MediaTech Law

By MIRSKY & COMPANY, PLLC

PII at the Center of RadioShack Bankruptcy Auction and Mediation

A recent New York Times article highlights the disconnect between a company’s privacy policy and the disclosure of user data when the company is sold. According to the Times, while a company, like Hulu, declares that it “respects your privacy”, should the company go up for sale, user names, birth dates, email addresses and unique subscriber information can be made available to the highest bidder. Often it is this very information that can be of most value to a struggling or defunct company. This very issue played out recently with the bankruptcy of RadioShack, the electronics retail store founded in 1921, and the recent sale of its brand.

The now-bankrupt RadioShack reached a mediated agreement with U.S. states on May 14th over the sale of customer data, which barred the transfer of personal customer information; limited the number of emails to be included in the sale; and provided opt-out mechanisms to customers prior to transfer.

New York-based Standard General purchased 1,750 RadioShack stores and trademark and intellectual property, out of bankruptcy. The sale included personal customer information provided by customers to RadioShack over many years, including email addresses, postal addresses and phone numbers.

Read More

.SUCKS: Extortion or Free Speech?

Domain names are an essential part of modern commerce and convey important information about the website’s affiliation and legitimacy. Consumers may briefly glance at the .com or .edu at the end of the page they land on to make sure they’re on the right site, but soon they may see an unfamiliar suffix next to their favorite brand’s page – .sucks.

In 2014, the Internet Corporation of Assigned Names and Numbers (ICANN), a California-based nonprofit that manages and coordinates domain names, agreed to allow Vox Populi, a Canadian domain name registrar, to operate the registry for the new “.sucks” top-level domain (TLD).

Read More

Targeted Election Ads: New Frontier in Political Advertising

The next U.S. President won’t be sworn in for almost two years, but the jostling and positioning among likely candidates has already begun. When candidates consider how to reach potential voters, an increasingly sophisticated weapon in their arsenal will be targeted advertising to reach voters in-between commercial breaks of their favorite TV shows. These “addressable ads” allow advertisers – in this case political campaigns – to pay content providers, such as satellite networks, to reach specific homes. Addressable ads present a sharp departure from previous eras of political advertising that used a “shotgun approach” to appeal to as many potential voters as possible, regardless of demographics, previous political affiliation, or likelihood of voting.

Satellite television providers DirecTV and DISH Network have already embraced this technology by selling data about subscribers’ individual viewing habits to campaigns. Subscriber data are initially anonymized, but with addresses intact, and then matched to the addresses on voter-registration and canvassing databases. According to a USA Today report, once the targeted households are selected, the satellite provider sends the addressable ads to the home’s digital video recorder (DVR), and the ad airs in the next available commercial slot as part of whatever programming the customer is watching. After the ad plays, the remainder of the user’s TV show continues unaffected until the next ad slot opens.

Read More

Free Legal Documents!! (Sure, Why Not?)

Why would lawyers give away legal documents for free? Or better yet, why wouldn’t they do it? Daniel Doktori offered some good answers to these questions when he wrote recently in TechCrunch about Big Law’s answer to the Open Data movement.

But what’s most remarkable about the big lawyer giveaway – get there early, get your legal docs, we’re opening this year at 6pm on Thanksgiving Night! – may be how unremarkable it really is.

Doktori writes of law firms’ “mimic[ing] their small clients’ ‘freemium’ business development model”, suggesting that giving away free stuff is simply a way to get clients in the door where they (hopefully) will become paying clients. Perhaps. But it seems unlikely that a cash-strapped startup will hire a $700 per hour firm of attorneys simply because that firm gave away a generic founders’ subscription agreement. And with so many law firms offering the exact same documents – Doktori cites his own firm’s service as well and those of Cooley LLP and Orrick, Herrington & Sutcliffe LLP – there’s not much here to really differentiate the value of these documents in the first place. Not to mention the various non-law firm startups getting into the same game, including Founders’ Workbench (mentioned by Doktori) and low-cost services from Rocket Lawyer and others.

Read More

Real World Implications of Cyber Warfare

Introduction

Amid all of the publicity and media attention of the December cyberattack on Sony Pictures Entertainment, a cyber-intrusion on a German steel mill received comparably scant notice. Unlike the Sony hack, however, it highlighted an important and disturbing trend in cyber warfare. Detailed in a German government report released in December, the hacking of the German steel mill signified the second confirmed instance in which a wholly digital attack resulted in the physical destruction of equipment. By initially gaining access to the plant’s business network, the intruders were able to successfully make their way to the production network and access the controls of the plant’s equipment. They were able to control the system to such a degree that a blast furnace could not be properly shut down, resulting in “massive” damage.

According to Wired’s coverage of the incident, much information about the attack is not detailed in the report, including the name of the steel mill, exactly when it happened, and how long the hackers were in the network before the destruction occurred. The report does relay that the hackers apparently had advanced knowledge, not only of conventional IT security, but of the applied industrial controls and the mill’s production processes.

The incident highlights what is possible with the increasingly prevalent networked nature of physical real-world systems, from critical infrastructure networks like electric grids and water treatment systems, to simple and increasingly networked household and personal items in the growing Internet-of-Things (IoT).

Read More

Legal Threats Don’t Stop Growth of Textbook Pricing Application

OccupyTheBookstore, a Chrome browser add-on from Texts.com, has become the subject of legal threats from Follett Higher Education Group, one of the largest college textbook retailers in the U.S.  Textbook price comparison tools are not new, with websites like Chegg and SlugBooks, compiling textbook prices from retailers, university bookstores, and online retailers on their own websites.  What makes OccupyTheBookstore unique is that it is provided directly to the user as a downloadable plug-in and works immediately on top of a user’s browser to show cheaper options for print and digital rentals while the user browses a bookstore’s website.

The fact that the user is given the option to employ an immediate filter on top of Follett-affiliated websites rankled the company and prompted it to threaten Texts.com with legal action.  According to an email from Follett to Texts.com’s founders obtained by the Wall Street Journal, the add-on “effectively chang[es] the presentation of the information on the screen.”  Texts.com has not backed down.  In an interview with Red and Black, University of Georgia’s student newspaper, Texts.com says that it “determined that we are totally within our rights to manipulate information in the client’s browser. As it’s opt-in and doesn’t touch the bookstore servers at all….”

Read More

A Simple Takeaway from the Recent Sony Hack

The hack of Sony Pictures Entertainment placed Sony Entertainment Pictures in the spotlight for the last two months of 2015, highlighting the company’s lax security protocols and placing international focus on the recently released James Franco/Seth Rogan comedy “The Interview”. For the uninitiated, a group calling themselves the “Guardians of Peace” (with the unfortunate acronym “GOP”) hacked into the Sony’s computer systems, gaining unauthorized access to a treasure trove of sensitive data, including: social security numbers of over 47,000 celebrities, freelancers, and Sony employees; several unreleased movie titles that were later released to file-sharing websites; and corporate files including email correspondence, film budgets and passport/visa information for movie casts and crew. The data breach appeared to be supported by North Korea, which denied responsibility. While the United States National Security Agency directly blamed North Korea for the attack, other industry insiders claim North Korea had nothing to do with the attack.

Read More

Fertilizer by Any Other Name: District Court Denies Trademark Protection for Generic Term

Trademark law is designed to protect consumers from confusion as to the sources of products or services.  Strong trademarks are those that are distinctive – that is, they are capable of identifying the source of a particular good.  At the other end of the trademark spectrum are generic marks.  These marks are incapable of functioning as trademarks because they have come to be identified by the relevant purchasing public as common names for the goods or services with which they are associated.  A finding that a mark has become or is generic means that it has lost (or has never had) the ability to identify the source of a product or service, and thus cannot function as a trademark.  For this reason, a finding that a potential mark is “generic” presents a serious problem to a trademark application because it means that a mark has become synonymous in the public’s mind with a particular product or service as opposed to its source.

Dr. Earth, a California organic gardening company, learned this lesson after a lengthy legal battle in which its trademark application for PROBIOTIC was ultimately denied by the U.S. District Court for the Eastern District of Virginia.  Dr. Earth sought to register the word PROBIOTIC for fertilizers.  The U.S. Patent and Trademark Office (PTO) Examiner initially refused registration, stating that the term was generic in connection with fertilizer, and that at most, the term was merely descriptive and had not acquired a secondary meaning.  Merely descriptive marks are similar to generic marks and are considered “weak” marks because they simply convey information about a function, characteristic, or purpose of the goods or services.  As Jeffrey Davidson states in his IP Registration and Enforcement blog, “[d]escriptive terms by their very nature apply to all goods of a particular type, and therefore do not identify any single source.”  Nonetheless, merely descriptive marks can become distinctive of a source by achieving “secondary meaning.”  Daniel A. Tysver, of the comprehensive Bitlaw Legal Resource, notes that if evidence such as long term use or large amounts of advertising and publicity can show that a mark has achieved this “‘second meaning’” (the first meaning being the generally understood meaning of the term or phrase), a protectable trademark is developed.”

Read More

Ubergate: Year-end troubles persist for the popular rideshare company

The rideshare and taxi service Uber has had a very public and turbulent end to 2014. From privacy abuse allegations and Congressional scrutiny, to public protests and all-out bans in certain countries, the San Francisco-based, mobile-app-focused company has managed to retain its valuation of $40 billion. The company, which provides its service in 45 countries and over 200 cities, ran into trouble after a Buzzfeed report detailed November 14th remarks by the company’s Senior Vice President Emil Micahel who spoke of his desire to dig up dirt on the personal lives of journalists critical of the company. In particular was the intent to spread the personal details of one Sarah Lacey, editor of the Silicon Valley website PandoDaily. The Buzzfeed report also detailed the examination of private travel records of a reporter by an Uber executive. The combination of the aggressively toned nature of the comments and the willingness of the company to access user’s personal data gave rise to the November trending hashtag #Ubergate.

Read More

Granting Access: Real and Imagined Threats Regarding Terms of Service

Introduction

The latest Nielsen data show that the average smartphone owner uses approximately 26 apps in a given month. (Median use is probably quite a bit lower, but the numbers are still impressive.)  Marketplaces for apps, like Apple’s App Store and Google Play, have standardized how apps are distributed. Users are informed of an app’s features, as well as the extent to which the app may function on a particular smartphone. From taking pictures and recording video, to collecting GPS and location data, to accessing contact lists, apps have access to larger and larger sets of personal information. For all practical purposes, each of those apps employs some type of Terms of Service (“TOS”) agreement and privacy policy outlining its required permissions before it may be installed and used.

Practically, it is oftentimes unlikely that users downloading an app fully read and comprehend the terms of service or privacy policy, but instead give the app’s list of requested permissions no more than a cursory glance. A 2008 study by Aleecia M. McDonald and Lorrie Faith Cranor found that – based on the median length of privacy policies and the standard reading pace of 250 words per minute – it would take an individual approximately 30 work days to read all of the privacy policies encountered on a daily basis. The study only accounted for privacy policies, and not terms of service agreements or user agreements. Due to the length and ubiquity of these terms and policies, it is reasonable to think that many users do not take the time to fully understand the terms and policies to which they agree. This explains why users may not know exactly what permissions and capabilities they’ve approved for the apps they use.

Read More

What Should You Consider When Drafting a Privacy Policy?

Businesses are often faced with the challenge of collecting information about their clients in order to tailor and improve their products and services, while respecting their customers’ privacy and protecting their personal information.  But outside of a narrow set of specific state requirements mandating minimum content requirements for privacy policies (see, for example, this discussion of California’s Online Privacy Protection Act (CalOPPA)), and other than the Federal Trade Commission (FTC) Act, which prohibits deceptive or unfair commercial practices, there are no federal laws or regulations that explicitly say what should be included in a privacy policy.  Nonetheless, the statements a company makes in its privacy policy regarding use and disclosure of personal information are enforceable by consumer protection agencies under regulations such as the FTC Act and state laws that prohibit deceptive commercial activity.

Read More

Google Ordered to Cull Both European and Global Search Indexes

Google & Europe’s Right to Be Forgotten

A recent round of court decisions has forced Google, the internationally known search behemoth, to shrink its search index, instead of expanding on it. This past May, a ruling by the Luxembourg-based Court of Justice of the European Union (CJEU) required Google to provide a means by which citizens of the EU could request the search provider to delete information collected on individuals where the search result(s) “appear to be inadequate, irrelevant or no longer relevant or excessive in the light of the time that had elapsed.

Read More