Showing posts with label Anonymity. Show all posts
Showing posts with label Anonymity. Show all posts

Saturday, 3 January 2015

Cyberlaw memes and themes for 2015

(And see Internet legal developments to look out for in 2015.)

It is tempting just to change 2014 to 2015 in last year’s piece and recirculate.  Nudging and Bludgeoning, Magic wand politics, Politicians not understanding the internet, the Internet as Wild West, Cory Doctorow’s warning of the Coming War on General Purpose Computing, Technological neutrality, Copyright wars, Site blocking and Privacy are as topical as they were a year ago.

But that would be a cop out. So here are a few more memes and themes for 2015.

The War on the Internet. A cynic might say that a politician loves nothing more than an unwinnable war against an intangible enemy. Each setback demonstrates the resourcefulness and cunning of the opponent. Stronger measures are urgently required. Tough action plays to the electoral audience. Another setback feeds the cycle. 

Look out for War on the Internet slogans - ‘Social Responsibility’’, ‘Must Do More', ‘Internet Wild West’, ‘No Ungoverned Space’ - while tech businesses are demonised, scorned and blamed for the ill of the moment.

The Internet as security zone.  We know the rules when we pass through airport security: double-checked IDs, no risky items, unlimited inspection and above all no jokes. Will the internet come to resemble a security zone or be the poster child for freedom under the law?  Internet laws and quasi-laws challenging anonymity, demanding removal of undesirable content, empowering suspicionless state interception and criminalising badly judged tweets are with us already.

Berlin Walls in cyberspace. In the pre-internet world only the most repressive states attempted to erect impermeable borders, shielding their citizenry from noxious foreign influences and imposing a monopoly of national law on the state’s subjects.  In its most extreme form this was manifested in sealed physical borders, bans on external travel, import bans on books and jamming of foreign broadcasts.  

There are signs that, fearful of the inherent global nature of the internet, even liberal democratic states may be tempted to try to erect borders in cyberspace that are less permeable than their pre-internet physical equivalents. For more discussion see slides and video from my presentation at the Aberystwyth University Internet Jurisdiction Symposium, September 2014.

Fantasy Internet Ministers praise the liberating qualities of search engines and social media platforms.  Politicians of all stripes demand more freedom for internet users.  National border walls in cyberspace are torn down. MPs repeal restrictive internet laws and rein back intrusive state powers. Free flow of information across frontiers becomes sacrosanct.



Sunday, 29 December 2013

Internet legal developments to look out for in 2014 (Updated)

[Updated with progress as at 20 December 2014 and further updated 7 October 2015]

And see: Cyberlaw Memes and Themes for 2014

2013 has been a busy year for cyberlaw. But what does 2014 hold? Here are some developments in the UK and EU pipeline.

1.  Defamation Act 2013. This legislation comes into force in a few days’ time, on Wednesday 1 January 2014.   

  • It provides website operators with complete defamation immunity for identifiable third party posts and qualified protection for anonymous posts.
  • As a result of the 2009 European Court of Human Rights judgment in the Times Newspapers internet archive case we will now have a single publication rule which puts an end to rolling limitation periods for online defamation. 
  • The new ‘booksellers defence’ bars defamation actions against secondary publishers unless it is not reasonably practicable to proceed against the author, editor (if any) or commercial publisher (if any). This will include online intermediaries.  
  • There will now be a bar on proceedings against non-European defendants, unless of all places in which the statement has been published, England and Wales is clearly the most appropriate place in which to bring an action. While this is framed as a general restriction on forum-shopping, it will be especially relevant to actions founded on the mere accessibility in England and Wales of a foreign internet publication. 
The Act does not apply to Northern Ireland, nor do the provisions discussed apply to Scotland.

2. New copyright exceptions. Following the Hargreaves Report new and amended copyright exceptions are slated to come into force by 6 April 2014. These will cover archive & preservation, quotations, educational use, disabled access, private study, text and data analytics, parody and private copying (format shifting). Draft statutory instruments for all these were published for technical review during 2013. Separately, new provisions for orphan works, extended collective licensing schemes and regulation of collecting societies are in the pipeline. And don’t forget the European Commission’s Public Consultation on its review of EU copyright rules, which closes on 5 February 2014. [The copyright exceptions were intended (per the Minister in the IP Bill 2nd Reading Debate) to be laid before Parliament in February 2014 for debate under affirmative resolution procedure. Draft regulations were in fact laid before Parliament and published, together with a response to the technical review, explanatory notes, guidance and other supporting documents, on 27 March 2014 with a view to coming into force on 1 June 2014. All except the parody and private copying exceptions did so. These two exceptions were deferred following questions from the Joint Committee on Statutory Instruments. The drafts were then reissued for debate in Parliament, passed and come into force on 1 October 2014. Following a challenge by judicial review the private copying exception regulation has since been quashed.] [The European Commission Consultation response date was extended until 5 March 2014 and is now closed. 11,117 submissions were received.]


3. Blocking ordersConstantin Films v UPC is pending in the CJEU. This is a case on copyright blocking orders. The Advocate General issued his Opinion on 26 November 2013. In the continuing absence of an English version, here are the Court’s Press Release and my summary of the Opinion. A judgment during 2014 is likely. [The CJEU issued its judgment on 27 March 2014. Comments here.]

4. Copyright and linking. Three cases pending before the CJEU are about whether various types of linking can infringe the copyright communication to the public right. These are Svensson, C More Entertainment and BestWater. BestWater has been stayed pending Svensson, which appears to be heading towards judgment, probably during 2014, without the benefit of an Advocate General’s Opinion. Svensson has provoked two bodies, the European Copyright Society and the International Literary and Artistic Association (ALAI), to issue conflicting opinions on how linking issues should be decided. Also look out for Football Dataco v Stan James in the UK Supreme Court, a database right case under appeal on the question of joint liability. [Svensson judgment issued on 13 February 2014. Discussion here.]

5. Online copyright jurisdiction. Pez Hejduk is a pending reference to the CJEU concerning cross-border jurisdiction over online copyright infringement.  Most likely it will regard Pinckney as having already answered the Pez Hejduk questions. Also look out for Blomqvist, a CJEU case which has online aspects concerning the territoriality of the copyright distribution right and of trade marks. [Blomqvist judgment issued on 6 February 2014. Summary here. AG Opinion in Pez Hejduk issued on 11 September 2014 (not yet in English). CJEU judgment in Pez Hejduk issued on 22 January 2015. Opted for mere accessibility as the threshold for jurisdiction over online copyright infringement.]

6. Intermediary liability. Papasavvas, another pending CJEU reference, asks questions about the scope of the Electronic Commerce Directive provisions on internal market and intermediary liability. The internal market questions look very similar to those already answered in eDate/Martinez. Some aspects of the intermediary liability questions may provide the CJEU with an opportunity to comment on the Delfi decision of the European Court of Human Rights. [17 Feb 2014 ECHR Grand Chamber decides to refer Delfi case (i.e. hear an appeal). Hearing on 9 July according to AdVox. Papasavvas judgment issued 11 September 2014. No surprises. Confirms previous CJEU caselaw, including application of eDate/Martinez to defamation. No mention of Delfi.]

7. Copyright and temporary copies The pending NLA v PRCA reference to the CJEU should determine whether a user’s web browsing is an activity that requires the permission of the copyright owner. The UK Supreme Court thought not, but decided that the question required an EU-wide answer from the CJEU. [CJEU judgment issued 5 June 2014. Browsing permission not required.]

8. PRISM, TEMPORA, Snowden. Watch out for the legal challenges launched by various public interest groups following the Snowden revelations. These include two applications (by Liberty and Privacy International) to the Investigatory Powers Tribunal and a case taken (by Big Brother Watch, the Open Rights Group, English PEN and Dr Constanze Kurz) direct to the European Court of Human Rights. [In the latter the ECtHR requested the UK Government to provide written observations on admissibility and merits by 2 May 2014. The complaint has been stayed pending the outcome of the IPT cases (hearings July 2014). The IPT found that the challenged activities (PRISM intelligence sharing and the hypothetical use of RIPA S.8(4) warrants for TEMPORA were,
 in the light of disclosures of practices and policies made by the government during the proceedings, 'in accordance with the law' going forwards. The position prior to the disclosures would require further consideration. In a further judgment the IPT found that PRISM intelligence receipt prior to the disclosures made in the proceedings contravened Articles 8 and 10 ECHR. In the meantime the CJEU on 8 April 2014 invalidated the Data Retention Directive. As a result the UK government substantially relegislated the Data Retention Regulations 2009 in the Data Retention and Regulatory Powers Act (DRIPA). On 8 December 2014 MPs David Davis and Tom Watson (represented by Liberty) were granted permission to proceed with a judicial review of S.1 DRIPA, with the Open Rights Group and Privacy International intervening. The High Court disapplied S.1 on 17 July 2015, suspended until 31 March 2016. My mindmap of the UK interception legal landscape as at 7 October 2015:]





9. The saga of the Digital Economy Act 2010. The May 2013 Online Infringement of Copyright Roundtable minutes state that letters are not contemplated to start going out until ‘the latter half of 2015’. None of the necessary cost sharing statutory instruments has yet been laid before Parliament, a Treasury approval mechanism seems to be in play, and there is a General Election between now and then.  It could cost participating rightsowners collectively up to £10 million (to March 2015) in OFCOM cost sharing charges to take it forward. [Voluntary letters scheme 'Creative Content UK' announced 19 July 2014.]

See also: Cyberlaw Memes and Themes for 2014


Friday, 23 August 2013

Anonymous posters and the new Defamation Act – the draft regulations

Section 5 of the Defamation Act 2013 provides (or will do when the Act comes into force) a complete defence from a defamation claim for a website operator who can show that it did not post the statement on the website.  This is a significant new protection for website operators.

However the defence is significantly watered down for anonymous posts.  It is defeated if the claimant can show:
1. That it was not possible for the claimant to identify the person who posted the statement
2. The claimant gave the website operator a notice of complaint containing various specified information; and
3. The website operator failed to respond to the notice of complaint in accordance with regulations to be made under secondary legislation.
A recurrent complaint during the passage of the Bill through Parliament was that Parliamentarians were unable to assess properly the Section 5 defence because the regulations were not available in draft for Parliament to consider.

In June 2012 the government circulated a note to the Commons Bill Committee indicating its then thinking about the regulations.  Since then two rounds of consultation on draft regulations and guidance documents have taken place with a limited group of stakeholders.  (Hat-tip to INFORRM and Ashley Hurst, who have documented both phases of the consultation.) 
Since the government will at some point lay draft regulations before Parliament, this is a good point at which to review the currently circulating draft regulations (which may yet change) and take a stab at predicting their practical consequences. 

Preliminary

The effect of Section 5 for an anonymous post is that the website operator may still have a complete defence under Section 5, but only if it successfully negotiates the procedural hoops set out in the regulations.  The end point in some scenarios will require the website operator to remove the posting if it is to be able to rely on the defence. 

Although the regulations are littered with references to what a website operator ‘must’ do, they do not in fact oblige a website operator to do anything.  They only set out the conditions that a website operator has to satisfy in order to be able to make use of the Section 5 defence for an anonymous post.    

The Section 5 defence is additional to existing defences under S1 Defamation Act 1996 and the ECommerce Directive.  They are unaffected by the new Act and regulations.

Defamatory or unlawful?

The draft regulations are a mixed bag.  On the good side, the government has kept to its promise in Parliamentary debates on the Bill that complainants would have to do more in their notice of complaint than merely assert that the posted statement was defamatory.  The complainant will have to set out the meaning which the complainant attributes to the statement and also set out the aspects of the statement which the complainant believes are factually inaccurate or opinions not supported by fact.

This goes some way to meeting the recommendation of the Parliamentary Joint Committee on Human Rights that the threshold for a complaint under Section 5 should, as under the ECommerce Directive hosting defence, be unlawfulness. 

This issue reflects the fact that a statement may be defamatory without being unlawful.  A statement is defamatory if it is damaging to someone’s reputation.  However if any one of numerous defences, such as truth, honest opinion, publication on matters of public interest and many others, is established, the statement is lawful. 

So a complaint that something is defamatory only addresses half the story and may encourage the taking down of lawful statements, with consequent chilling effects.  Requiring a complainant to consider possible defences of truth and honest opinion goes some way to ameliorating this.

Action by the poster – a black hole in the regulations
On the debit side the regulations are, perhaps inevitably, a veritable maze of different scenarios requiring different responses from the website operator.  The draft guidance note identifies no less than five different situations that can arise depending on the anonymous poster’s response (or lack of response) to a complaint forwarded by the website operator. 
However other scenarios are possible, which the regulations do not address.  Like a poorly designed IT system, the regulations tend to assume conforming behaviour by all the participants and make insufficient provision for exception handling, especially non-conformant behaviour by the poster whose statement is complained about.  In particular the regulations assume that any removal of the offending statement will be done by the website operator, not by the anonymous poster. 
One illustration is in the draft FAQ for website operators: “What should I do if I receive a Notice of Complaint and the posting has already been removed?”  The given answer is “It is unlikely that a complainant will send a Notice of Complaint in a situation where the posting has already been removed.  If such a situation does arise it will be necessary to follow the process in order to benefit from the section 5 defence.” 

Yet the first step in the prescribed process involves the operator notifying the poster that the statement complained of may be removed from the locations on the website specified in the notice of complaint.  Since in this scenario the statement has already been removed, the notification is meaningless.  Later steps in the process may require the operator to remove the statement from those locations – in this scenario, impossible to comply with. 
In a similar vein, there is a gap in the scenarios contemplated by the regulations for the response by the poster to the complaint notice forwarded by the website operator.  The five possibilities listed in the guidance notes are:

-         Poster fails to reply to website operator within the time limit

-         Poster replies within the time limit indicating that he or she wishes the statement complained of to be removed

-         Poster replies within the time limit but fails to provide the required information

-         Poster replies within the time limit indicating that he or she does not wish the statement complained of to be removed, and consenting to the operator sending his or her contact details to the complainant

-         Poster replies within the time limit indicating that he or she does not wish the statement complained of to be removed, provides contact details to the operator but refuses to consent to the operator sending them to the complainant
A sixth, and perhaps most realistic, response from a poster concerned about the complaint is for the poster to take the initiative on receiving notification from the website operator and remove the offending post (as happened in Tamiz v Google) or edit it.   Again the regulations make no provision for this.  As with the FAQ example above, for scenarios that culminate with an obligation on the operator to remove the statement, where the poster has already taken action that requirement would be impossible to comply with and the operator would apparently forfeit the Section 5 defence.  That is surely an absurd result.

Time limits and time zones
Some critical steps depend on the website operator having received a response from a poster ‘by midnight at the end of the date specified in the notification [from the website operator to the poster]’.  Since neither the website operator nor the poster, nor indeed the complainant, are necessarily based in the UK and may well be in other time zones, there is significant potential for confusion over time limits. 

The draft regulations make some concession to the rigidity of time limits in that the court is permitted in its discretion to treat action taken by the website operator as having been taken before expiry of the time limit.  However there appears to be no flexibility in relation to the 5 day time limit for the poster’s response.  The FAQ for posters makes this point starkly:

“Q. What happens if I’m on holiday and don’t realise the Notice of Complaint has been sent to me?

A.     The time period given for a response will still apply, and if you do not respond within that period the operator may remove the posting which has been complained about.”

Withholding complainant identity
The complainant is given the option not to consent to the website operator passing on the complainant’s name and contact details to the anonymous poster. 

While one can understand the rationale for allowing contact details to be withheld, to permit the complainant’s name to be withheld is very odd.  These regulations are about defamation, which concerns damage to someone’s reputation.  If the statement does not refer to an identifiable person, it is not defamatory.  So either it will be obvious from the statement complained of who has been putatively defamed (in which case it would be pointless for the complainant’s name to be withheld) or, if it is not obvious, then the poster will need to know who is complaining in order to assess whether the statement is defamatory. 

For litigation the Defamation Pre-Action Protocol requires a letter of claim to include (a) the name of the claimant and (b) where relevant, any facts or matters which make the claimant identifiable from the words complained of.

Predictions
Predictions about the practical effect of the anonymous posting aspects of Section 5 are not easy to make. 

Because of the enormous difference between protection for website operators (and only for website operators) in respect of anonymous and non-anonymous posts, there will be intense focus in future litigation on (a) what is and is not a website operator and (b) whether the post was anonymous – i.e. whether it was possible for the claimant to identify the person who posted the statement (defined in Section 5 as “only if the claimant has sufficient information to bring proceedings against the person”). 
The procedure under the draft regulations is so bureaucratic – not easily recognisable as the “quick, clear and practical” process promised in Commons Committee in June 2012 - that it is possible that website operators will ignore it and rely on other available defences.  Even then, however, Section 5 may have a side effect.  A valid complainant’s notice is much more likely than an informal defamation complaint to fix a hosting intermediary with knowledge of unlawfulness for the purpose of the ECommerce Directive defence.  So even if the Section 5 procedure is ignored, a website operator may have more incentive than previously to take a down an anonymous post on receipt of a valid Section 5 notice.

The new intermediary defence under Section 10 will also be significant, whereby a court does not have jurisdiction to hear and determine an action for defamation brought against a person who was not the author, editor or publisher of the statement complained of unless the court is satisfied that it is not reasonably practicable for an action to be brought against the author, editor or publisher.

Many intermediaries will not be an author, editor or publisher (under the special definitions in section 1 of the Defamation Act 1996).  For a website operator in relation to an anonymous post, there may be a question whether the claimant should have to attempt a Norwich Pharmacal application to determine identity in order to escape the prohibition in this section.  It is interesting to speculate on whether a website operator’s decision not to respond to a notice under Clause 5 would be held against it in the court’s evaluation of reasonable practicability.


Sunday, 13 May 2012

What the Defamation Act 2013 means for the internet

[Note: This post has been updated following Royal Assent to the Defamation Bill on 25 April 2013.  The Bill is now the Defamation Act 2013.  Most of the Act is not yet in force.  None of the provisions discussed below will apply to Scotland.  The Act does not apply to Northern Ireland.]

The Defamation Bill Act 2013 published last week after the Queen’s Speech contains four clauses five sections of especial significance for the internet:

-           Clause Section 5: a new defence for website operators in respect of third party posts.  In essence this significantly enhances website operators' protection for posts by identifiable posters; and is also designed to encourage website operators voluntarily to disclose to defamation complainants identity and contact details of the author of an anonymous defamatory post.

-          Clause Section 8: a single publication rule for purpose of time-barring defamation actions.  This will protect internet republications and archives.  Some legislative action in this area was inevitable following the 2009 decision of the European Court of Human Rights in the Times v UK case.

-          Clause Section 9: a forum bar on defamation actions against defendants domiciled outside the EU or EEA, unless of all places in which the statement has been published, England and Wales is clearly the most appropriate place in which to bring an action.  While this is framed as a general restriction on forum-shopping, it will have especial impact on actions founded on the mere accessibility of a foreign internet publication in England and Wales.

-          Clause Section 10: a bar on defamation actions against secondary publishers unless it is not reasonably practicable to proceed against the author, editor (if any) or commercial publisher (if any).  Although mainly presented as a defence for booksellers, this clause will also benefit online intermediaries.
-         [Update] Section 13: the court is empowered, where it gives judgment for the claimant in a defamation action, to order the operator of a website on which the defamatory statement is posted to remove the statement; and to order certain secondary publishers to stop distributing, selling or exhibiting material containing the statement.  This section was introduced during passage of the Bill through Parliament.  The terms of any proposed order against a website would have to be considered in the light of the prohibition in Article 15 of the Electronic Commerce Directive on placing general monitoring obligations on hosting intermediaries.

The most controversial and difficult of these provisions is Clause section 5, which according to the government’s consultation response on the draft Bill was to deliver a greater degree of protection against liability for intermediaries. 

To achieve this aim, the Clause section 5 defence would have to be significantly more attractive to online intermediaries than the defences already provided by S1 of the Defamation Act 1996 and (other than for injunctions) by the conduit, caching and hosting safe harbours under the Electronic Commerce Directive. 

For identifiable posts Clause section 5 does provide significantly greater protection than existing defences, since the defence is not defeated by any degree of knowledge so long as the operator can show that it did not post the statement [Update] and the claimant cannot show that the operator acted with malice in relation to the posting. However this may raise a question (which would also apply to non-identifiable posts) as to when moderation (which under section 5(12) does not of itself defeat the defence) strays from knowledge into participation in posting.

For anonymous or pseudonymous posts, on the face of it Clause Section 5 mostly offers no more than the existing defences, and in some important respects is less attractive.  A proper assessment of the effect of Clause section 5 on anonymous and pseudonymous posts is hindered by the unsatisfactory device of leaving significant elements to be prescribed by secondary legislation.  The clause section reads as if the drafters gave up half way through and punted off the most difficult aspects to a statutory instrument. 

[Update] Despite calls for the government to publish draft regulations during the passage of the Bill, this did not occur.  Indications of the government's thinking can be gleaned from the informal consultation among interested parties conducted by the Ministry of Justice at the start of 2013.

Identifiable posts apart, the most significant increase in protection for online intermediaries is in fact delivered by Clause Section 10, which should make it much more difficult to proceed against online intermediaries rather than the primary perpetrators of the libel.

Apart from its impact on website operators, Clause section 5 is controversial in singling out anonymous and pseudonymous speech for special treatment.  The justification for this is said to be that people who defame others should not be able to hide behind a cloak of anonymity. 

However, taken in isolation this is mere sloganeering.  Any serious policy-making has to take into account the benefits of anonymous and pseudonymous speech, including speech which someone aggrieved (and let’s not forget that libel claimants can be notoriously thin-skinned) may consider to be defamatory, even with the new threshold of ‘serious harm to reputation’.  Anyone who heard Rowan Davies of Mumsnet speak at the Westminster Legal Policy Forum on 15 March 2012 could hardly doubt the value of anonymous speech.

At a detailed level there are more reasons to be concerned about Clause section 5.  Here are some that are immediately apparent.

Effect on common law publication

Clause Section 5 applies where an action for defamation is brought against a website operator in respect of a statement posted on the website.  It provides for a defence where the website operator can show that it did not post the statement on the website.

[Update] Section 5(11), introduced during the passage of the Bill, provides that the defence is defeated if the claimant shows that the website operator has acted with malice in relation to the posting of the statement concerned.  The Explanatory Notes to the Act give the example of where the website operator had incited the poster to make the posting or had otherwise colluded with the poster.

Since the provision is cast as a defence, it presupposes that a website operator would otherwise be at risk of liability for publishing a third party post.  However this is contrary to the trend of the most recent defamation caselaw on liability for publication, namely Tamiz v Google.    

That case (which is understood to be under appeal) held found on appeal that (at least prior to notification of the existence of the defamatory statement) Google was not a publisher of comments to a blog hosted on its Blogger platform.  Not only is someone who is not a publisher in no need of a defence, but a defence reverses the burden of proof.  It is for the claimant to prove that the defendant published the statement, whereas an affirmative defence places the burden on the defendant.

Clause Section 5 shares this vice with S1 of the Defamation Act 1996, which is structured in similar terms and provides a defence for various secondary publishers, some of whom (such as conduits) would almost certainly not have been regarded as publishers at common law.  It is true that no-one to date has argued that the terms of the 1996 Act broadened or should influence the class of those taken to be publishers at common law, but then until Tamiz v Google in the Court of Appeal the recent law in this area had been built almost entirely on claims by litigants in person. 

It would be most unfortunate if the effect of Clause section 5 were to render website operators or other intermediaries potentially liable for publication of statements for which they may currently be able to argue that they are not publishers at common law.  At least it should be have been explicitly stated that Clause Section 5 does not affect any question of whether the defendant has published the statement at common law; and it would do have done no harm to take the opportunity to insert a similar provision in the 1996 Act.  It is doubtful whether Clause 14 Section 15, stating that publish and publication have the meaning they have for the purposes of defamation law generally, is sufficient.

What is a website operator?

Clause Section 5 is silent as to what is meant by a website, or the operator of a website.  This is understandable to an extent, since attempts to define such terms are liable to be overly technology-specific and to create uncertainty through excessive precision (see Professor Chris Reed’s new book Making Laws for Cyberspace for an excellent discussion of these pitfalls).  However the terms ‘website’ and ‘operator’ are themselves hardly models of precision or certainty.

We can think of a core set of examples that will fall within the provision.  A business website with a discussion forum would be one.  A site such as Mumsnet would also be a good candidate.  But what about, say, the Blogger platform considered in Tamiz v Google and Davison v Habeeb?  Is the Blogger platform a website?  Is an individual blog hosted on the platform a website?  If so who is the operator: Google, the blogger, both?  Is Facebook a website?  Is Twitter a website?  Is World of Warcraft a website?  We could go on.  The clause section gives no hint of what the thinking behind the drafting may have been.

[Update]  During the passage of the Bill an amendment was tabled in the House of Lords to replace 'website' with 'electronic platform'. Responding for the government, Lord Ahmad of Wimbledon said on 15 Jan 2013: “The purpose of Clause 5 is to provide a defence to website operators that host third party content over which they exercise no editorial control. ... If in further discussion in Committee or at Report a form of technology is brought to our attention that is akin to a website and serves the same purpose in hosting third-party content, and a suitable form of words can be found adequately to describe that in legislation, the Government are open to considering that point further.” No change was made.

Defeating the defence – inability to identify the poster

The section 5 defence is defeated if the claimant can show three things:

1.       That it was not possible for the claimant to identify the person who posted the statement

2.      The claimant gave the website operator a notice of complaint (containing various specified information); and

3.      The website operator failed to respond to the notice of complaint in accordance with regulations to be made under secondary legislation

So if the claimant is able to identify the person who posted the statement, then the defence cannot be defeated regardless of whether the operator had knowledge of the defamatory or actionable nature of the posting. This is a significant enhancement over existing defences since it avoids website operators being put in the invidious position of acting as judge and jury over third party statements alleged to be defamatory.

[Update]  The introduction of the malice exception in Section 5(11) may render this less of a 'bright line' defence, since there may be room for debate about where the lines are between participation in a post, moderation of posts and malice in relation to a post.

Presumably the inability of the claimant to identify the person posting the statement is to be assessed by reference to the information available on the site, rather than taking into account e.g. the possibility of making a Norwich Pharmacal application against the website operator to ascertain this.  However nothing is said about what constitutes ‘identity’.  Does a pseudonym or an alias qualify?  Or does the clause only bite on anonymous speech?  But what if the identity behind a pseudonym is apparent, to some degree of certainty, from material available elsewhere on the internet?

[Update] Section 5(4), introduced during the passage of the Bill, provides that it is possible for a claimant to 'identify' a person only if the claimant has sufficient information to bring proceedings against the person.

Defeating the defence – notice of complaint

A notice of complaint in respect of a post by a non-identifiable poster has to specify the complainant’s name, specify where on the website the statement was posted and contain such other information as may be specified in regulations (why leave this to secondary legislation?). 

Most importantly, the notice must set out the statement concerned and explain why it is defamatory of the complainant. 

Under Clause section 5 the complainant has only to explain why the statement is defamatory, not why it is actionable.  Actionability brings into play possible defences such as (as reframed under the Bill Act) truth, honest opinion, responsible publication on matters of public interest and so on.  

Since this is a notice to which a website operator has to consider how to respond, why should the notice not be required to address the whole context?  It is unclear why a website operator should potentially be encouraged to reveal identity details or take down a post, even an anonymous post, on the basis of only half the story.

In this respect the provision repeats a feature of the 1996 Act secondary publisher defence, but which is absent in the Electronic Commerce Directive hosting exception which refers to knowledge of illegality. 

On the other hand it appears that prior knowledge of the defamatory or illegal nature of the post would not defeat the Clause section 5 defence, so long as the website did not post the statement (see comments above regarding moderation [and malice]) and upon receipt of a notice complying with the Clause section 5 requirements [or possibly in some cases a non-compliant notice] follows the procedure laid down in Clause section 5 and the regulations.  

[Update] See update comments above regarding the introduction of section 5(11) concerning malice.  The regulation-making powers were expanded during passage of the Bill to allow the regulations to address circumstances in which the website operator receives a notice that does not comply with the specific requirements of a notice of complaint.  This is thought to be so that regulations can 'require' (i.e. as a condition of being able to rely on the defence) a website operator to revert to the giver of the notice and explain what is required for a valid notice.  

Defeating the defence – the website operator’s response

The government consultation response proposed that on receipt of a notice of complaint in respect of a non-identifiable poster, the intermediary would have to contact the author of the material or, if this did not prove possible, take the posting down.  If the matter remained in dispute after an exchange of correspondence, the intermediary would be required to provide details of the author to the complainant, who would then have to sue the author to secure removal of the material and could not pursue an action against the intermediary.

One attraction of this proposal to intermediaries would have been that, having initially acted as a liaison and then having provided identity and contact details to the complainant, the intermediary was out of the picture even if the disputed posting stayed on the website.  The existing defences under the 1996 Act and the Electronic Commerce Directive hosting exemption provide no route to safety other than taking down the allegedly offending material.

However, rather than clearly implement this escape route the Bill Act leaves it to secondary legislation, giving the government an unsettlingly wide range of future options.  The Bill Act merely provides that Regulations may make provision including “as to the action required to be taken by an operator of a website in response to a notice of complaint (which may in particular include action relating to the identity or contact details of the person who posted the statement and action relating to its removal)”.  There is no suggestion here that taking down the posting would occur only if the intermediary could not contact the poster of the material.

Why is a new route to disclosure of identity needed at all?

A troubling aspect of the provisions regarding non-identifiable posts is why, when there is already a widely used judicial route (the Norwich Pharmacal order) to obtaining the identity of anonymous posters of defamatory material, any of this is necessary at all.  The court is uniquely able to balance competing considerations of reputational harm, privacy and freedom of speech.  So, for instance, in Sheffield Wednesday Football Club Ltd and Others v Hargreaves the court refused to order disclosure of identities for posts that it regarded as bordering on the trivial, saloon-bar moanings, or mild abuse, even if arguably defamatory. 

The procedure under Clause Section 5 would, on the face of it, throw this balancing exercise back on website operators, or encourage them to reveal identity and contact details without regard to broader considerations, simply in order to preserve their own liability position.  It is difficult to see how this can serve a wider interest.  It may also not comply with EU law as interpreted in the Promusicae and Bonnier Audio ECJ decisions, even allowing for the generous latitude to Member States granted by those decisions. 

The government consultation response stated that there would “be a need to ensure that appropriate safeguards were in place relating to the releasing of details of the author of the material to the complainant, taking into account concerns such as those expressed by the Committee in relation to whistleblowers.”  None of this is contained in Clause Section 5.  If it is intended to be addressed in secondary legislation, is that the right place to deal with issues of such importance?

What does ‘required’ mean?

As set out above, Clause Section 5 provides that Regulations may make provision as to action ‘required’ to be taken by a website operator in response to a notice of complaint in respect of a non-identifiable poster.   Since this is all in the context of defeating the defence provided by Clause Section 5, it is to be hoped that ‘required’ means no more than ‘required in order for the operator to rely on the defence’.  However [Although] this is not explicitly stated, it does appear from the MoJ informal consultation on the possible content of regulations that .  If the intention is that the only consequence is that the operator be unable to rely on the Clause Section 5 defence, then ‘required’ is ambiguous and should be revisited. 

If the intention is that a website operator should be subject to other sanctions if it does not do what is required, then that should be made explicit so that it can be fully debated and, it is to be hoped, rejected. 

The notion that a website operator could be compelled to disclose third party identity and contact details, or face sanctions for not doing so, merely through receipt of a notice alleging defamation, with no opportunity for a court to review the full circumstances and exercise its discretion, would [have been] be highly controversial and quite likely contrary to Promusicae and Bonnier. 

It is questionable whether a website should even be encouraged voluntarily to disclose such details through the threat of losing the benefit of this new defence.  At any rate the operator’s ability to rely on other existing defences, and to argue that it has not published at common law, would need to be fully preserved.

How does Clause 5 interact with Clause 10?

Clause 10 provides that a court does not have jurisdiction to hear and determine an action for defamation against a person who is not the author, editor or publisher (i.e. commercial publisher - all as defined in the 1996 Act) of the statement unless the court is satisfied that it is not reasonably practicable for an action to be brought against the author, editor or commercial publisher. 

It is interesting to speculate on whether a website operator’s decision not to respond to a notice under Clause 5 would be held against it in the court’s evaluation of reasonable practicability, even though it is open to the claimant to pursue a Norwich Pharmacal application against the website operator to disclose the identity of the author.  Given all the problems with Clause 5, it is to be hoped not.

[Updated 11.30pm 13 May 2012 to add material re identifiable posters and prior knowledge; further polishing at various times on 14 and 15 May 2012; updated following Royal Assent on 4 May 2013.]

Friday, 27 May 2011

Twitter will notify users of disclosure applications

Interesting to see Twitter saying at e-G8 that they will notify users if they are the subject of a court application against Twitter to disclose their identities.  As pointed out in a previous post, that is possible under the English Norwich Pharmacal procedure, and was suggested by Aldous L.J. in Totalise v Motley Fool, but rarely if ever happens.  Maybe now it will catch on. 

Wednesday, 9 February 2011

Mass file-sharing claims - the Norwich Pharmacal fallout begins

A significant step towards changes in the practice governing mass identity disclosure orders in copyright infringement cases has been taken with His Honour Judge Birss QC's judgment in Media Cat Ltd v Adams, a P2P filesharing case, published on 8 February 2011. 

The judgment in substance concerned an unsuccessful attempt by Media Cat to discontinue copyright infringement proceedings against 27 defendants whose internet connections Media Cat claimed had been used for P2P copyright infringement.  After the hearing the court was informed that Media Cat had ceased trading due to insolvency and that its lawyers, ACS Law, were closing permanently on 31 January 2011.  

In the course of his judgment Judge Birss commented on some broader issues surrounding the "Norwich Pharmacal" procedure.  Media Cat used this procedure to obtain court orders against ISPs requiring them to disclose the identities of its customers corresponding to the internet protocol (IP) addresses via which Media Cat believed that unlawful filesharing had taken place. 

The weakness of the Norwich Pharmacal procedure is that the only parties usually present at the hearing are the rightsowner applicant and the judge hearing the application.  The ISP may be present if it chooses, but does not have to be.  The person apart from the rightsowner with a real interest in the application - the customer whose identity will be disclosed - is normally unaware that the application is taking place. 

Judge Birss commented, after explaining the importance of Norwich Pharmacal orders:
"Nevertheless there is a potential difficulty with the Norwich Pharmacal process which is put in focus by the cases before me.  The respondent to the Norwich Pharmacal application for disclosure - while obviously wishing to ensure that an order is not made when it would be inappropriate to do so - has no direct interest in the underlying cause of action relied on." 
This echoes comments made some years ago by Aldous LJ in Totalise v Motley Fool (see here):
“It is difficult to see how the court can carry out this task if what it is refereeing is a contest between two parties, neither of whom is the person most concerned, the data subject; one of whom is the data subject's prospective antagonist; and the other of whom knows the data subject's identity, has undertaken to keep it confidential so far as the law permits, and would like to get out of the cross-fire as rapidly and as cheaply as possible.”

Judge Birss went on to comment:
"in my judgment when a Norwich Pharmacal order is sought of the kind made in this case, it may well be worth considering how to manage the subsequent use of the identities disclosed.  Perhaps consideration should be given to making a Group Litigation Order under CPR Part 19 from the outset and providing a mechanism for identifying test cases at an early stage before a letter writing campaign begins.  ... Perhaps a court asked for a Norwich Pharmacal order of the kind made here should consider some similar form of supervision [to that in a search and seize order] from an experienced neutral solicitor."
My previous post on this topic suggested some other possible safeguards: that a technical assessor might sit with the judge hearing the application for disclosure of identities; and that the customers whose identities stood to be disclosed might be notified of the application and permitted to make anonymous representations to the court hearing the application.  Whatever the measures adopted, we may now seeing the beginning of a move towards introducing greater safeguards, at least in mass application cases.