Cookies Update January 2012

As you may now already be aware, laws surrounding the download of cookies changed in May 2011. The amended E-Privacy Regulations require websites to seek the consent of end-users prior to the download of cookies onto their machines. End-users must also be given comprehensive information about the use of cookies on the websites they visit. Here is our last update on the matter for further details.

The Information Commissioner has put in place a one year moratorium on enforcement of the new regulations to allow businesses sufficient time to formulate their plans for compliance. Businesses have been reluctant to implement consent measures on their websites, citing reasons such as the options available being very detrimental to the user experience (e.g. pop-ups) and fears surrounding the paucity of key site analytical data that will be collected should users not consent to the download of cookies.

Clearly mindful of the confusion and apprehension surrounding implementation of the new cookies regulations, the Information Commissioner published updated advice regarding cookie compliance on 13 December 2011. The Commissioner’s additional interpretation of the new regulations is summarised below.

Consent

Consent must involve the end-user knowingly indicating their acceptance, for example by actively clicking an icon or subscribing to a service.

Although the cookies regulations do not use the term “prior”, the Commissioner expects cookies to be set only after consent and full information about the cookies to be downloaded has been given. It is recognised that cookies are often downloaded the moment a user arrives on a site. If possible, web managers should postpone the download of cookies until users have been given sufficient information to make a choice about whether or not they want cookies on their machines. However, if delaying the download of cookies is not possible, then websites should ensure they minimise, as much as possible, the time between the first cookie being downloaded and the point where sufficient information is provided to the user and consent can be given.

Responsibility for compliance

The Commissioner considers that the person or entity setting the cookie is primarily responsible for compliance with the cookies regulations. However, when a third party’s cookies are dropped via a website, the Commissioner takes the stance that both parties are responsible for compliance with the law. In practice, the information requirements and opportunity for a user to give their consent will be provided on the website that the cookies are dropped from. As such, third parties dropping cookies, and the sites they drop cookies from, are encouraged to work together to achieve compliance. Third parties should seek to include contractual obligations upon the websites they drop cookies from in respect of the consent and information requirements in the regulations.

Organisations contemplating avoidance tactics have been considered by the Commissioner also. A website hosted overseas (outside the EU) will still likely have to comply with the cookies regulations if:

  • the organisation which owns the website is based in the UK; or
  • the website itself is designed for the European market; or
  • products and services are provided from the website to customers predominantly based in Europe.

Enforcement

The Commissioner has also revealed the primary enforcement actions available to him for organisations which refuse or fail to comply with the cookies regulations, namely:

  • Information notice. A request for specific information from an organisation within a specified time frame.
  • Undertaking. An organisation must carry out specific action to improve its level of compliance.
  • Enforcement notice. An organisation must carry out specific actions to ensure compliance with the regulations. Failure to comply with this notice may be considered a criminal offence.
  • Monetary penalty notice. A fine up to a £500,000 maximum, to be used for only for the most serious breaches.

Enforcement action will be proportionate to the issue that it seeks to address. As such, cookies which do not greatly impinge on a user’s privacy rights (e.g. first party analytical cookies and those used to support the accessibility of sites and services) are likely to register extremely low on the Commissioner’s priority list for enforcement. The Commissioner has gone as far as suggesting that, while not considering them exempt from the regulations, he is unlikely to embark on “any consideration of regulatory action” in respect of the cookies referenced above, so long as organisations have done all they can to provide users with prominent and sufficient information about the purpose of such cookies. On the other hand, organisations dropping cookies which closely relate to user’s personal information should be prioritising implementation of the consent (and information) requirements of the regulations.

Conclusion

The additional guidance from the Commissioner suggests that a common sense attitude will be taken in respect of enforcement of the regulations from May onwards. However, what is stressed throughout the updated guidance is that the new regulations cannot be ignored and organisations should currently be doing all they can to achieve compliance.

Territorial Jurisdiction V The Internet – The EJC adopts a wider interpretation of jurisdiction in relation to privacy rights

Recently, there has been an interesting ruling by the European Court of Justice (ECJ) on two joined cases, both relating to alleged multi-jurisdictional defamation by means of material published on the internet. The inherent conflict of the globality of the internet and the territorially limited jurisdiction of national courts was the key issue.

eDate Advertising v X

In 1993, X and his brother were sentenced by a German court to life imprisonment for murder. X was released on parole in January 2008.

eDate Advertising (established in Austria) linked from the info news section on its website to a report that named X and stated that he had lodged an appeal against his conviction. In addition to a brief description of the crime, the report also contained a quote from X’s lawyer saying that X intended to prove that several of the principal witnesses for the prosecution had not told the truth at the trial. X requested eDate Advertising to stop reporting on the matter and to refrain from any future publication. eDate Advertising did not reply but removed the disputed information from its website.

Not satisfied with this, X brought an action before the German courts to prevent eDate Advertising from using his full name when reporting about the crime. eDate Advertising argued that the German court had no jurisdiction to make any order restricting publication outside of Germany. Therefore, the court referred the matter to the ECJ to make a ruling on whether it had such jurisdiction.

Martinez v MGN

The French actor Olivier Martinez and his father brought an action before the Paris Regional court that his private life had been interfered with, following a posting on the website ‘www.sundaymirror.co.uk’, entitled ‘Kylie Minogue is back with Olivier Martinez’, with pictures and details of a meeting between Kylie and Olivier.

The action was brought against MGN, the publisher of the Sunday Mirror. MGN raised the objection that the Paris Regional court lacked jurisdiction to make any order restricting publication, as the article was in English and on a UK website. The Parisian court also referred the matter to the ECJ to rule on jurisdiction.

The ECJ found that:

Where there was an alleged infringement of personality rights by way of content placed on an internet website, the claimant could bring an action either 1) before the courts in the country where the publisher is established, or 2) before the courts where the claimant is based, or 3) before the courts of each country where the allegedly infringing content is or has been accessible online.

Conclusion

The ECJ appears to be adopting a wide interpretation in order to protect an individual’s personality rights on the internet, allowing potential claimants several options as to how they want to bring an action against any infringer. Publishers should take a more careful approach to what and how they post information. In light of this clarification, ‘forum shopping’ by claimants may become more prevalent.

Technology Breakfast Briefing: Transferring Technology into Wealth (23 Nov 2011)

Event date and time: 23 November 2011, 0830-0945

Venue: 6-7 St. Johns Lane, London, EC1M 4AJ

Who should attend: the event is particularly relevant to CEOs, CIOs, FDs and COOs, directors, business owners and in-house lawyers at technology companies

Tech entrepreneurs occupy parallel tech universes. In one, huge profitless companies command massive valuations and attract large slugs of capital. In the other, high-energy but low-profile businesses seem confined to run on the daily treadmill without recognition or reward. There must be a bridge between the two!

We are delighted that Ken Olisa, founding head of technology merchant bank Restoration Partners, will join us to share some of his experiences as a 40 year IT veteran. Amongst other roles, Ken is previous Master of the Worshipful Information Technologists’ Company.

Ken will be answering questions such as: which is better – organic growth or acquisitions? debt or equity? home or abroad? Optimism or pessimism?

He will also provide a framework which helps entrepreneurs to make sense of the parallel universe problem and escape from the curse of rational incrementalism.

James Fulforth, a partner in Kingsley Napley’s Corporate and Commercial team, will talk about recent legal developments relevant to tech companies.

Partner Simon Halberstam will be chairing the event.

Click here for further information about the event.

To register for your free place at this seminar,  please email events@kingsleynapley.co.uk with your contact details. Confirmations are subject to availability.

Consumer rights reinforced – new EU Consumer Rights Directive

On 11 October 2011 the new EU Consumer Rights Directive was formally adopted by Member States. It substantially strengthens consumer rights in all 27 EU countries, particularly when shopping online.

Here are a few of the key benefits to consumers:

1) Hidden charges and costs on the Internet will be eliminated

From now on, consumers must explicitly confirm that they understand that they have to pay a price and will be protected against hidden “cost traps” on the Internet, for example,paying for ‘free’ services, such as recipes.

2) Increased price transparency

Traders have to disclose the total cost of the product or service, as well as any extra fees. Consumers will not have to pay charges or other costs if they were not properly informed before they place an order.  This is an issue that has attracted particular focus in the budget airline market.

3) Banning pre-ticked boxes on websites

Currently, consumers often unwittingly end up with additional services on a default basis having failed to un-tick associated boxes. These pre-ticked boxes will be banned across the EU meaning that positive “buy-in” will be necessary.

4) 14 Days to change your mind on a purchase

Previously, the time period where a consumer could withdraw from a sales contract was 7 calendar days. This has been extended to 14 calendar days. The time period will also start from the moment the consumer receives the goods, as opposed to the old legislation, which was from the conclusion of the contract. In addition:

  • Where a seller hasn’t clearly informed the customer about the withdrawal right, the return period will be extended to a year;
  • Where a trader calls a consumer beforehand and presses the consumer to agree to a visit (solicited visit), the consumer will also enjoy the right to withdraw;
  • Online auctions, such as eBay are also included (though goods bought in auctions can only be returned when bought from a professional seller); and
  • The EU has introduced a model withdrawal form which can be used for any contract in the EU, making it more accessible and faster for consumers.

5) Better refund rights

Consumers must now receive their refund within 14 days of the withdrawal. This includes the costs of delivery. Also, if traders want the consumer to bear the cost of returning goods after they change their mind, they have to clearly inform consumers about that beforehand, typically in their terms and conditions, otherwise they have to pay for the return themselves. Traders must also give an estimate of the maximum costs of returning bulky goods before the purchase, so consumers can make an informed choice before deciding from whom to buy.

6) Eliminating surcharges for the use of credit cards and hotlines

Traders will not be able to charge consumers more for paying by credit card (or other means of payment) than what it actually costs the trader. Traders who operate telephone hotlines will also be unable to charge more than the basic telephone rate for the telephone calls.

7) Information on digital products

More detail will be provided, including product compatibility with hardware and software and the application of any technical protection measures, for example limiting the right for the consumers to make copies of the content.

8) Unified approach for businesses over Europe

The new legislation provides common rules for all businesses to ensure a similar approach in trading. These include:

  • A single set of core rules for distance contracts and off-premises contracts in the European Union, creating a level playing field and reducing transaction costs for cross-border traders, especially for sales by internet; and
  • Standard forms, for example one to comply with the necessary information requirements on the right of withdrawal.

The full text of the directive will be published in the Official Journal shortly. Member states will have two years from the publication in the Official Journal to implement the Directive into national legislation.

L’Oreal v eBay – on counterfeit products: is it worth it?

In July 2011, the European Court of Judgement (ECJ) considered the case L’Oréal v eBay, where L’Oréal had brought proceedings against eBay and a number of its users for trade mark infringement for the sale of counterfeit products on eBay’s auction site, and ruled on several points which had been referred by the High Court, namely whether eBay (and other websites like it):

  • Could be jointly liable for trade mark infringement through the sale of infringing products by its users;
  • Could be liable for infringement through the use of sponsored links on third party search engines and its own site insofar as they led people to postings for infringing products;
  • Had a defence under Article 14 of the E-Commerce Directive (2000/31/EC) (Article 14) for liability for information it (as an internet service provider (ISP)) merely “hosts” on behalf of recipients of its service; and/or
  • Could, nevertheless, be prevented under Article 11 of the Intellectual Property Rights Enforcement Directive (2004/48/EC) (Article 11) from selling infringing goods on its site, even if there was no infringement by eBay itself.

The ECJ decision, which will go some way to strengthening the position of brand owners , found that eBay can be held to account for infringing activity taking place on its online marketplace, in relation to past, as well as future, infringements under Article 11.

Critically, the ECJ also found that where goods were being sold through eBay by suppliers located outside the EEA, and those goods had not previously been put on the market in the EEA by the trade mark owner, the owner could still enforce its trade mark rights against the seller, as long as the webpage in question was targeted at consumers within the EEA market. This would be a question of fact for national courts to decide, and could take into account the currency of payment, language and even the website address, for example, in L’Oreal v eBay, the address was – www.ebay.co.uk, therefore the ECJ thought this was conclusive that it was aimed for consumers in the UK territory and therefore covered by the national trademarks.

The ECJ then considered whether eBay could rely on the defence in Article 14, and found that eBay could not. The ECJ said that if a diligent economic operator should have been aware of the unlawful activity and did not act in accordance of Article 14(1)(b) and remove the information expeditiously from its site, the defence would not be available. The ECJ further stated that the defence is limited to only the technical and automatic processing of data.

It seems that, following on from the decision of the ECJ:

  • The High Court  will be able to place injunctions on intermediaries despite the UK having yet to adopt specific rules to implement Article 11 in full;
  • Injunctions against future, as well as past, infringing activity on online marketplaces will now be available for brand owners;
  • Online marketplace providers and other ISPs cannot rely on the defence provided by Article 14 if they have played an active role in the promotion or sale of the trade-marked goods, or gained knowledge of facts or circumstances that should have put them on notice that the offers for sale were unlawful, and they failed to act expeditiously.

The net is clearly tightening around portals and peer to peer websites that profit from the interaction of buyers and sellers.  It seems that the number of hiding places for ISPs is also likely to diminish in the near future.

Google facing antitrust inquiries

On 21 September 2011, the Senate Judiciary Subcommittee on Antitrust opened a hearing to look at the state of competition in online search engines.

The subcommittee is specifically looking at whether Google abuses its market position by fixing its search results to promote its own websites and services. Opening the hearing, the honourable Herb Kohl said “For the last five years or so, Google has been on an acquisition binge, acquiring dozens of Internet-related businesses, including, in health, finance, travel, and product comparison. This has transformed Google from a mere search engine into a major Internet conglomerate. And these acquisitions raise a very fundamental question – is it possible for Google to be both an unbiased search engine and at the same time own a vast portfolio of web-based products and services? Does Google’s transformation create an inherent conflict of interest which threatens to stifle competition?

In response to the concerns raised, The executive chairman of Google, Eric Schmidt, who gave evidence before the subcommittee on 21st September, said “I can assure you we’re not cooking anything…..Google does nothing to block access to any of the competitors and other sources of information.”

When asked by the subcommittee whether Google was a monopoly company, Mr Schmidt said the search engine giant was “in that area“, adding that it recognised it had a special responsibility because of its position.

The US Federal Trade Commission (FTC) is also investigating the same competition issue and the New York Times reported that FTC officials privately debated this month whether to allow the agency’s Bureau of Competitions to issue subpoenas to Google, and the FTC is now close to moving forward with handing out the court orders. The Financial Times reportedly said that attorneys-general in California, New York and Ohio have also launched antitrust investigations into Google. US law dictates that for any breach to have occurred, an actual detriment to customers must be identified.

Closer to home, Google is also subject to an investigation by the European Commission, launched in November 2010. This followed various complaints by other search engines and companies, most notably Microsoft, all of whom allege that Google gives unfavourable treatment to their services in unpaid and sponsored search results, coupled with an alleged preferential placement of Google’s own services.

Google offers two types of search result – unpaid results that are displayed in the main body of the page and “ads” (previously called sponsored links).

The investigation will try to determine whether Google’s method of generating unpaid results adversely affects the ranking of other organisations, specifically specialist search providers, such as price comparison sites. Google argues that these sites are ranked poorly because the websites duplicate information from other sites.

Finally, the investigation is also probing how Google deals with advertising partners. It has been alleged that Google imposes exclusivity obligations on advertising partners, which Google has refuted.

Whereas an offence is only committed in the US if the authorities can establish that there has been a detriment to consumers, there is no such requirement in EU law. The European Commission will need to examine Google’s actual search algorithm and email trail to determine whether EU laws have been followed. If a breach of EU law has been committed, the European Commission can fine a company up to 10% of its annual global turnover.

Apple crushes Samsung’s Galaxy tablet in Germany as global battle lines are drawn

Despite the Europe-wide ban being lifted following a challenge from Samsung, the Dusseldorf district court has now reinstated the ban on the sale of the Galaxy tablet across Germany saying that it does infringe Apple’s IP.

This tussle is only a small part of the global IP battle between these two tech giants which is currently raging across the US, Australia and South Korea.  In Europe at least, Samsung appears to be on the back foot as it was forced to withdraw its Galaxy Tab 7.7 from the IFA electronics fair in Berlin, one of the most important showcases in the industry.

However, Samsung has counter-claimed that Apple has infringed its wireless patents.  And Apple is facing another challenge from HTC for infringement of patents which they acquired from Google.

Lawsuits are now being used as anti-competitive weapons to stall rivals’ product launches.  The battle lines are being drawn: Apple v Samsung, Google and HTC; Apple v Android. Perhaps this will prove to be less one-sided than you might first imagine.

Patent registration – don’t bottle it up

A recent Court of Appeal (CA) ruling has highlighted the importance of assignees/licensees of patents registering their interests with the Intellectual Property Office (IPO) without delay.

The patents concerned, held by the claimant, Schütz, were for a bulk container for liquids that contained a flexible bottle in a metal cage. The defendant, Werit, had used the product and replaced damaged or worn bottles with bottles that it had developed. The bottles were then sold in the original caging.

The Court of Appeal overturned the High Court’s ruling and held that the patented product should be considered as a whole, and the cage and the bottle as component parts. By putting a new bottle into the cage, Werit was effectively completing the patented product. In doing so without a licence, Werit had infringed Schütz’s patent.

However, Schütz’s patent licence was granted in 1994 and not registered until 2008. Section 68 of the Patents Act 1977, as amended in 2006, provides that “…the court…shall not award [the claimant] costs or expense unless…the transaction, instrument or event is registered within the period of six months beginning with its date…”. Nonetheless, the CA decided it would not be unfair for Schütz to recover costs for the period after it had registered its licence as it had ‘put its house in order’.

All assignees or licensees of patents must protect their interest by registering it with the IPO. This ensures potential third party purchasers are put on notice of the interest and will protect a costs claim in the event of patent infringement.

(Case: Schutz (UK) Ltd v Werit UK Ltd and another [2011] EWCA Civ 927, 2011)

Patent S-pending

Patents are now the corporate weapon of choice for both shielding commercial interests and vanquishing upstart rivals.

Google has accused Microsoft and Apple of trying to undermine Android by buying up technology patents to drive up the cost of Android-powered devices. The licence fees charged for the use of the patents could arguably amount to an extra tax on companies and choke them out of the market. Following the blog post comment, Microsoft retaliated by stating that Google had been invited to bid with it on key patents but turned them down.

Apple and Samsung are suing each other in courts around the world over the rights to tablet technology. The patent dispute has caused Samsung to cancel the launch of its Galaxy tablet in Australia.

Rovio, the makers of Angry Birds (which has just surpassed 300 million downloads), is being sued by patent licensing company, Lodsys. Licensing companies, essentially acting as patent banks, are being criticised for protectionist patent purchasing which is stifling innovation and has the potential to distort the technology market if anti-competitive licence fees are demanded. Reports also abound of aggressive intimidation tactics where they sense a whiff of infringement.

Speculative spending on patents allows companies to sit back and gauge the value of technology; before swooping to reap licence fees or issue proceedings where it proves profitable.

In the world of technology, patents can make or break a company. And, somewhat predictably, it is the creative spirit of an entrepreneurial startup that ends up broken.

BT ordered to scupper online pirates

The High Court has ordered BT to block access to Newzbin2, an illegal filesharing site. The original Newzbin site was shut down following a successful action for copyright infringement. However, it appears the operators simply upped anchor and moved offshore, beyond the reach of the UK courts, and set up Newzbin2, an almost identical website located at the same URL. So now the industry has set its sights on the ISPs.

The successful test case against BT was brought jointly by 20th Century Fox, Universal, Warner Bros, Paramount, Disney and Columbia Pictures, all members of the Motion Picture Association (MPA). The landmark ruling has generated headlines, debate and trended on Twitter. However, the blocking technology won’t be finalised until October. Ironically, the movie industry bosses have ensured that now more people than ever know about the notorious Newzbin site and they have three months to plunder and pillage the site’s content.

This is clearly not the silver bullet in the fight against online copyright infringement. Blocking sites via ISPs naively underestimates the ability of the internet to evolve and circumvent restrictions. It also raises questions of censorship, initiated by deep-pocketed Hollywood moguls protecting their commercial interests.

Perhaps, rather than suing every variant of every website and cutting off one head to watch two grow back, the industry should listen to its customer base. The music industry is getting the hang of legal downloads, why not TV and movies?