Articles Posted in Technology

The Electronic Communications Privacy Act of 1986 (“ECPA”) prohibits disclosure of stored communications without a court order. This includes instant messages, emails, and communications on Facebook. The issues that can arise from such a standard came to light in 2005, when Loren Williams died in a motorcycle accident in Arizona, and his mother attempted to access his Facebook account in the hopes of feeling closer to her son. However, according to the ECPA, Loren’s mother did not have the authority to access her son’s Facebook account. Loren’s mother eventually sued Facebook in 2007 and a court granted an order allowing her to access his Facebook account. Facebook has revised its policy, allowing relatives to report a death online, at which time, Facebook allows restricted access to an account for friends and relatives.

However, Facebook was merely abiding by the terms and conditions that Loren had agreed to when he signed up for his Facebook account. Under these terms, the “assets” that fell under the license agreement become subject to licensing rules. Accordingly, a license expires when the license owner dies. The rights to that license and those assets do not automatically transfer to the next of kin or to the decedent’s estate upon death. Many states throughout America are in the midst of considering legislation that would allow access to online accounts after death. However, any law in this field is still in its early stages.

In light of these legal circumstances, family members file lawsuits against email servers to gain access to emails after the owner of the account dies. In some cases, the courts have allowed the servers to release the emails as raw data to family members, but courts rarely allow access to accounts. To avoid costly litigation in order to gain access to such accounts, individuals could begin incorporating social media account access and the respective passwords in their wills. Alternatively, individuals could create accounts under a trust to ensure that other members of the trust can access the account in the event that one member passes away. This issue is especially impactful in light of all the other tasks that people are able to conduct online. For example, many people manage their banking online by and through the bank’s website.

The Americans with Disabilities Act (“ADA”) requires public businesses to provide equal access to their venues for persons with disabilities. Under Subchapter III of the ADA, such public establishments include, among others, restaurants, movie theaters, stores, and places of education. Now, the increases in businesses that operate exclusively online, without a physical location, call the reach of the ADA into dispute.

In June 2012, the United States District Court for the District of Massachusetts decided this issue of first impression in National Association of the Deaf v. Netflix, Inc. The court held that the ADA applies to businesses that operate exclusively on the Internet. The National Association of the Deaf sued Netflix, Inc., arguing that by failing to provide closed captioning for all of its content, Netflix was in violation of the ADA. Netflix, Inc. argued that it was not required to provide disability access to its site because it was not a “place of public accommodation” within the meaning of the ADA. The court based its opinion on the public policy underlying the ADA, which aims to provide equal access to public amenities for persons with disabilities. With the exponential rise in online businesses, the court found that it was within this public policy to allow persons with disabilities to access these sites alongside other members of society. One month later, the United States District Court for the Northern District of California reached the opposite conclusion in Cullen v. Netflix, Inc. In this case, the court looked to its prior decisions and held that the ADA’s reach is limited to public establishments with “physical structures.” These two opposite holdings show that the nature and reach of the ADA, as it pertains to online businesses, has not been solidified yet.

The Department of Justice has reviewed the ADA and provided regulations and guidelines for accessible website designs. For example, business can make their sites accessible to persons with disabilities by adopting a simple page layout throughout the site. This makes it especially easier for visitors with visual impairments to locate information quickly and easily. Websites may also provide transcriptions for any video or audio on the site for visitors with hearing impairments. Finally, websites may improve accessibility for persons with disabilities by inviting such visitors to notify website managers of ways to improve site accessibility. Nonetheless, in the absence of a binding uniform standard for website access, the reach of the ADA towards online businesses is still very much in the hands of courts in their individual jurisdictions.

The possibility of identity theft is a growing concern. However, banks, credit card companies, and various other institutions that house private information regularly take steps to protect customers’ identities. Nonetheless, a different type of identity theft continues to thrive. Online impersonation is a quick and easy form of identity theft that takes place over the Internet. It is an easy type of identity theft given the breadth and convenience of social media and expanding networking sites. However, in light of the Sandy Hook Elementary School incident, state and federal authorities are considering the possibility of bringing criminal charges for online impersonation.

State legislatures called for laws against online impersonation following the case of Megan Meier, a 13-year-old girl who killed herself after a woman impersonated a boy and engaged in cyberbullying. After the Sandy Hook shooting, people began posting incorrect information about the shooting and the suspect. Others began posing as the shooter and staging crime scenes similar to the shooting. Connecticut State Police Lieutenant J. Paul Vance called attention to this matter in a public press conference. He noted that these posts, in addition to being highly inappropriate, were also threatening and criminal in nature.

A spokesman for Commissioner Reuben Bradford stated that, harassing anyone who was a victim of the shooting would be criminally prosecuted. He noted that harassment would not only include in person contact, but also harassment through via the Internet and social media sites. Charges could include criminal impersonation and criminal misrepresentation. California and several other states have established online impersonation as a criminal offense. Critics argue that criminal regulations that prohibit online impersonation may arm interest groups with the power to suppress speech. For example, Electronic Frontier Foundation argues that such laws could silence groups like The Yes Men, which utilizes online impersonation as a form of commentary on the government and large corporations.

Bullying has plagued people of all ages for many generations. Now, with the expansion of the Internet, bullies are able to threaten and harass people at an even greater level through cyberbullying. Stopbullying.gov, a government supported website aimed at spreading awareness, defines cyberbullying as any bullying that involves electronic technology such as computers and cell phones. Instances of cyberbullying aimed towards adults are generally referred to as cyber-harassment or cyber-stalking, whereas cyberbullying generally refers to harassment directed towards children.

Since cyberbullying can largely remain anonymous, it can be very difficult to trace the harassment back to a specific user. The effects of cyberbullying also last longer because the inappropriate posts or messages may be difficult to delete and therefore, have a permanent presence on the Internet. Cyberbullying is also not reserved to the Internet, since cyber-bullies often also target their victims in person. However, due to the expansive nature of the Internet, victims face cyberbullying at all times of the day.

Examples of this harassment includes sending vulgar or threatening messages directly to another person, posting inappropriate information about another person online, pretending to be another person online with the intent of ruining a reputation, posting inappropriate pictures of another person online, harassing another person with a multitude of text messages, or hacking into another person’s online account. Cyberbullying can take place through email, in online chatrooms, on webpages, or through text messages. Advanced features on social networking sites have also led to increased avenues for cyberbullying. For example, the ability to tag other people in a picture on Facebook has led to instances of cyber-bullies posting inappropriate pictures of other people and tagging them in these pictures.

Cloud computing offers a revolutionary new way to conduct business over the Internet. This service is a form of cyber-outsourcing where virtual servers provide certain services or applications for consumers online. Cloud computing vendors include, IBM SmartCloud, Cisco Cloud Computing, Amazon Elastic Compute Cloud (aka Amazon EC2), and various smaller vendors. These providers offer a range of services including storage services and spam filtering.

There are various forms of cloud computing available over the Internet. Managed Service Providers (“MSPs”) are the oldest form of cloud computing. A “managed service” is an application such as virus scanning for email or anti-spam services. The most common form of cloud computing is through Software as a Service (“SaaS”), which delivers an application to multiple customers through a browser using a multi-tenant architecture. Customers benefit because they do not have to invest in servers or purchase software licenses. Providers benefit because they are able to reduce costs because they only need maintain one application for their multiple customers. Salesforce.com is a well-known example of SaaS cloud computing, but Google Cloud Storage is a fast growing option as well.

Similar to SaaS computing, some providers offer Application Programming Interfaces (“APIs”), which allow developers to offer certain functions over the Internet without having to offer entire applications. These functionalities range from specific business services to wider-ranging APIs, such as Google Maps. Another version of SaaS computing allows users to develop their own application and offer the application through a provider’s infrastructure over the Internet. The developers are limited by the provider’s capabilities, but the developers benefit from the established predictability. Google App Engine is an example of such cloud computing.

Former CIA Director David Petraeus from his position after the FBI looked through Petraeus’ private Gmail account and discovered that he was having an extramarital affair. These events have brought to light the fragile state of individual privacy on the Internet, particularly in relation to individual email accounts.

According to the Electronic Communications Privacy Act of 1986 (“ECPA”), which is current and applicable cyber law, the FBI has the authority to look through any email account simply by accessing the account through providers such as Yahoo or Gmail. Under the ECPA, law enforcement agencies do not need a search warrant to look through such accounts if the message is more than 180 days old.

In addition, the Foreign Intelligence Surveillance Act of 1978 (“FISA”), under Title 50, sections 1801 et seq. of the United States Code, allows the government to monitor communications between foreign parties, without a search warrant. A 2008 amendment to FISA further allows the government to monitor communications between American parties if the government does not know of the parties’ exact locations or identities. A group of attorneys raised a constitutional challenge to this amendment, and the matter is now before the United States Supreme Court. The justices have focused on whether the amendment offers the government an inappropriate range of power, or whether the amendment simply expands the government’s resources to protect America.

Facebook is struggling to decide how to handle its pictures. While consumer companies urge Facebook to profit from its face recognition technology, international regulators insist that user identities remain protected. According to a New York Times article entitled, Facebook Can ID Face, But Using Them Grows Tricky, Facebook agreed to delete user identification information, which the site gathers through facial recognition technology. The technology at issue is Facebook’s “tag suggestion” which automatically matches names with faces when a user uploads a photo. Facebook has deactivated this feature to make improvements that international regulators can approve.

Chris Hoofnalge, a professor at the University of California Berkeley, School of Law stated in the article that increasing developments in this field “directly affects civil liberties.” Although, the public is more likely to accept using identifying information from facial recognition technology for security purposes, Wall Street is now pressuring Facebook to utilize its users’ personal data for profit. Legislators, such as Senator Al Franken, have expressed concern over Facebook’s “database of face prints,” which Facebook has gathered “without the explicit consent of its users.” Franken urged Facebook to provide the same right of privacy to its American users as it does its European counterparts.

The Federal Trade Commission (“FTC”) has issued a guide, “Facing Facts Best Practices for Common Uses of Facial Recognition Technologies,” aimed at defining facial recognition technology and outlining authorized uses. In addition, earlier this year Google announced a new tool that would allow individuals to blur their faces in YouTube videos. This is one of the first steps to provide “visual anonymity” in cyberspace.

The content of an online search result for an individual generates a profile of the individual. Such content paints a picture for potential employers and colleagues, and the information may not be ideal. Therefore, in order to protect your online reputation and your overall image, it is important to take certain steps to monitor your online content.

First, signing up for social networks like Facebook and LinkedIn allows you to control the content that a web search will produce. Personalized Facebook and LinkedIn pages show up as the first results of a Google online search. This controls the content that attaches to your online reputation.

Andy Beal, who co-authored Radically Transparent: Monitoring and Managing Reputations Online, suggests that people should monitor their online reputation the same way they monitor their credit. This helps catch defamatory online postings in time to prevent a damaging reputation from solidifying. Beal suggests setting up a news feed that notifies individuals when their name is mentioned in an online posting. Google provides this option through Google Alerts, which will accomplish this for full name searches.

The technological advancements and the ever-expansive world of cyberspace are in a perpetual state of conflict with individual privacy concerns. For example, a recent research project by the Massachusetts Institute of Technology demonstrates that independent component analysis allows companies to track changes in pulse by the subsequent change in skin color that is readily visible through a video signal. In addition, employers, credit agencies, and health insurance providers can now purchase indexes that contain consumer profiles based on individual consumer’s browsing history, site membership, and online purchases.

The Federal Trade Commission has issued a report that proposes the steps companies can take to ensure optimal protection of consumer privacy. The report, “Protecting Consumer Privacy in an Era of Rapid Change: Recommendations for Businesses and Policymakers,” urges companies to incorporate privacy protection in every stage of their products, provide a mechanism against online activity tracking, and fully disclose what user information it shares with other entities.

The California legislature has proposed a new bill that would impose new restrictions on social networking sites, which would limit the information available about users. The proposed legislation would allow users to select privacy settings before ever using the site, which limits the sites accessibility. Social Networking sites, such as Facebook, have responded that such legislation would inappropriately burden the sites, in turn devastating cyber-business in California.

The Federal Trade Commission (“FTC”) may be preparing to file an antitrust suit against Google for abusing its dominance as an Internet search engine to stifle competition from other search engines and arbitrarily increase advertisement costs.

The Sherman Antitrust Act, 15 U.S.C. §§ 1-7, which governs American antitrust law, makes direct and indirect “restraint of trade or commerce” illegal, both in interstate and foreign markets. The Clayton Antitrust Act, under 15 U.S.C. §§ 12-27, amended the Sherman Act in 1914 to include specific prohibited acts, such as price discrimination and mergers and acquisitions that substantially reduce competition. The Foreign Trade Antitrust Improvements Act, 15 U.S.C. § 6a, also limited the Sherman Act’s application to foreign trade only where “such conduct has a direct, substantial, and reasonably foreseeable effect” on “trade or commerce” within the United States.

The FTC investigation is rooted in accusations that Google engages in “preferencing,” which means that Google engineers searches to produce results that profit its own secondary services, while limiting search access to competing services. In addition, the investigation concerns whether Google favors advertisements from its own services against competing services.