Discrimination Act (which prohibits hate speech) explicity makes an exception for a “bona fide engagement in artistic creativity”. Section 3 of the Film and Publications Act contains a similar exception.</p>

<p>The fact that the ANC seems incapable of distinguishing between a work of art and real life will probably ruin their legal case they are planning to launch. The ANC statement says that it has instructed its lawyers to approach the courts to compel Brett Murray and Goodman Gallery to remove the portrait from display as well as from their website and to destroy all printed promotional material relating to the work. But given the protection for artistic freedom in the Constitution and the many exceptions in our law made for the expression of such artistic creativity, I am am almost 100 percent certain that the ANC’s proposed legal action will not be successful. In a democracy, courts seldom order the censoring of a work of art – even if that work of art makes fun of the President and his philandering patriarchal ways. …</p></blockquote></p>

<p>Leaving aside the Constitutional rights arguments which may well include a reference to <a href="http://webtechlaw.com/posts/manto-v-sunday-times-judgment-a-victory-for-free-press.html">the case in the same court involving the late health minister</a> as well as the 2007 case of <a href="http://www.saflii.org/za/cases/ZASCA/2007/56.html">Midi Television v Director of Public Prosecutions (Western Cape) in the Supreme Court of Appeal</a> (thanks to Yolandé van Aswegen for <a href="https://twitter.com/#!/JolyFox/status/203861054013448193">the retweet</a> that highlighted this for me), the ANC has lost this application because of a non-legal phenomenon called the <a href="http://webtechlaw.com/display/Search?moduleId=7681626&searchQuery=streisand+effect">Streisand Effect</a> which has claimed a number of victims in the past.</p>

<h3>The Streisand Effect Strikes Back</h3>

<p><a href="http://en.wikipedia.org/wiki/Streisand_effect">Wikipedia describes the Streisand Effect as follows</a>: <br />

<blockquote>The Streisand effect is a primarily online phenomenon in which an attempt to censor or remove a piece of information has the unintended consequence of causing the information to be publicized widely and to a greater extent than would have occurred if no censorship had been attempted. It is named after American entertainer Barbra Streisand, following a 2003 incident in which her attempts to suppress photographs of her residence inadvertently generated further publicity.</blockquote></p>

<p>In this particular case, the effects of this phenomenon are appearing in search results, numerous newspaper articles covering the controversy and elsewhere online. I looked at two examples of this phenomenon at work: I ran a search for "president zuma" on Google and was presented with the following:</p>

<div style="text-align:center;"><img height="398" border="0" src="http://farm9.staticflickr.com/8028/7226928850_7732e095a7_z.jpg" alt=""President Zuma" search" title=""President Zuma" search" width="640"/></div> <br />

<p>I then ran an image search for "'the spear' zuma" and was presented with these results:</p>

<img border="0" style="display:block; margin-left:auto; margin-right:auto;" height="358" src="http://farm8.staticflickr.com/7081/7226960808_e622391a29_z.jpg" alt=""the spear" zuma - Google Search" width="640" title=""the spear" zuma - Google Search"/> <br />

<p>This controversy is trending in South Africa on Twitter too:</p>

<img border="0" style="display:block; margin-left:auto; margin-right:auto;" height="" src="http://farm9.static.flickr.com/8144/7227181214_e88dcb3e00.jpg" alt="Twitter - Zuma Spear trending" width="" title="Twitter - Zuma Spear trending"/> <br />

<p>A more concrete illustration of how the Streisand Effect has thwarted the ANC's efforts to censor the work came from <a href="http://www.citypress.co.za/Politics/News/Zuma-Spear-ANC-demand-has-no-legal-basis-20120518">a follow-up article</a> focusing on the Goodman Gallery's response to the ANC's demands and the tremendous interest in the exhibition: <br />

<blockquote><p>Traffic to the Goodman Gallery in Johannesburg, which has also been instructed to remove the painting by the ANC’s lawyers, has been higher than usual since City Press published the portrait on Sunday.<br><br>“Actually it’s insane here this morning,” said Lisa Koseff, a staff member at the gallery.<br><br>“I would say this is the biggest response we’ve ever had to an exhibition.”<br><br>She said there was huge interest from international media.</p></blockquote></p>

<p>Major international news services like <a href="http://news.sky.com/home/world-news/article/16231029">Sky News</a> and <a href="http://www.huffingtonpost.com/2012/05/18/jacob-zuma-penis-portrait_n_1527059.html">the Huffington Post</a> have covered this story and others are sure to follow soon.</p>

<p>What does this all mean? It means that regardless of whether the ANC and the President have a sound legal basis to demand the work's removal from public view, their actions in pursuit of this (including very public statements expressing outrage and the application launched yesterday) have shone a very bright and public spotlight on what would otherwise have been a relatively short-lived and isolated amusement. The ANC forgets that the work would not just be distributed through the gallery's website, promotional materials and coverage in the City Press but by every person who was alerted to the controversy and who tweeted, shared or blogged about it, motivated by amusement, outrage at the ANC's censorship attempts or the simple desire to share it with their connections.</p>

<p>Of course the ANC and the President are entitled to express their outrage, dismay, disgust or any other opinion about the work and are free to make their views public (just as anyone else commenting on the work is entitled to express an opinion about it) but in such a connected world where media-rich news spreads across the globe in moments, they should have given more consideration to the consequences of doing so. In a very real sense, they have made a powerful contribution to their application's ultimate failure as a means to close this Pandora's box. As I pointed out in <a href="http://webtechlaw.com/posts/the-trouble-with-online-defamation.html">my post dealing with the challenges presented by online defamation</a>: <br />

<blockquote><p>In the <a href="http://en.wikipedia.org/wiki/AACS_encryption_key_controversy">2007 Digg controversy</a> [<em>link added</em>], Toshiba's attorney at the time, Michael Avery, summed up this challenge as follows: <br />

<blockquote>If you try to stick up for what you have a legal right to do, and you're somewhat worse off because of it, that's an interesting concept.</blockquote></p></blockquote></p>

<p><strong>Update (2012-05-24)</strong>: The matter is being heard in court today and some interesting comments and rulings are emerging:</p>

<p><blockquote class="twitter-tweet tw-align-center"><p>Dignity and privacy rights do not apply to Zuma's office as president of the country or the ANC, his counsel concedes. Very important.</p>&mdash; Nicholas Dawes (@NicDawes) <a href="https://twitter.com/NicDawes/status/205585647904362496" data-datetime="2012-05-24T09:06:52+00:00">May 24, 2012</a></blockquote>
<script src="http://webtechlaw.com//platform.twitter.com/widgets.js" charset="utf-8"></script></p>

<p><blockquote class="twitter-tweet tw-align-center"><p><a href="https://twitter.com/search/%2523ZumaSpear">#ZumaSpear</a> GM: He was insulted personally &amp; as President. But only remedy available is to him personally. SG</p>&mdash; Stephen Grootes (@StephenGrootes) <a href="https://twitter.com/StephenGrootes/status/205585009090887680" data-datetime="2012-05-24T09:04:20+00:00">May 24, 2012</a></blockquote>
<script src="http://webtechlaw.com//platform.twitter.com/widgets.js" charset="utf-8"></script></p>

<p><blockquote class="twitter-tweet tw-align-center"><p><a href="https://twitter.com/search/%2523ZumaSpear">#ZumaSpear</a> Judge Claasen: A final interdict cannot be monitored, if the court issues it in perpetuity, what if pics downloaded by others? SG</p>&mdash; Stephen Grootes (@StephenGrootes) <a href="https://twitter.com/StephenGrootes/status/205583000371593216" data-datetime="2012-05-24T08:56:21+00:00">May 24, 2012</a></blockquote>
<script src="http://webtechlaw.com//platform.twitter.com/widgets.js" charset="utf-8"></script></p>]]></content></entry><entry><title>Instagram's new content license (it still doesn't own your content)</title><category term="content licensing"/><category term="content licensing"/><category term="copyright"/><category term="copyright"/><category term="instagram"/><category term="social web"/><category term="terms and conditions"/><id>http://webtechlaw.com/posts/instagrams-new-content-license-it-still-doesnt-own-your-cont.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/instagrams-new-content-license-it-still-doesnt-own-your-cont.html"/><author><name>Paul Jacobson</name></author><published>2012-04-30T10:20:33Z</published><updated>2012-04-30T10:20:33Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p>Rian van der Merwe posted a tweet asking me to comment on the changes to <a href="http://instagram.com/about/legal/terms/">Instagram's Terms of Service</a>: </p>

<blockquote class="twitter-tweet tw-align-center"><p>@<a href="https://twitter.com/pauljacobson">pauljacobson</a> I thought you might be able to shed some light? <a href="http://t.co/hXqmEQMM" title="http://b.elezea.com/post/22114542620">b.elezea.com/post/221145426…</a></p>&mdash; Rian van der Merwe (@RianVDM) <a href="https://twitter.com/RianVDM/status/196889271527936000" data-datetime="2012-04-30T09:10:35+00:00">April 30, 2012</a></blockquote>
<script src="http://webtechlaw.com//platform.twitter.com/widgets.js" charset="utf-8"></script> <br />

<p><a href="http://b.elezea.com/post/22114542620">Rian posted the new license from the terms on his one blog</a> and I took a quick look at it (I am in a lock-down here at work so I haven't had time to review the full terms for this post). The new license states the following: <br />

<blockquote>Instagram does NOT claim ANY ownership rights in the text, files, images, photos, video, sounds, musical works, works of authorship, applications, or any other materials (collectively, "Content") that you post on or through the Instagram Services. By displaying or publishing ("posting") any Content on or through the Instagram Services, you hereby grant to Instagram a non-exclusive, fully paid and royalty-free, worldwide, limited license to use, modify, delete from, add to, publicly perform, publicly display, reproduce and translate such Content, including without limitation distributing part or all of the Site in any media formats through any media channels, except Content not shared publicly ("private") will not be distributed outside the Instagram Services.</blockquote></p>

<p>Rian's (and, I'm sure many other people's) concern is nicely summed up in the rest of his post: <br />

<blockquote><p>Here&#8217;s my non-lawyer interpretation:</p>

<blockquote>
  <p>We don&#8217;t own your stuff, but we can do whatever we want with it.</p>
</blockquote>

<p>Which kind of sounds like it can be shortened to:</p>

<blockquote>
  <p>We own your stuff.</p>
</blockquote>

<p>Any lawyers out there who can clarify what&#8217;s going on here?</p></blockquote></p>

<p><a href="http://instagram.com/"><img src="http://webtechlaw.com/resource/Instagram%20logo-1.jpg?fileId=17937095" alt="Instagram logo 1" title="Instagram logo-1.jpg" border="0" width="348" height="97" style="padding:5px;" align="right" /></a>The subtext here is that the Facebook acquisition has poisoned this popular service and Facebook is encroaching on Instagram users' rights over their content. As Web services go, this content license is typical and hardly a land grab which it may be made out to be. As I mentioned in my previous post about the Google Drive license terms – <br />

<blockquote>This clause clearly states that Dropbox doesn’t claim ownership of your data but the more important set of provisions are those dealing with the license Dropbox takes from its users when it comes to accessing and making use of the data you upload to Dropbox. Bear in mind that all of these services will have a license of some sort. A license is a set of permissions you, as the user, give to the provider and that enables the provider to receive, manipulate and otherwise handle your data. It’s an essential component and nothing to be alarmed by in itself (at least not if you are comfortable with the basic idea of a provider having access to your data as part of your use of the particular service).</blockquote></p>

<p>Instagram's license is fairly broad but <a href="http://webtechlaw.com/posts/what-twitpics-terms-of-service-really-say-about-your-copyrig.html">it could be even worse</a>. The license is basically designed to enable the service to operate. In the absence of a specific license Instagram could fairly convincingly argue that the permissions set out in this license would be implicit in the unspoken license users would grant to Instagram merely by using the service. In other words, when you use Instagram, the license provisions are implied by your use.</p>

<p>By comparison, here is the license Facebook takes from you: <br />

<blockquote>For content that is covered by intellectual property rights, like photos and videos (IP content), you specifically give us the following permission, subject to your privacy and application settings: you grant us a non-exclusive, transferable, sub-licensable, royalty-free, worldwide license to use any IP content that you post on or in connection with Facebook (IP License). This IP License ends when you delete your IP content or your account unless your content has been shared with others, and they have not deleted it.</blockquote></p>

<p>What I find interesting about the Instagram license is that it is implicitly in favour of Instagram, Inc (the company behind Instagram); it isn't transferrable and it isn't even sub-licensable. This means the license is limited to Instagram and you don't give Instagram the right to license your content to Facebook or any other party. The wording is a little unclear because the license gives Instagram the ability to distribute "part or all of the Site in any media formats through any media channels" and yet it doesn't permit the content to be sub-licensed or to transfer the license to another party. This is probably a flaw in the license language because it is notionally problematic for anyone to consume other users' posts in a way that would require those consumers exercising the user's rights under copyright and which is not covered by an exception to copyright infringement like fair dealing or fair use.</p>

<p>Moving away from the legal geekery, the new Instagram license is not a land grab. It is a pretty reasonable license given the nature of the service and doesn't equate to "We own your stuff". Rather it's more like "We can do things with your stuff to make Instagram work".</p>]]></content></entry><entry><title>Google Drive and the data ownership panic</title><category term="content licensing"/><category term="dropbox"/><category term="google drive"/><category term="licenses"/><category term="skydrive"/><category term="social web"/><category term="terms and conditions"/><category term="terms and conditions"/><id>http://webtechlaw.com/posts/google-drive-and-the-data-ownership-panic.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/google-drive-and-the-data-ownership-panic.html"/><author><name>Paul Jacobson</name></author><published>2012-04-26T09:50:54Z</published><updated>2012-04-26T09:50:54Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p class="p1" style="text-align: center;"><a href="https://drive.google.com/start#home"><img src="http://4.bp.blogspot.com/-OmO4AEPzKVE/T5bIDxKcD6I/AAAAAAAAJHI/msRIMa4kQpI/s1600/FINAL%2BFINAL%2BOGB%2Bblog%2Bpost%2Bscreenshot.png" border="0" alt="" width="640" /></a></p>
<p class="p1"><a href="http://googleblog.blogspot.com/2012/04/introducing-google-drive-yes-really.html">Google Drive launched a couple days ago</a> and some new publications are already writing about possible data ownership issues. It&rsquo;s a common concern whenever a new service launches or website terms and conditions change. <a href="http://about.me/darren.m.smith">Darren Smith</a> pointed me to an article by C|Net titled &ldquo;<a href="http://news.cnet.com/8301-1023_3-57420551-93/who-owns-your-files-on-google-drive/">Who owns your files on Google Drive?</a>&rdquo; which had a somewhat confused focus and an unnecessarily alarming conclusion represented by this tagline:</p>
<blockquote>
<p class="p3">Dropbox and Microsoft's SkyDrive allow you to retain your copyright and IP rights to the work you upload to the service, but Google Drive takes everything you own.</p>
</blockquote>
<p class="p2">I took a look at <a href="https://www.dropbox.com/terms">Dropbox</a>&rsquo;s, <a href="http://windows.microsoft.com/en-US/windows-live/microsoft-service-agreement">Microsoft</a>&rsquo;s and Google&rsquo;s terms and conditions to test this conclusion.</p>
<h3>Dropbox&rsquo;s terms and conditions</h3>
<p class="p2">The C|Net post focused on this clause in the Dropbox terms which are only part of the story when it comes to Dropbox&rsquo;s terms:</p>
<blockquote>
<p class="p3">By using our Services you provide us with information, files, and folders that you submit to Dropbox (together, &ldquo;your stuff&rdquo;). You retain full ownership to your stuff. We don&rsquo;t claim any ownership to any of it. These Terms do not grant us any rights to your stuff or intellectual property except for the limited rights that are needed to run the Services, as explained below.</p>
</blockquote>
<p class="p2">This clause clearly states that Dropbox doesn&rsquo;t claim ownership of your data but the more important set of provisions are those dealing with the license Dropbox takes from its users when it comes to accessing and making use of the data you upload to Dropbox. Bear in mind that all of these services will have a license of some sort. A license is a set of permissions you, as the user, give to the provider and that enables the provider to receive, manipulate and otherwise handle your data. It&rsquo;s an essential component and nothing to be alarmed by in itself (at least not if you are comfortable with the basic idea of a provider having access to your data as part of your use of the particular service).</p>
<p class="p2">Dropbox&rsquo;s license provisions are pretty vague. Here are the key clauses:</p>
<blockquote>
<p class="p3">We may need your permission to do things you ask us to do with your stuff, for example, hosting your files, or sharing them at your direction. This includes product features visible to you, for example, image thumbnails or document previews. It also includes design choices we make to technically administer our Services, for example, how we redundantly backup data to keep it safe. You give us the permissions we need to do those things solely to provide the Services. This permission also extends to trusted third parties we work with to provide the Services, for example Amazon, which provides our storage space (again, only to provide the Services).</p>
<p class="p3">To be clear, aside from the rare exceptions we identify in our <a href="https://www.dropbox.com/privacy">Privacy Policy</a>, no matter how the Services change, we won&rsquo;t share your content with others, including law enforcement, for any purpose unless you direct us to. How we collect and use your information generally is also explained in our <a href="https://www.dropbox.com/privacy">Privacy Policy</a>.</p>
<p class="p3">&hellip;</p>
<p class="p3"><strong>Sharing Your Stuff</strong></p>
<p class="p3">The Services provide features that allow you to share your stuff with others or to make it public. There are many things that users may do with that stuff (for example, copy it, modify it, re-share it). Please consider carefully what you choose to share or make public. Dropbox has no responsibility for that activity.</p>
</blockquote>
<p class="p2">The basic idea is clear, though. Dropbox requires your permission to run its service and you agree to give it whatever permissions it requires to do that. The problem with this simplistic approach is that it is too simplistic and vague. As a user you don&rsquo;t really know what the license&rsquo;s parameters are beyond whatever is not required to operate the service.</p>
<h3>Microsoft Services Agreement</h3>
<p class="p2">These terms and conditions are not limited to SkyDrive but apply to a range of Microsoft services:</p>
<blockquote>
<p class="p3">It's a contract that governs your use of any Windows Live, Bing, MSN, Microsoft Office Live, or Office.com services or software, or other Microsoft services or software that directly display or link to this agreement (the "service"). By using or accessing the service, you confirm that you agree to these terms. If you don't agree, don't use the service. Thanks.</p>
</blockquote>
<p class="p2">This is significant because, unlike with Dropbox where your license relates to a fairly specific service, the license you grant to Microsoft encompasses a variety of services which are increasingly interconnected. This is very similar to Google&rsquo;s terms (below). These terms and conditions are more specific than Dropbox&rsquo;s licensing provisions and also contain a statement that Microsoft doesn&rsquo;t claim ownership of users&rsquo; data:</p>
<blockquote>
<p class="p3">5. Your content</p>
<p class="p3">Except for material that we license to you, we don't claim ownership of the content you provide on the service. Your content remains your content. We also don't control, verify, or endorse the content that you and others make available on the service.</p>
<p class="p3">You control who may access your content. If you share content in public areas of the service or in shared areas available to others you've chosen, then you agree that anyone you've shared content with may use that content. When you give others access to your content on the service, you grant them free, nonexclusive permission to use, reproduce, distribute, display, transmit, and communicate to the public the content solely in connection with the service and other products and services made available by Microsoft. If you don't want others to have those rights, don't use the service to share your content.</p>
<p class="p3">You understand that Microsoft may need, and you hereby grant Microsoft the right, to use, modify, adapt, reproduce, distribute, and display content posted on the service solely to the extent necessary to provide the service.</p>
<p class="p3">Please respect the rights of artists, inventors, and creators. Content may be protected by copyright. People appearing in content may have a right to control the use of their image. If you share content on the service in a way that infringes others' copyrights, other intellectual property rights, or privacy rights, you're breaching this contract. You represent and warrant that you have all the rights necessary for you to grant the rights in this section and the use of the content doesn't violate any law. We won't pay you for your content. We may refuse to publish your content for any or no reason. We may remove your content from the service at any time if you breach this contract or if we cancel or suspend the service.</p>
<p class="p3"><strong>You're responsible for backing up the data that you store on the service. If your service is suspended or canceled, we may permanently delete your data from our servers. We have no obligation to return data to you after the service is suspended or canceled. If data is stored with an expiration date, we may also delete the data as of that date. Data that is deleted may be irretrievable.</strong></p>
</blockquote>
<p class="p2">A couple things emerge from these terms and conditions. Firstly, when you share your data with other people, you give them a limited license to use your data &ldquo;solely in connection with the service and other products and services made by Microsoft&rdquo;. Similarly, the license users grant to Microsoft in respect of their data is limited to permissions required &ldquo;solely to the extent necessary to provide the service&rdquo;.</p>
<h3>Google&rsquo;s terms and conditions</h3>
<p class="p2">Google Drive is governed by Google&rsquo;s Terms and the license provisions are fairly similar to Dropbox&rsquo;s and SkyDrive&rsquo;s, at least when it comes to the basic approach. As with the other two services, Google doesn&rsquo;t claim ownership of your data. Here are the license provisions:</p>
<blockquote>
<p class="p3"><strong>Your Content in our Services</strong></p>
<p class="p3">Some of our Services allow you to submit content. You retain ownership of any intellectual property rights that you hold in that content. In short, what belongs to you stays yours.</p>
<p class="p3">When you upload or otherwise submit content to our Services, you give Google (and those we work with) a worldwide license to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations or other changes we make so that your content works better with our Services), communicate, publish, publicly perform, publicly display and distribute such content. The rights you grant in this license are for the limited purpose of operating, promoting, and improving our Services, and to develop new ones. This license continues even if you stop using our Services (for example, for a business listing you have added to Google Maps). Some Services may offer you ways to access and remove content that has been provided to that Service. Also, in some of our Services, there are terms or settings that narrow the scope of our use of the content submitted in those Services. Make sure you have the necessary rights to grant us this license for any content that you submit to our Services.</p>
<p class="p3">You can find more information about how Google uses and stores content in the privacy policy or additional terms for particular Services. If you submit feedback or suggestions about our Services, we may use your feedback or suggestions without obligation to you.</p>
</blockquote>
<p class="p2">The license Google users grant to Google is notionally for the &ldquo;limited purpose of operating, promoting, and improving our Services, and to develop new ones&rdquo; but it is somewhat open ended in that Google could develop new services or modify existing ones that require your data to be used in ways you couldn&rsquo;t have anticipated when signing up. This is fairly similar to Microsoft&rsquo;s Services Agreement which also uses one license for all its services.</p>
<h3>What does this all mean?</h3>
<p class="p2">The C|Net article contains this rather alarming set of statements:</p>
<blockquote>
<p class="p3">The last sentence makes all the difference. While these rights are limited to essentially making Google Drive better and to develop new services run by Google, the scope is not defined and could extend far further than one would expect.</p>
<p class="p3">Simply put: there's no definitive boundary that keeps Google from using what it likes from what you upload to its service.</p>
<p class="p3">The chances are Google's terms will never be an issue -- and it is likely over-zealous lawyers making sure Google doesn't somehow get screwed in the long run by a lawsuit -- but it may be enough to push away a great number of entrepreneurs and creative workers who rely on holding on to the rights to their own work.</p>
<p class="p3">The fact is, according to its terms, Google may own any code or product you ultimately upload to its new Google Drive service, whether you realise it or not.</p>
</blockquote>
<p class="p2">These statements, particularly the last one, are factually incorrect and misleading. They are also not uncommon when journalists attempt to navigate terms and conditions without the time or inclination to read them carefully. Google doesn&rsquo;t claim ownership of its users&rsquo; data. Its license is fairly broad and that is understandable given the wide range of services it offers. At the same time, there is scope for the already broad license to be applied in ways users may not have considered. The specific permissions users grant to Google are substantially the same as those users grant to Microsoft (Google is more specific and lists more individual permissions but they are not fundamentally different).&nbsp;</p>
<p class="p2">The big difference here is between Dropbox&rsquo;s terms, on one hand, and Google&rsquo;s and Microsoft&rsquo;s on the other hand. Dropbox offers a fairly specific set of services so users have more certainty as to what they are licensing Dropbox to do with their data. Google and Microsoft offer a range of interconnected services governed by a single legal framework and the potential scope for their licenses is far broader when you consider that their users may be using a variety of Google and Microsoft services with different functionality.</p>
<p class="p2">I&rsquo;ve seen license provisions which are far more onerous in the past. <a href="http://webtechlaw.com/posts/can-you-trust-facebook-part-2.html">The big culprit back in 2007 was Facebook with this gem</a>:</p>
<blockquote>
<p class="p3">When you post User Content to the Site, you authorize and direct us to make such copies thereof as we deem necessary in order to facilitate the posting and storage of the User Content on the Site. By posting User Content to any part of the Site, you automatically grant, and you represent and warrant that you have the right to grant, to the Company an irrevocable, perpetual, non-exclusive, transferable, fully paid, worldwide license (with the right to sublicense) to use, copy, publicly perform, publicly display, reformat, translate, excerpt (in whole or in part) and distribute such User Content for any purpose on or in connection with the Site or the promotion thereof, to prepare derivative works of, or incorporate into other works, such User Content, and to grant and authorize sublicenses of the foregoing. You may remove your User Content from the Site at any time. If you choose to remove your User Content, the license granted above will automatically expire, however you acknowledge that the Company may retain archived copies of your User Content.</p>
</blockquote>
<p class="p2">This license was as close to an assumption of ownership as Facebook has ever come. It was so close to assuming ownership that the difference between ownership and licensing user content was a matter of semantics. The controversies over the Facebook terms did a lot to create more awareness of users&rsquo; expectations and what it means to be a better licensor. The current generation of terms and conditions reflect that, for the most part (there are still some shockers). These modern licenses are clearer, limited in varying degrees but are often necessarily broad to enable these services to function effectively. I agree with the one statement in the C|Net article, though &ndash;</p>
<blockquote>
<p class="p3">It always pays to read the fine print.</p>
</blockquote>]]></content></entry><entry><title>Privacy in a nutshell, a guide</title><category term="Protection of Personal Information Bill"/><category term="bill of rights"/><category term="education"/><category term="guide"/><category term="overview"/><category term="personal information"/><category term="personal information"/><category term="privacy"/><category term="privacy"/><category term="right to privacy"/><id>http://webtechlaw.com/posts/privacy-in-a-nutshell-a-guide.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/privacy-in-a-nutshell-a-guide.html"/><author><name>Paul Jacobson</name></author><published>2012-04-11T13:37:28Z</published><updated>2012-04-11T13:37:28Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p>I started working on an overdue post this morning and, as I started to do that, I realised it would be really helpful to first publish this guide, "Privacy law in a nutshell", as an introduction to South African privacy law (some of the principles apply elsewhere too). It is a pretty brief overview but if you are not familiar with some of the basic legal principles and considerations relating to privacy, this should help.</p>

<iframe class="scribd_iframe_embed" src="http://www.scribd.com/embeds/88873181/content?start_page=1&view_mode=list&access_key=key-1280tic2p3umaifbi3c4" data-auto-height="true" data-aspect-ratio="0.706697459584296" scrolling="no" id="doc_45905" width="100%" height="600" frameborder="0"></iframe>]]></content></entry><entry><title>Pinterest's amended terms still leave users exposed</title><category term="content licensing"/><category term="copyright"/><category term="liability"/><category term="pinterest"/><category term="social web"/><category term="terms and conditions"/><category term="terms of service"/><category term="users"/><id>http://webtechlaw.com/posts/pinterests-amended-terms-still-leave-users-exposed.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/pinterests-amended-terms-still-leave-users-exposed.html"/><author><name>Paul Jacobson</name></author><published>2012-03-29T08:05:25Z</published><updated>2012-03-29T08:05:25Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p><a href="http://pinterest.com"><img src="http://passets-cdn.pinterest.com/images/about/logos/Pinterest_Logo.png" align="right" alt="" width="200" height="" border="0" style="padding:5px;" /></a><a href="http://pinterest.com">Pinterest</a> (<em>I am going to be a little lazy in this post and refer to "Pinterest" when discussing both the site and its creator, Cold Brew Labs</em>) has been in the spotlight quite a bit lately due to its terms of service as well as content creators' concerns that their content is being shared without their permission on the service by its enthusiastic users. I wrote about the copyright implications in my post titled "<a href="http://webtechlaw.com/posts/is-pinterest-a-den-of-copyright-thieves.html">Is Pinterest a den of copyright thieves?</a>" and about the potential liability users face in a subsequent post titled "<a href="http://webtechlaw.com/posts/pinterests-hidden-threat-to-its-users.html">Pinterest's hidden threat to its users</a>". <a href="http://blog.pinterest.com/post/19799177970/pinterest-updated-terms">Pinterest announced updates to its terms</a> recently and the new terms go into effect next week. Unfortunately the new terms still leave users exposed to potentially substantial liability simply by using the service."

<h3>Current terms (published on 29 March 2011)</h3>

<p>Much of the focus on Pinterest's new terms of service (which go into effect on 6 April) is on the original content license users grant to Pinterest which includes the right to "sell" "Member Content". The two key clauses here are the definition of "Member Content" and the original license clause which state the following (I highlighted the problematic terms in bold): <br />

<blockquote>"Member Content" means all Content that a Member posts, uploads, publishes, submits or transmits to be made available through the Site, Application or Services.</blockquote>

<p>and</p>

<blockquote>We may, in our sole discretion, permit Members to post, upload, publish, submit or transmit Member Content. By making available any Member Content through the Site, Application or Services, you hereby grant to Cold Brew Labs a worldwide, <strong>irrevocable</strong>, <strong>perpetual</strong>, non-exclusive, <strong>transferable</strong>, <strong>royalty-free license</strong>, <strong>with the right to sublicense</strong>, to use, copy, adapt, modify, distribute, license, <strong>sell</strong>, transfer, publicly display, publicly perform, transmit, stream, broadcast, access, view, and otherwise exploit such Member Content only on, through or by means of the Site, Application or Services. Cold Brew Labs does not claim any ownership rights in any such Member Content and nothing in these Terms will be deemed to restrict any rights that you may have to use and exploit any such Member Content.</blockquote></p>

<p>The effect of these provisions was to enable Pinterest to commercially exploit Member Content published on the site on the basis that users grant Pinterest. This license is granted automatically and the way Pinterest attempts to ensure that users are legally authorised to grant this license is through this acknowledgement or warranty: <br />

<blockquote>You acknowledge and agree that you are solely responsible for all Member Content that you make available through the Site, Application and Services. Accordingly, you represent and warrant that: (i) you either are the sole and exclusive owner of all Member Content that you make available through the Site, Application and Services or you have all rights, licenses, consents and releases that are necessary to grant to Cold Brew Labs the rights in such Member Content, as contemplated under these Terms; and (ii) neither the Member Content nor your posting, uploading, publication, submission or transmittal of the Member Content or Cold Brew Labs’ use of the Member Content (or any portion thereof) on, through or by means of the Site, Application and the Services will infringe, misappropriate or violate a third party’s patent, copyright, trademark, trade secret, moral rights or other proprietary or intellectual property rights, or rights of publicity or privacy, or result in the violation of any applicable law or regulation.</blockquote></p>

<p>This sort of warranty is a common mechanism in website terms and short of having each user prove they are entitled to post each item to the service (totally impractical), this is how site providers tend to protect themselves from a user submissions perspective.</p>

<p>One of the significant challenges in these terms is that users are potentially liable for substantial damages simply by using the service. This is as a result of the liability clauses in the terms. I won't go into this in detail here as I have already done so in my post titled "<a href="http://webtechlaw.com/posts/pinterests-hidden-threat-to-its-users.html">Pinterest's hidden threat to its users</a>" which I recommend you read before continuing with this post.</p>

<a href="http://pinterest.com/"><img border="0" style="display:block; margin-left:auto; margin-right:auto;" height="356" src="http://farm8.staticflickr.com/7244/7026138625_98f0edc525_z.jpg" alt="Paul Jacobson / Pinterest" width="640" title="Paul Jacobson / Pinterest"/></a> <br />

<h3>The new terms (6 April 2012)</h3>

<p>The new terms deal with content a little differently. Firstly, the definition will change to "User Content". This isn't as well defined as "Member Content" is in the current terms. It is defined or framed as follows (I highlighted the relevant sections): <br />

<blockquote><strong>Your content</strong>. Pinterest allows you to pin and post content on the Service, including photos, comments, and other materials. <b>Anything that you pin, post, display, or otherwise make available on our Service, including all Intellectual Property Rights (defined below) in such content, is referred to as “User Content.”</b> You retain all of your rights in all of the User Content you post to our Service.</blockquote></p>

<p>Framing "User Content" this way does two things. It streamlines the definition of User Content and it explicitly states that users retain the rights they have in the content they post. This means that Pinterest has no ownership claim over your stuff which you post to the site or, implicitly, anyone else's. This also addresses a very common misperception we see in media coverage of site terms of use: Pinterest doesn't claim to own your content. In fact, I don't recall ever seeing site terms where a provider claims ownership of user content. The problem lies more in how broad the license is that users grant these service providers. The license users grant Pinterest is the following (I've highlighted some interesting provisions): <br />

<blockquote><ul>
        <li><strong>How Pinterest and other users can use your content.</strong>  Subject to any applicable account settings you select, you grant us a non-exclusive, <b>royalty-free</b>, transferable, <b>sublicensable</b>, worldwide license to use, display, reproduce, re-pin, modify (e.g., re-format), re-arrange, and distribute your User Content on Pinterest for the purposes of operating and providing the Service(s) to you and to our other Users.  Nothing in these Terms shall restrict Pinterest’s rights under separate licenses to User Content.  Please remember that the Pinterest Service is a public platform, and that other Users may search for, see, use, and/or re-pin any User Content that you make publicly available through the Service.</li>
        <li><strong>How long we keep your content:</strong>  Following termination or deactivation of your account, or if you remove any User Content from your account or your boards, Pinterest may retain your User Content for a <b>commercially reasonable period of time</b> for backup, archival, or audit purposes.  Furthermore, Pinterest and other Users may retain and continue to display, reproduce, re-pin, modify, re-arrange, and distribute any of your User Content that other Users have re-pinned to their own boards or which you have posted to public or semi-public areas of the Service.</li></ul></blockquote></p>

<p>What is noticeable is that the new terms omit the reference to "sell" and the new license is not irrevocable or perpetual. It is still royalty-free and "sublicenseable" so Pinterest is not liable for any royalties payable for publishing User Content and can sub-license the content to another party. This latter requirement may be intended more to enable the service to function more than a desire to move content around. Any other party that republishes the content as part of the overall service would need the right to do so. This may include Pinterest's hosting provider, 3rd party services and so on.</p>

<p>A related term in the new terms is "Pinterest Content" which is framed as follows: <br />

<blockquote><strong>Pinterest Content</strong>. Except for User Content, the Service itself, all content and other subject matter included on or within the Service, and all Intellectual Property Rights in or related to the Service or any such content or other subject matter (“Pinterest Content”) are the property of Pinterest and its licensors. Except as expressly provided in these Terms, you agree not to use, modify, reproduce, distribute, sell, license, or otherwise exploit the Pinterest Content without our permission.</blockquote></p>

<p>A big change in the new terms is the introduction of an Acceptable Use Policy which more fully addresses how users can make use of the service. Two of the prohibitions include posting any User Content that – <br />

<blockquote>infringes any third party’s Intellectual Property Rights, privacy rights, publicity rights, or other personal or proprietary rights</blockquote>

<p>and</p>

<blockquote>contains any information or content that you do not have a right to make available under any law or under contractual or fiduciary relationships</blockquote></p>

<p>The new terms define "Intellectual Property Rights" as follows: <br />

<blockquote><strong>Definition of Intellectual Property Rights</strong>. When we refer to “Intellectual Property Rights” in these Terms, we mean all patent rights; copyright rights; moral rights; rights of publicity; trademark, trade dress and service mark rights (and associated goodwill); trade secret rights; and all other intellectual property and proprietary rights as may now exist or hereafter come into existence, and all applications for any of these rights and registrations, renewals and extensions of any of these rights, in each case under the laws of any state, country, territory or other jurisdiction.</blockquote></p>

<p>The new terms make it pretty clear that users are only to publish content they have the rights to publish, whether this be under a license granted by the content creator (most Creative Commons licensed content, for example, would probably be fine) or where there are copyright infringement exceptions (I wrote about this in my first post titled "<a href="http://webtechlaw.com/posts/is-pinterest-a-den-of-copyright-thieves.html">Is Pinterest a den of copyright thieves?</a>"). The terms also include fairly extensive provisions intended for content owners and which detail Pinterest's interest in protecting their rights, preventing efforts to circumvent the so-called "no pin" tag content owners can use to block efforts to pin their content as well as to report any copyright infringement.</p>

<p>What Pinterest hasn't changed much are its liability protection clauses. As with the current terms, the new terms include an indemnity clause which states the following: <br />

<blockquote>You agree to indemnify and hold harmless Pinterest and its officers, directors, employees and agents, from and against any claims, suits, proceedings, disputes, demands, liabilities, damages, losses, costs and expenses, including, without limitation, reasonable legal and accounting fees (including costs of defense of claims, suits or proceedings brought by third parties), arising out of or in any way related to (i) your access to or use of the Services or Pinterest Content, (ii) your User Content, or (iii) your breach of any of these Terms.</blockquote></p>

<p>The terms also include a liability limitation clause which reminds users that "THE ENTIRE RISK ARISING OUT OF YOUR ACCESS TO AND USE OF THE SERVICES, PINTEREST CONTENT, AND USER CONTENT REMAINS WITH YOU AND YOU USE THE SERVICES AT YOUR OWN RISK" (among other things).</p>

<p>Actually there is one significant change from the old indemnity clause to the new one. The old (or current) clause requires users to "defend" Pinterest. That change relieves users of the potential responsibility for filing court papers in Pinterest's defence should it be sued. What the new indemnity clause doesn't do is relieve users of the potential responsibility for any damages Pinterest may be ordered to pay, any costs it may incur or other penalties which flow from claims lodged against Pinterest in respect of – <br />

<ul>
	<li>"your access to or use of the Services or Pinterest Content";</li>
	<li>"your User Content"; or</li>
	<li>"your breach of any of these Terms".</li>
</ul></p>

<p>There is one important omission in the indemnity. The indemnity doesn't require your "use of the Services or Pinterest Content" to be unlawful or to infringe a 3rd party's rights, necessarily. It potentially includes a situation where your use of the "Services or Pinterest Content" is legitimate and Pinterest's isn't. This could be possible if your use is regarded as a "fair use" (this has a specific legal context, see below) and Pinterest's may not be because it's a commercial service, for example.</p>

<h3>What does this all mean for you?</h3>

<p>The bottom line is that you should only pin stuff to Pinterest which you are licensed to pin or which you can pin under a copyright exception like "fair use" as applied in the State of California (these terms are governed by the "internal substantive laws of the State of California"). Any other publication or use of the service and content published on Pinterest could be a violation of someone Intellectual Property Rights and a breach of the terms of service. If Pinterest is sued for that and you are the unlucky user who did the infringing, you could be on the hook. This could be regardless of whether you acted lawfully when you used Pinterest.</p>

<p>In other words, heed the liability limitation clause's admonition: <br />

<blockquote>YOU ACKNOWLEDGE AND AGREE THAT, TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE ENTIRE RISK ARISING OUT OF YOUR ACCESS TO AND USE OF THE SERVICES, PINTEREST CONTENT, AND USER CONTENT REMAINS WITH YOU AND YOU USE THE SERVICES AT YOUR OWN RISK.</blockquote></p>]]></content></entry><entry><title>Big Brother WiST and the end of privacy?</title><category term="WiST"/><category term="location-based services"/><category term="personal information"/><category term="privacy"/><category term="tagging"/><category term="technology"/><category term="tracking"/><category term="wireless tracking"/><id>http://webtechlaw.com/posts/big-brother-wist-and-the-end-of-privacy.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/big-brother-wist-and-the-end-of-privacy.html"/><author><name>Paul Jacobson</name></author><published>2012-03-19T10:19:46Z</published><updated>2012-03-19T10:19:46Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<div style="text-align:center;"><a href="http://www.flickr.com/photos/mixer1/3279141121/" title="Big Brother 2009 Italy by _mixer_, on Flickr"><img src="http://farm4.staticflickr.com/3427/3279141121_4e76ac28db_z.jpg" width="640" height="427" alt="Big Brother 2009 Italy"></a></div> <br />

<p><a href="http://itweb.co.za">ITWeb</a> contacted me and asked me for comment on a new technology called <a href="http://www.wist-int.com/index.php/wist-technology-overview">WiST</a> which stands for "Wireless Intelligent Sensing Technology" (look out for the article tomorrow). On the face of it, this is <a href="http://www.wist-int.com/index.php/wist-technology-overview">an exciting technology</a>. It is an alternative to RFID and promises an effective way to track assets and, more problematically, people: <br />

<blockquote><p>Recent developments in miniaturized and low power integrated-circuit technology has allowed for the development of miniature and intelligent WiST™ sensors. Sensors provide a unique ID, sense movement, temperature, light, tilt, pressure and many more attributes. WiST sensors can also act as active RFID or NFC devices. This greatly enhances the use of WiST™ in a large variety of applications that vary from personal to business use.</p>

<p>Similarly GSM and microprocessor technology have become smaller, more power efficient and cost effective. The WiST™ sensor data transmits to predefined databases on the internet. The WiST™ applications then alert users and route data to business applications, control rooms, cell phones, and mobile devices according to predefined rules.</p></blockquote></p>

<div style="text-align:center;"><a href="http://www.wist-int.com/index.php/applications/social/social-networking"><img src="http://www.wist-int.com/images/Diagrams/Photographic%20Activity%20Sensor-05%20Medium.png" alt="" width="640" height="" border="0" /></a></div>

<p>While the asset management applications are relatively benign (except where combined with people), the possible applications for people-based tracking are worrying, to the say the least. One of the possible applications mentioned on the WiST site is for "social networking identification": <br />

<blockquote><p>Why send countless hours updating your social networking profile while you can stay in touch and build new social networks with the help of a WiST™ sensor armband.</p>

<p>WiST™ armbands contain tamper proof sensors with on-board memory that enables the user to store personal information such as name, photograph emergency contact details, medical details and social network details. The system is programmable to allow for flexible distribution protocols.</p>

<p>As the user visits WiST™ enabled venues such as clubs, bars, restaurants etc. WiST™ cameras will identify the users and take photographs and/or videos of them in their social environment. The users can follow a few simple steps to post the material of their choice to their profiles.</p></blockquote></p>

<p>This technology becomes problematic if it is used in such a way that consumers are unaware that it is being used or are not adequately informed about what the technology does. Tagging people in real-time and associating that with identities and location is a privacy minefield and WiST must navigate this very carefully. While the idea of enabling real-time tracking at events is an appealing one from an organiser's perspective, people attending these events need to be clearly informed when or how – 

<ul>
	<li>the device or object they are wearing or carrying is such a tag;</li>
	<li>they are being tracked and to what extent;</li>
	<li>they can opt-out (they should be given a choice to opt-in in the first place);</li>
	<li>they can access data about them held by whoever is holding or accessing that data  as well as how they can control what is done with that data.</li>
</ul>

<p>Sometimes consent isn't enough. When children are involved the technology becomes incredibly problematic because of the limitations on collecting and processing children's personal data (on the other hand, when the appropriate consents are given and safeguards put in place, this could be an invaluable technology to help track and protect children in trouble).</p>

<p>When it comes to the data collected, WiST must make sure that this data is secure and only disclosed to people who are required to have access to it and to parties the people being tracked have agreed may have access to the data. Using the data (including photos) for advertising must also be handled carefully. Ideally a release should be obtained and the party seeking to make use of those photos in the context of promotional competitions, for example, must comply with the Consumer Protection Act. Of course, when the Protection of Personal Information Bill is passed into law it will bring a host of very specific compliance requirements that will affect just about every aspect of WiST's application to personal data.</p>

<p>This is a pretty complex set of issues which my comments only begin to unpack and this technology is not to be used to track people without making sure there is an adequate personal data protection mechanism in place to protect people's privacy and explain the implications of the tags to them. The potential for abuse by reckless or uninformed providers is tremendous.</p>

<p>Consider this hypothetical scenario as an indication of the possible threats to consumers' privacy: <br />

A group of friends go to a concert and are given a bracelet containing a WiST tag. The tag tracks the friends' movements in and out of the venue and trigger cameras at various locations in the venue. If the friends registered for the event in advance and associated their registration information with their Twitter and Facebook profiles, the photos are automatically uploaded (can your colleagues see these photos, do you know whether the photos are published publicly on Facebook or subject to your preferred privacy settings) and may even contain location data so someone downloading those photos can see where they were taken almost in real-time. As the friends visit concession stands their purchasing preferences are tracked and included in aggregated personal profiles, possibly to be made available to marketers later for more targeted marketing (not necessarily a bad thing but not everyone wants their preferences logged).</p>

<p>After the event the friends go their separate ways and, on the way home or to the next party, their tags track them using GPS functionality and transmit data about places they frequent, where they live and what their schedules are. If they happen to like the bracelet as a fashion item, they may wear the tags in the days that follow, adding a range of location-based information to their aggregated profiles and if they interact with other WiST enabled services, more specific transactional data may be thrown into the mix.</p>

<p>Where this becomes more problematic is if the friends were unaware that the bracelet was capable of tracking them and to what extent. If they didn't consent to being tracked by the WiST tag (and this consent must be well informed, given the possible applications of this technology), they may not be aware of an option to opt-out meaningfully aside from removing and destroying the bracelet and the tag it contains (throwing it away at home isn't really an option, it gives fraudsters with access to the data your home location and where your rubbish goes and a source for more of your data for possible identity theft efforts).</p>

<p>Other questions include who collects the data, who has access to it and who controls it? Can users obtain details of what personal information about them is being held under the Promotion of Access to Information Act? Is the data held in a central location or do event organisers and other WiST customers have their own databases? Are the holders of this data known to or discoverable by tagged consumers? Is the data securely held?</p>

<p>Something to bear in mind is that most of us carry a tag of a sorts already in the form of our mobile phones but we notionally have the option of disabling services on our phones that may track our locations, for example, or even turning the phones off altogether. Its not clear than consumers will be able to do this with WiST enabled devices or items.</p>

<p>WiST is a promising technology and could be legitimately and beneficially used in a variety of contexts to combat fraud and theft as well as simplify inventory control processes. It could help make a variety of industries more effective and efficient but when it comes to tagging people, the risks are considerable and require a well thought out and implemented privacy framework to avoid negating the right to privacy altogether. Much of this framework would come down to well-informed consent but there are a variety of legal compliance issues to cater for, both under current law and under future developments like the Protection of Personal Information Bill.</p>

<p>I've written about how important it is that consumers take an interest in how their personal data is collected and processed. WiST highlights how important this is and consumers will only have themselves to blame if they remain ignorant of the risks.</p>

<hr>

<p>Image credits (in appearance order): 

<ol>
	<li><a href="http://www.flickr.com/photos/mixer1/3279141121/">Big Brother Italy 2009</a> by <a href="http://www.flickr.com/photos/mixer1/">_mixer_</a>, licensed <a href="http://creativecommons.org/licenses/by-sa/2.0/deed.en">CC BY SA 2.0</a></li>
	<li><a href="http://www.wist-int.com">WiST International, all rights reserved</a></li>
</ol>
			</p>]]></content></entry><entry><title>Guest post: Being Generation Y</title><category term="attitudes"/><category term="freedom of expression"/><category term="generation y"/><category term="paradigms"/><category term="social media"/><category term="social web"/><category term="technology"/><category term="trends"/><id>http://webtechlaw.com/posts/guest-post-being-generation-y.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/guest-post-being-generation-y.html"/><author><name>Paul Jacobson</name></author><published>2012-03-16T12:45:17Z</published><updated>2012-03-16T12:45:17Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p><em>This guest post was written by Nastassja de la Guerre, a candidate attorney at <a href="http://jacobson.co.za">Jacobson Attorneys</a>. You can follow Nastassja on Twitter at <a href="https://twitter.com/ndelaguerre">@ndelaguerre</a>.</em></p>
<p>The spread and ever increasingly availability of the Internet and digital and media technologies are the biggest evolution in human history since the industrial revolution. These developments have sent Generation Y on an evolutionary rollercoaster traveling faster than your average broadband and have caused many social changes and adaptions. With these changes emerge a generation that is completely misunderstood and highly criticized.</p>
<p>Among the MANY complaints about Generation Y are self-centeredness, an inability to manage time, a need for frequent praise, a lack of respect for elders, a sense of entitlement, little understanding of client service and poor face-to-face communication skills. &ldquo;Generation Y is entitled, lazy, selfish, tech savvy, and incompetent,&rdquo; is how <a href="https://twitter.com/#!/scottgreenfield">Scott Greenfield</a>, one of the finest criminal defence attorneys in NY puts it. Is this really the case? Or are we merely misunderstood?</p>
<p style="text-align: center;"><a title="Generation Y by Mighty mighty bigmac, on Flickr" href="http://www.flickr.com/photos/commonbond/3631314298/"><img src="http://farm3.staticflickr.com/2471/3631314298_854365c045_z.jpg" alt="Generation Y" width="640" height="439" /></a></p>
<p>We were not part of the starting up stages of the dot com boom, but rather we are part of an age where if you don&rsquo;t have Internet access or a mobile phone we actually think you are an alien. <a href="http://en.wikipedia.org/wiki/History_of_the_Internet">1995 marked the commercialisation of the Internet</a>. I was 6, a year before I started school.&nbsp; We are part of a generation where information is literally at our fingertips and Google has become our professor.&nbsp; To put it into perspective: the average 15 year old has access to more information than the president of the USA had 15 years ago. Does this mean we are arrogant and know-it-alls? Nope, it just simply means we are well informed.</p>
<p>Like any other generation, generation Y has been shaped by the events, leaders, developments and trends of its time. The rise of instant communication technologies, new media used through websites like YouTube, Instagram and Pinterest and social networking sites like Facebook and Twitter has shaped us into the people we are, how we function in the work-place and how we respond to the law and government. We are in the age of mass creativity. We no longer want to be told what something is or who we are or how we should act. Rather, we make up our own minds and choose our own paths. This independence is highlighted by the heightened importance we place on our human rights, particularly the right to privacy, equality and freedom-the principals our Constitution is founded on.</p>
<p>Yes, of course, with new technology comes new crime and misbehaviour. We have seen this in the London riots of 2011 where <a href="http://webtechlaw.com/posts/regulators-hands-off-the-social-web.html">social media platforms and instant messaging were largely to blame</a> for how well the riots were orchestrated and how communications regarding the riots could be sent across to different individuals instantly.&nbsp; Or the infamous Stuxnet virus, designed by unknown parties, which made headlines in 2010 when it worked its way into Iran's nuclear programme. Or the Occupy Wall Street movement. But rather than blaming social media and instant messaging as well as our apparently immoral, disrespectful and lazy generation, governments should ask Y we are the way we are.&nbsp; Economic prospects for the Millennials have worsened due to the late 2000s recession. Out of a population of 49-million, 7.5-million South Africans are currently out of work. Young people are worst affected, with over half of 18- to 25-year-olds unemployed. "This is a crisis. We call it a ticking bomb," said Zwelinzima Vavi, Cosatu's general secretary. "We think that one day there may be an explosion. Seventy-three percent of people who are unemployed in South Africa are below the age of 35 and a lot of them have been to universities.&rdquo; Several governments have instituted major youth employment schemes out of fear of social unrest due to the dramatically increased rates of youth unemployment, with South Africa being no exception. President Zuma has promised to create five million jobs by 2020 in his recent State of the Nation address.</p>
<p>You may ask Y it is so important to change employment schemes and the working environment. Generation Y make up 27% of the population and about 5% of the legal profession. We&rsquo;ve grown up in an environment where every fact, idea and opinion has a forum in which to be expressed. This leads to a movement away from the idea of being ordered to do something by your employer, but rather a strong need to collaborate and exchange ideas</p>
<p>Aside from the unemployment, other challenges we face is the world we grew up in. Our childhoods were tainted by major social unrest and reform. Unfortunately we also experienced a lot of empty promises from government and institutions and A LOT of divorce. This perhaps led us to learn to take care of ourselves and not to rely on institutions and outdated traditions. We have moved past the counter-culture of the 1990s. Race, sexuality, political views, religion, marital status don&rsquo;t define who we are. We define ourselves through expression and collaboration. Therefore, Generation Y has high expectations of their employers, we seek out new challenges and are not afraid to question authority. This could become extremely challenging in the legal profession as well as other classical careers such as accounting, architecture, etc as these professions are based on age-old traditions and knowledge passed on from one generation to another in working environments where there is a definite hierarchy. Richard Susskind expresses it very clearly by stating that a trait common in large law firms is &ldquo;irrational rejectionism&rdquo;&ndash; perhaps because it is far easier to reject new ideas than give them a chance. Let&rsquo;s take Paul Chambers&rsquo; story: He was arrested for a tweet he sent about Robin Hood Airport in England in January 2010. The airport suffered repeated service delays and disruptions due to cold weather, prompting Chambers to tweet:</p>
<blockquote>
<p>&ldquo;Crap! Robin Hood airport is closed. You&rsquo;ve got a week and a bit to get your shit together otherwise I&rsquo;m blowing the airport sky high!!&rdquo;</p>
</blockquote>
<p>Chambers was later convicted for sending a &ldquo;message or other matter that is grossly offensive or of an indecent, obscene or menacing character&rdquo; under the UK Communications Act of 2003, causing him to lose his job, gain a criminal record and a mountain of fees and legal costs. TV personality, activist, and social media comedian <a href="https://twitter.com/#!/stephenfry">Stephen Fry</a>&nbsp;has taken sides in the Paul Chambers &ldquo;Twitter Joke Trial,&rdquo; saying that British judges fundamentally don&rsquo;t understand how Twitter works. Fry&rsquo;s stance raises the issue about the generation gap between our technology and social media driven generation and those asked to adjudicate these issues</p>
<p>But it isn&rsquo;t all bad for us.</p>
<p>In his recent state of the nation address, President Zuma had typed his entire speech on an iPad. The ANC spokesperson describes the president as always being on his iPad and constantly checking and responding to social media platforms, especially Twitter.&nbsp; Helen Zille is known for her responsiveness and active engagement on both Twitter and Facebook. This indicates that the government is making the move into our generation and are desperately trying to connect with us. The government is starting to recognise our need to be heard and to be able to express our opinions, a strong feature of Generation Y.</p>
<p>Image credit: <a href="http://www.flickr.com/photos/commonbond/3631314298/">Generation Y</a> by <span id="yui_3_4_0_3_1331902381578_1135" class="username"><a href="http://www.flickr.com/photos/commonbond/">Mighty mighty bigmac</a>, licensed <a href="http://creativecommons.org/licenses/by-nd/2.0/deed.en">CC BY-ND 2.0</a></span></p>]]></content></entry><entry><title>Marketers who improperly use company names could face criminal and civil penalties</title><category term="agencies"/><category term="companies act"/><category term="company name"/><category term="contracts"/><category term="corporate law"/><category term="criminal law"/><category term="facebook"/><category term="social web"/><category term="twitter"/><id>http://webtechlaw.com/posts/marketers-who-improperly-use-company-names-could-face-crimin.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/marketers-who-improperly-use-company-names-could-face-crimin.html"/><author><name>Paul Jacobson</name></author><published>2012-03-12T10:02:42Z</published><updated>2012-03-12T10:02:42Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p>Anyone running a social media profile on a client's behalf should be very careful when tweeting or posting on the client's behalf. The consequences of careless references to or variations of a company's name could be severe under certain understated provisions of the new Companies Act.</p> 

<div style="text-align:center;"><a href="http://www.flickr.com/photos/nasacommons/4858567220/" title="Apollo Director Phillips Monitors Apollo 11 Pre-Launch Activities by NASA on The Commons, on Flickr"><img src="http://farm5.staticflickr.com/4100/4858567220_c4de421449_z.jpg" width="640" height="510" alt="Apollo Director Phillips Monitors Apollo 11 Pre-Launch Activities"></a></div> <br />

<h3>The Companies Act's provisions</h3>

<p>Section 32 of the Companies Act deals with "[u]se of company name and registration number" and subsections 3 and 5 are the clauses social media practitioners should be aware of: <br />

<blockquote>(3) A person must not— <br />
<blockquote>(a) use the name or registration number of a company in a manner likely to convey an impression that the person is acting or communicating on behalf of that company, unless the company has authorised that person to do so; or <br />
(b) use a form of name for any purpose if, in the circumstances, the use of that form of name is likely to convey a false impression that the name is the name of a company.</blockquote>
(4) … <br />
(5) Contravention of subsection (1), (2), (3) or (4) is an offence.</blockquote></p>

<p>The term "person" in the Companies Act "includes a juristic person". In our law there are two basic types of "persons". We have natural persons which are human beings and juristic persons which are corporate entities like companies and close corporations.</p>

<p>What this means is that any person who uses a company's name that suggests that the person is communicating on the company's behalf and isn't actually authorised to do that will be committing an offence under the Companies Act. That is fairly straightforward but subsection 3(b) is not nearly as clear although can be even more problematic for careless marketers. It uses the phrase "form of name" which is only used in this sub-section of the Act. The word "form" is defined fairly extensively in the Oxford Dictionary of English, and includes the following definitions: <br />

<blockquote><ul>
	<li>the visible shape or configuration of something</li>
	<li>a particular way in which a thing exists or appears</li>
	<li> any of the ways in which a word may be spelled, pronounced, or inflected</li>
</ul></blockquote></p>

<p>It appears that "form of name" includes both variations of the company name (for example, "Pick 'n Pay" as a commonly used variation of Pick n Pay Stores Limited or Pick n Pay Holdings Limited or "Woolies" as a common reference to Woolworths (Proprietary) Limited or Woolworths Holdings Limited – assuming you know which one you are referring to) and it may even include variations of the company's trade marks, such as logos, and other representations of the company's name. Assuming this is how the clause will be interpreted, subsection 3(b) criminalises a variation of a company's name which conveys "a false impression" that the variation "is the name of a company". The idea here may be to ensure that company's names and branding is accurately and reliably conveyed to the public and the risk of confusion minimised.</p>

<p>Section 218 deals with "[c]ivil actions" (as opposed to the criminal offences that a violation of section 32 would constitute) and subsections 218(2) and (3) state the following: <br />

<blockquote><p>(2) Any person who contravenes any provision of this Act is liable to any other person for any loss or damage suffered by that person as a result of that contravention. <br />
(3) The provisions of this section do not affect the right to any remedy that a person may otherwise have.</p></blockquote></p>

<p>These two subsections in section 218 introduce specific liability for any "loss or damage" caused by "[a]ny person" and suffered by "any other person" and doesn't exclude whatever other remedies "a person" may have in law. This clause's scope is pretty broad, may be open to constitutional scrutiny, and opens the door to civil liability in the form of a financial sanction flowing from the contravention of the Companies Act in addition to whatever other remedies may be available.</p>

<h3>What does this mean for marketers?</h3>

<p>Drawing all of this together, a marketer or other social media practitioner could find him or herself being charged with a criminal offence and sued for monetary damages for either using a company's name in such a way as to falsely suggest the marketer or practitioner is authorised to represent the company concerned or where the marketer or practitioner uses a "form" of a company's name that is not the company's actual name and, instead, falsely creates the impression that it is. This sort of issue could easily arise in the manner in which a brand's Twitter or Facebook pages are operated (both how they are set up and presented to the public, fans and followers as well as what is published in those streams) as well as out of a marketer's or practitioner's efforts to promote the brand.</p>

<p>One specific challenge tweeting under a brand's name without drawing a distinction between the person doing the tweeting and the brand's official communications where the tweeter posts updates that don't fall within the tweeter's mandate (for example, a personal comment that isn't sanctioned by the company). Another is using an unauthorised "form" of a company's name in a Facebook Page update or blog post, for example. These sorts of mistakes can be made but they potentially carry severe consequences (an offence could mean a fine or imprisonment not exceeding 12 months, or both). Given the definition of "person", agencies that operate social media profiles can also find themselves in trouble.</p>

<h3>Managing these risks</h3>

<p>Managing these risks and still diligently promoting a brand can be accomplished. Agencies must have clearly defined roles and parameters and these must be effectively communicated to their staff and compliance with these restraints must monitored. This means being specific with clients in agreements and communications regarding the agency's use of a client's brand and the manner in which the agency's staff will communicate with fans and followers on the client's behalf. Agency staff should also draw clear distinctions between posts intended to be associated with the client and its brand, on the one hand, and posts which are not. There should be no confusion between a company or its brand, on one hand, and the people promoting it behind the scenes.</p>

<p>Appropriate risk management steps should be taken from the start and maintained on an ongoing basis, taking into account changing circumstances, instructions and feedback received from the public, the client and other relevant stakeholders. Not making the effort to better manage these risks could result in more serious consequences down the line than the upfront cost of developing and implementing the appropriate framework.</p>]]></content></entry><entry><title>Google's new privacy policy: much ado about very little</title><category term="amalgamation"/><category term="google"/><category term="personal information"/><category term="personal information"/><category term="privacy"/><category term="privacy"/><category term="privacy policy"/><id>http://webtechlaw.com/posts/googles-new-privacy-policy-much-ado-about-very-little.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/googles-new-privacy-policy-much-ado-about-very-little.html"/><author><name>Paul Jacobson</name></author><published>2012-03-09T04:01:20Z</published><updated>2012-03-09T04:01:20Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p><p>Google's recent <a href="http://www.google.com/policies/privacy/">privacy policy update</a> has caused great consternation. Some commentators have expressed concern about the new policy's compliance with various privacy law frameworks (particularly the EU's data protection laws); the aggregation of users' personal information and others have made ridiculous claims about the policy being the "<a href="http://www.iol.co.za/the-star/big-brother-has-nothing-on-google-1.1251547">end of privacy as we know it</a>". We took a close look at the new privacy policy, what has changed from <a href="http://www.google.com/policies/privacy/archive/20111020/">October's version</a> and what this really means for users. It turns out much of the fuss is uninformed, sensationalist and unjustified.</p></p><p><div style="text-align:center;"><iframe width="640" height="360" src="http://www.youtube.com/embed/KGghlPmebCY" frameborder="0" allowfullscreen></iframe></div> <br /></p><p><h3>One Privacy Policy to Rule Them All</h3></p><p><p>Essentially Google has taken a number of privacy policies spread across multiple services and consolidated them into a single privacy policy that covers personal information processing across all Google services. This isn't as simple as it sounds and its benefits are not immediately apparent. One of the disadvantages of having multiple privacy policies governing multiple services is that you can't be sure that your personal information will be handled consistently from service to service or even that all of the policies process your personal information in a way that doesn't prejudice you unreasonably. This also potentially means diminished transparency, less informed consent and greater uncertainty – all less than desirable features of a document of such importance. With a unified policy users have greater certainty as to what personal information Google is collecting and what it is doing with that personal information. To add to this, the new privacy policy continues Google's practice of writing very clear and plain policies (when I am looking for inspiration for legal terms, I often look to Google's terms for their clarity and emphasis on good, plain language).</p></p><p><p>Another thing Google does it publish comparisons between policy versions. This is part of <a href="http://www.google.com/policies/privacy/archive/20111020-20120301/">the comparison between the October 2011 version and the March 2012 version</a>:</p></p><p><a href="http://www.flickr.com/photos/73753110@N00/6818043452" title="View 'Privacy Policy – Policies & Principles' on Flickr.com"><img border="0" style="display:block; margin-left:auto; margin-right:auto;" height="461" src="http://farm8.staticflickr.com/7054/6818043452_13f0daa62c_z.jpg" alt="Privacy Policy – Policies & Principles" width="640" title="Privacy Policy – Policies & Principles"/></a> <br /></p><p><p>Google does a terrific job purely from the perspective of transparency. Users are advised in advance what changes are going to be made and are shown not only the new policy document but also the changes from one version to the next. This behaviour doesn't receive enough attention. Not many companies go to such lengths to be so transparent about these sorts of changes.</p></p><p><h3>Positive Changes</h3></p><p><p>The policy, for the most part, doesn't change the privacy framework under the previous model. Users haven't lost control over their personal information and haven't been forced to be more public than they may wish to be. This approach largely fell away a couple years after the <a href="http://webtechlaw.com/posts/2007/8/1/can-you-trust-facebook.html">Facebook</a> <a href="http://webtechlaw.com/posts/2010/4/20/facebook-strips-users-of-even-more-privacy-options.html">privacy</a> <a href="http://webtechlaw.com/posts/facebooks-new-privacy-controls-are-really-about-publicity.html">debacles</a>. In the last year or so Google, Facebook and other services have been more careful with users' personal information and their privacy policies reflect this.</p></p><p><p>The new policy clarifies how users can "make meaningful choices about how" Google uses their personal information. Users have a couple of options available should they wish to access and review personal information Google holds; adjust their ad preferences; control who they share their personal information with and even if they choose to export their personal information from Google's services. The new policy also states that browsers can be set to block or moderate cookies but cautions about diminished functionality in its services if users choose to do so (this is the incentive for users not to moderate cookies).</p></p><p><p>A change I found very interesting is this sentence: <br /></p><p><blockquote>We will not combine DoubleClick cookie information with personally identifiable information unless we have your opt-in consent.</blockquote></p></p><p><p>Previously the privacy policy allowed for personal information on an opt-out basis: <br /></p><p><blockquote>Google uses the DoubleClick advertising cookie on AdSense partner sites and certain Google services to help advertisers and publishers serve and manage ads across the web. You can view and manage your ads preferences associated with this cookie by accessing the Ads Preferences Manager. In addition, you may choose to opt out of the DoubleClick cookie at any time by using DoubleClick’s opt-out cookie.</blockquote></p></p><p><h3>Why People Are Concerned</h3></p><p><p>The primary reason most commentators seem to be concerned about the new privacy policy is the following clauses: <br /></p><p><blockquote><p>We use the information we collect from all of our services to provide, maintain, protect and improve them, to develop new ones, and to protect Google and our users. We also use this information to offer you tailored content – like giving you more relevant search results and ads.</p></p><p><p>We may use the name you provide for your Google Profile across all of the services we offer that require a Google Account. In addition, we may replace past names associated with your Google Account so that you are represented consistently across all our services. If other users already have your email, or other information that identifies you, we may show them your publicly visible Google Profile information, such as your name and photo.</p></p><p><p>...</p></p><p><p>...</p></p><p><p>We may combine personal information from one service with information, including personal information, from other Google services – for example to make it easier to share things with people you know. We will not combine DoubleClick cookie information with personally identifiable information unless we have your opt-in consent.</p></p><p><p>We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Policy.</p> </blockquote></p></p><p><p>Essentially Google is consolidating the personal information it has from its users across its various services into a more complete, useful and valuable database. Previous the various privacy frameworks and notionally distinct services meant that a user could have varying exposure to personalised ads and to personal information processing. Under the more consolidated model, users can be more readily and more accurately profiled and better targeted with ads. Their experience of Google's services can also be improved where data can be shared across services (another reason for the change) to enhance users' general Google experience.</p></p><p><p>This change reflects increasing integration of Google's services into a more cohesive set of services not dissimilar to Facebook which has always been regarded as a single, multi-faceted service but one which permits personal information published through one aspect of the service to be used with other aspects of the Facebook service as well as to better target ads.</p></p><p><p>Some of the clauses are mixed bags. This next clause makes an important point that sensitive personal information won't be associated with cookies and then glosses over the implications of those cookies and other technologies like pixel tags by explaining their value in setting the correct language preferences: <br /></p><p><blockquote>We use information collected from cookies and other technologies, like pixel tags, to improve your user experience and the overall quality of our services. For example, by saving your language preferences, we’ll be able to have our services appear in the language you prefer. When showing you tailored ads, we will not associate a cookie or anonymous identifier with sensitive categories, such as those based on race, religion, sexual orientation or health.</blockquote></p></p><p><p>Google has been viewed with suspicion for some time now due to its size and presence in our daily lives. There is no question that Google uses personal information to personalise its ads and users' experience of many of its services. That said, Google works to be <a href="http://www.google.com/transparencyreport/">more transparent about its disclosure of personal information to governments</a> (one of the times Google will hand over your personal information is in response to a valid and legally binding request from a government). Contrary to the article in a recent issue of the Star titled, "<a href="http://www.iol.co.za/the-star/big-brother-has-nothing-on-google-1.1251547">Big Brother has nothing on Google</a>" (this article is largely a series of exaggerations, some of which are factually questionable), the new policy does not give Google carte blanche to sell user data at will. The policy is fairly clear on this point:</p></p><p><blockquote><b>Information we share</b><br /><p>We do not share personal information with companies, organizations and individuals outside of Google unless one of the following circumstances apply:<br /><ul><br /><li><br /><p><strong>With your consent</strong><br /><p>We will share personal information with companies, organizations or individuals outside of Google when we have your consent to do so. We require opt-in consent for the sharing of any <a href="http://www.google.com/policies/privacy/key-terms/#toc-terms-sensitive-info">sensitive personal information</a>.<br /><li><br /><p><strong>With domain administrators</strong><br /><p>If your Google Account is managed for you by a <a href="http://support.google.com/a/bin/answer.py?hl=en&amp;answer=178897">domain administrator</a> (for example, for Google Apps users) then your domain administrator and resellers who provide user support to your organization will have access to your Google Account information (including your email and other data). Your domain administrator may be able to:</p><p><ul><br /><li>view statistics regarding your account, like statistics regarding applications you install.<br /><li>change your account password.<br /><li>suspend or terminate your account access.<br /><li>access or retain information stored as part of your account.<br /><li>receive your account information in order to satisfy applicable law, regulation, legal process or enforceable governmental request.<br /><li>restrict your ability to delete or edit information or privacy settings.</ul><br /><p>Please refer to your domain administrator’s privacy policy for more information.<br /><li><br /><p><strong>For external processing</strong><br /><p>We provide personal information to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures.<br /><li><br /><p><strong>For legal reasons</strong><br /><p>We will share personal information with companies, organizations or individuals outside of Google if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:</p><p><ul><br /><li>meet any applicable law, regulation, legal process or enforceable governmental request.<br /><li>enforce applicable Terms of Service, including investigation of potential violations.<br /><li>detect, prevent, or otherwise address fraud, security or technical issues.<br /><li>protect against harm to the rights, property or safety of Google, our users or the public as required or permitted by law.</ul></ul><br /><p>We may share aggregated, <a href="http://www.google.com/policies/privacy/key-terms/#toc-terms-info">non-personally identifiable information</a> publicly and with our partners – like publishers, advertisers or connected sites. For example, we may share information publicly to show trends about the general use of our services.<br /><p>If Google is involved in a merger, acquisition or asset sale, we will continue to ensure the confidentiality of any personal information and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.</p></blockquote></p></p><p><p>While Google has given itself the ability to exchange your personal information across its services for various reasons, it does not mention selling users' personal information to 3rd party advertisers. If anything, the policy wording tends to rule that out subject to Google's ability to disclose your personal information for those sorts of purposes if you consent to it or if the person administering the domain your Google account forms part of does something similar (Google leaves it up to those administrators to develop their own privacy framework).</p></p><p><h3>Perspective</h3></p><p><p>Many commentators criticise Google and other companies, ostensibly on the mistaken assumption that they are entitled to a particular range of services or to be subject to terms and conditions or privacy policies they find more favourable. This is a flawed assumption. Google is a "for profit" company and, at the same time, it makes a concerted effort to strike a balance between its commercial interests and its users'. The outcomes of that effort include clearly written policies which inform users what happens to their personal information from the time they submit it to Google. The document's clarity means that users are more likely to understand it and its implications and give their informed consent to Google. That is what a privacy policy should strive for.</p></p><p><p>In addition, this policy does not make further inroads into user privacy. The general exception is the extent to which aggregating personal information across Google's services impacts on user privacy more extensively.</p></p><p><p>Google has also given users the tools to control their personal information fairly effectively by removing it, blocking its collection or correcting it. I say "fairly" because the policy also mentions that users have control over "many" of Google's services, not all of them.</p></p><p><p>Ultimately personal information is the price users pay to use Google's (and other) services and while the choice to use other services often isn't as appealing, it remains an option. Users also have tools independent of Google to help protect their privacy. One such tool is alternative browsers like Firefox which includes various settings to help protect users' privacy. Even Google's Chrome gives users the ability to better control their personal information.</p></p><p><p>Much of the new policy is a clarification of the previous version with paragraphs being restructured or otherwise amended to improve them from a usability perspective. All the hype and fuss about the privacy policy seems to be mostly bluster and much ado about very little after all.</p></p><p><p><strong>Update</strong>: I found out about <a href="http://youtu.be/7jHxfJW7Zww">this great video</a> on <a href="http://twit.tv/show/this-week-in-law/147">This Week in Law 147</a> which presents a great perspective on the policy changes: <br /></p><p><div style="text-align:center;"><iframe width="640" height="360" src="http://www.youtube.com/embed/7jHxfJW7Zww" frameborder="0" allowfullscreen></iframe></div></p></p><p><hr></p><p><p><a href="https://twitter.com/ndelaguerre">Nastassja de la Guerre</a> helped out with a more detailed comparison between the October 2011 and March 2012 versions and an assessment of the impact of those changes. Nastassja is a candidate attorney at Jacobson Attorneys.</p></p>]]></content></entry><entry><title>Pinterest's hidden threat to its users</title><category term="copyright"/><category term="indemnity"/><category term="liability"/><category term="pinterest"/><category term="social web"/><category term="terms and conditions"/><id>http://webtechlaw.com/posts/pinterests-hidden-threat-to-its-users.html</id><link rel="alternate" type="text/html" href="http://webtechlaw.com/posts/pinterests-hidden-threat-to-its-users.html"/><author><name>Paul Jacobson</name></author><published>2012-03-02T07:54:31Z</published><updated>2012-03-02T07:54:31Z</updated><content type="html" xml:lang="en-ZA"><![CDATA[<p style="text-align: center;"><a href="http://pinterest.com"><img src="http://farm8.staticflickr.com/7195/6799767936_58192a4950_z.jpg" width="640" height="351" alt="Pinterest follow screen"></a></p>
<p>We recently wrote about <a href="http://webtechlaw.com/posts/is-pinterest-a-den-of-copyright-thieves.html">the questionable copyright implications of using Pinterest to "pin" images and videos to the site</a> and to share these items with other Pinterest users. What we didn't deal with in that post is the consequential threat facing Pinterest users that has <a href="http://ddkportraits.com/2012/02/why-i-tearfully-deleted-my-pinterest-inspiration-boards/">persuaded at least one photographer and lawyer to delete her boards </a>(collections on Pinterest). The threat comes from an often overlooked clause which has potentially severe implications considering the copyright issues facing Pinterest users:</p>
<blockquote>
<p><strong>Indemnity</strong></p>
<p>You agree to defend, indemnify, and hold Cold Brew Labs, its  officers, directors, employees and agents, harmless from and against any  claims, liabilities, damages, losses, and expenses, including, without  limitation, reasonable legal and accounting fees, arising out of or in  any way connected with (i) your access to or use of the Site,  Application, Services or Site Content, (ii) your Member Content, or  (iii) your violation of these Terms.</p>
</blockquote>
<p>In terms of this clause you agree to cover Pinterest's creator, Cold Brew Labs and all the categories of people specified in the clause, in the event it is sued or suffers some sort of loss due to your use of or access to the site; if your content gives rise to a claim or you violate Pinterest's Terms. So what does this mean? It means that if, by using Pinterest to pin photos and videos, you infringe on someone's copyright (or even where your use is legitimate and Pinterest's use isn't), Pinterest can invoke its indemnity and call on you to cover its losses and costs. The way the clause is worded, Pinterest's ability to invoke the indemnity isn't limited to instances where you actually infringed copyright or did something to otherwise violate a 3rd party's rights. It can be invoked if the losses simply flow from your use of or access to the site or your pins.</p>
<p>As with virtually any social service on the Web the question is how real the risk is that this could happen and you could find yourself dragged into court in the Northern District of California to defend yourself against a claim for losses and costs where this indemnity clause is invoked? It may seem implausible but consider that a number of content creators are pretty concerned about Pinterest users sharing their content without their permission. It may not be too long before we begin to see the first lawsuits emerge and, at that point, users will have to wait and see if the indemnity is invoked and their lives changed because of a whimsical share.</p>
<p>&nbsp;</p>]]></content></entry></feed>
