Articles Posted in Internet Law

In recent years, every aspect of our lives has become dominated by technology—and now people are beginning to wear their technology. For example, Google has released Google Glass, a wearable computer in the form of glasses. Samsung has released the Galaxy Gear smart watch, a device that one wears as a watch and functions as a phone. This new technology is creating a class of its own—“wearable technology” or “wearable computing.”  By utilizing this technology, a person can walk on the street wearing glasses or a watch while recording the images and sounds around him. Are you concerned with being recorded without notice? Do you want a person to be able to gather your personal information in an instant with facial recognition software? If these issues concern you, then wearable computing is relevant to your privacy rights.

What is Wearable Computing?

Wearable computing describes a class of computer-powered devices that can be worn by a user. There are many kinds of wearable computing devices, and some raise few concerns because they are as simple as a step counter or a heart rate monitor. Other devices can perform the same functions as a smartphone, but in a much more discrete manner. The more advanced wearable devices can take pictures, record video and sound, and respond to voice commands to read text messages, emails, and surf the web. Probably the most well-known and discussed technology, Google Glass, has been subject to criticism. If someone wears a Google Glass and looks at you, your first thought might be that you are being recorded or investigated.  In fact, some restaurants and bars in San Francisco have already banned this device because of their customers’ privacy concerns. Even with the concerns over privacy, this technology is likely to become even more pervasive.

Computers are learning to do it all—even surf the Web. These computers, or programs, explore the World Wide Web, gathering information and processes for use in other forums. This technology, which is known as “web scraping” may also threaten website and consumer privacy concerns. Indeed, websites have a proprietary interest in their content and others are not authorized to access and reuse this information. Consumer information that is available online is not necessarily available for any use.  As such, web scraping has become a concern as regulators attempt to outline the parameters. Do you operate a website? Are you a consumer with personal information available over the Internet—such as your name, address, salary, or work history?  Do you have an interest in gathering information from various sites for your personal use? Do you wish to revise your terms of service in light of these advancements? If so, web scraping is relevant to your business and privacy concerns.

What Is Web Scraping?

Web scraping is the process of using computer software to extract information from websites. Usually, this type of software simulates web browsing that is performed by a human. This technique is used to automatically gather information from various websites. This is an effective tool in several fields such as online price comparisons. Often, the aggregate website will have agreements with other websites allowing web scraping to gather pricing data. Additionally, web developers often use this technique to copy website content and reuse it when designing a new site. However, this process can also be used in ways that press against privacy concerns. For example, web scraping can be used to gather a consumer’s personal information. This includes contact information, personal websites, and professional histories. Web scraping can also gather an online user’s comments on discussion boards. All such information is valuable to businesses that want to know how consumers feel about their products or services. Web scraping has increased drastically over the last few years. In 2013, web scraping made up 23% of all online browsing traffic.

Companies, old and new, now have the opportunity to raise funds through a unique technique—crowdfunding. Although, this is a twist on the traditional investment model, crowdfunding allows companies and individuals to fund their new ideas and business ventures by seeking investments from the general public. This unconventional approach to the well-known investment structure allows new business to gain financial support. Do you have a new idea that you would like to fundraise? Are you a company that would like to launch a new product? Do you need financial support to help propel your latest venture? If so, then crowdfunding may help your entrepreneurial efforts.

What Is Crowdfunding?

Crowdfunding is the practice of fundraising a new company, idea, project, or venture through large numbers of people. These people typically donate small amounts that add up in the aggregate. Unlike the investment structure that appeals to traditional investors, the general public fundraises projects. Crowdfunding has begun to gain momentum and exposure after the passage of the Jumpstart Our Business Startups (“JOBS”) Act. This law was passed to help small businesses and entrepreneurs jumpstart their business. Both private and public companies may take advantage of this capital-raising model. Crowdfunding is unique because although it does allow for a company to use outside resources to fund a project, however, the company does not have to make an initial public offering, register as a public company, or meet the requirements of a traditional publicly-traded company. Also, unlike a public company, which receives outside investments on an on-going basis, crowdfunding efforts are limited in time. That is, they may not continue forever. An entity must raise its goal amount by a specified end date. Otherwise, the company must offer to return all investments made under that project.

Where you visit online seems to say a lot about you. Online privacy has been in the spotlight recently, as consumers come to terms with the reality that their online tracks define who they are to marketers and government agencies.  By studying this data, third parties can paint a picture about consumers—i.e., where they go, what they do, their preferences, and even any illegal conduct.  Now, data brokers can also compile and study large bodies of data to find patterns in behavior. While this carries huge potential for technological advancement, it also comes with greater threats to consumer privacy.

What Is Data Mining?

Data mining is the intricate process whereby data brokers collect, store, and study large sets of data for patterns.  The data includes everything from shopping habits, healthcare records, online practices, and public records (e.g., court and property records). This data is then used in a variety of fields, including intelligence gathering, statistics, database systems, and machine learning. Usually, data mining is used to compile lists for targeted marketing purposes—such as lists of diabetics, smokers, and political affiliations. However, recent reports indicate that data mining has been used to compile more personal lists—rape victims, addicts, and AIDS victims. The U.S. government has used data mining in various surveillance projects. These projects were ultimately terminated because of rising concerns that they violate the Fourth Amendment protection against unreasonable searches and seizures. It is most shocking that the subjects never know they are victims to data mining. At a glance, most of these categories seem harmless. However, the underlying threat is that data brokers conduct mining projects without notifying consumers and without obtaining consent.

In recent years, consumers have received numerous emails from merchants, all trying to sell a service or a product. While marketing and commercial activity is central to the American economy, the recipients of these emails must also enjoy their privacy. In an effort to protect against these disruptive emails, the California Legislature passed anti-spam laws in order to regulate commercial email activity. In addition, a recent district court opinion further clarified the types of emails that are implicated by these statutory standards.

What Are California’s Anti-Spam Laws?

In general, California’s anti-spam laws are codified under Business & Professions Code sections 17529 et seq. First, commercial email advertisements must come from a domain name registered to the sender. Commercial email advertisements include any email sent for the specific purpose of selling or advertising a product or service. The purpose of these laws is to limit promotional emails with false or misleading subject information. These laws apply to any U.S.-based company that sends emails to California consumers. It does not matter whether the sender is located in California. In fact, it may not even matter whether the sender knew the recipient was in California. Furthermore, California’s anti-spam laws provide a greater degree of protection than their federal equivalent—i.e., Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003 (“CAN-SPAM”). For example, CAN-SPAM requires that each email contain an “opt-out” option that allows consumers to quickly unsubscribe from future emails. The sender must comply with such a request within ten business days. In California, there are no such requirements. Indeed, the recipient can collect these emails and sue the sender for up to $1,000 per email.  So, the charges can quickly add up. If the sender of commercial emails is faced with a lawsuit, it bears the burden of proving that it was in compliance with both the state and federal standards.

On July 11, 2014, the privacy watchdog, Electronic Privacy Information Center (“EPIC”) filed a formal complaint with the Federal Trade Commission (“FTC”) against Facebook. EPIC alleged that Facebook broke the law by secretly monitoring users’ emotions in response to news feeds. The complaint explains that Facebook deceived users through its psychological experiment because the users did not give prior consent to participate in the experiment and they were not aware that an experiment was taking place. EPIC stated that this could also be a violation of the guidelines for experiments involving humans. In a world where social media and online presence dominate interaction, such social experiments threaten to undermine privacy and expose the most personal information to marketing and commercial techniques.

What Was the Nature of Facebook’s Experiments?

Facebook conducted surveys to determine whether seeing positive or negative updates in news feeds impacted users’ emotions and altered their browsing tendencies. It controlled the newsfeed of nearly 700,000 members to study whether positive and negative news reports impacted online behavior. The findings from this study were reported in the Proceedings of the National Academy of Sciences. The issue underlying the EPIC complaint arose because Facebook did not warn users in their Data Use Policy that it would be using their data for research purposes. Other agencies have also threatened to take action against Facebook. The Center for Digital Democracy and regulators in the United Kingdom have stated an intent to file complaints. Indeed, the United Kingdom’s Information Commissioner’s Office intends to address its concerns with Facebook after it reviews the study and its findings. Facebook responded to these allegations by explaining that all users consent to this type of research when they sign up. Representatives did apologize to the public for the misunderstanding.

The smartphone has brought a world of possibility to the average consumer’s fingertips. Now, this has come to include mobile banking. With fast-paced lifestyles and long lines at the banks, mobile banking has emerged as a thrilling convenience. However, this convenience brings cybersecurity concerns. Therefore, consumers who have turned to mobile banking for their financial needs must protect their financial privacy from cybersecurity breaches.

What Is Mobile Banking?

Mobile banking allows customers to access their financial institutions and conduct transactions through their mobile devices. Initially, this began with SMS Banking, which allowed customers to conduct various financial transactions by sending and accepting SMS messages or “texts.” In its most basic form, mobile banking allows customers to access their bank accounts and check on financial transactions. However, as the systems have progressed, customers can now make bill payments, transfer funds, and monitor deposits. Indeed, customers can now manage their investment portfolios and rearrange their investments through a smartphone or tablet. This has certainly increased everyday conveniences. However, it has also contributed to the speed with which finances can shift. Although, customers can review and monitor their accounts faster and more regularly, this also means greater security threats for the underlying financial information. This expansive access may lead to greater unauthorized breaches.

In a decision released June 25, 2014, the United States Supreme Court held that law enforcement officials could not search a suspect’s cell phone or electronic devices as part of an arrest. In Riley v. California, the Supreme Court maintained that the officials would need to secure a warrant to look through those devices. This holding is especially monumental because it establishes the country’s highest court’s position that electronic devices enjoy privacy protection under the Constitution. Indeed, the Court notes several times throughout the decision that since electronic devices contain so much of users’ most private data, these devices must enjoy a heightened level of privacy.

At the Law Offices of Salar Atrizadeh, we are fully knowledgeable and experienced in the practice of electronic privacy protection for individuals and businesses. Our office handles all civil matters dealing with violations of cyber privacy. Indeed, by speaking to an attorney, you can take precautionary steps to help protect your privacy and personal data.

How Will Riley v. California Impact Individual Privacy Rights?

The European community has been making great strides to establish and protect individual privacy in the globalized cyber community. On May 13, 2014, the European Court of Justice (“ECJ”) issued a decision that European Union (“EU”) citizens had a right to ask search engines to remove search results about themselves.  The ECJ defined this as a “right to be forgotten.”  Google, which is upset about this holding, has set up a form for users to request information removal. American counterparts, and officials within Google, have expressed concern about the implications of this ruling—both for the search engine and the threat to the flow of information.  Ultimately, the ECJ has established that the right to privacy supersedes the right to information.

What Are the Terms of the 2014 Ruling?

In issuing the decision, the ECJ was enforcing a 1995 EU directive on privacy that defines and regulates search engines as data collectors. European regulators have historically been more concerned with personal privacy than the United States. Accordingly, European government agencies have taken greater steps to enforce protections. Both the EU and members states have adopted provisions to protect privacy and family life. For instance, in 2010, the European Commission declared the right to be forgotten as a foundational aspect of its Data Protection Regulation.

Early in 2012, the European Commission proposed a reformation of the European Union’s data protection rules.  The European Commission sought to strengthen online privacy rights and improve Europe’s digital economy. The European Commission pointed to expansive globalization and different levels of implementation by the EU’s 27 member states as reasons to seek uniform online privacy rights. Indeed, each member state has different standards of enforcement for the rules. This leads to expensive administrative costs in maintaining and continuing to implement the different standards. The European Commission predicated that a uniform law across the European Union would lead to savings of approximately 2.3 billion Euros a year. In addition, with a clearer set of regulations to govern data protection, the European Commission hoped to instill more confidence in consumers in online services, leading to a growth in jobs and innovations.

What Were the Terms of the 1995 Data Protection Directive?

The 1995 Data Protection Directive was adopted to regulate the processing of personal data among European Union member states. This Directive has a broad definition for “personal data,” including “any information relating to an identified or identifiable natural person.” Also, the standards within the Directive apply only if the entity controlling personal data is established within the European Union or uses equipment located therein. The standards prohibit the processing of personal data without transparency of purpose, a legitimate purpose, and proportionality. In terms of the requirement for proportionality, a controller can process personal data only to an extent necessary to its purpose—it cannot store that data for a potential future purpose.  However, the 1995 Directive fails to take into account the implications of social networks and cloud computing on online privacy.