The European Parliament has approved a report recommending that the European Commission introduces new legislation to combat misleading and aggressive advertising. Although the Unfair Commercial Practices Directive already regulates this area, the Juvin Report highlights the danger of the growth of new, more pervasive forms of advertising being used on the internet.
Though there is no explicit mention of Google Inc, it is obvious that the proposals target some of the services offered by the internet giant. With a clear reference to Google’s AdWords service, the Report calls on the Commission to condemn the practice of allowing companies to bid for keywords associated with brand names in search engines. When an internet user enters a purchased keyword into a search engine, that company’s advertisement is displayed alongside the ‘natural’ search results. Since 2000, when AdWords was first released, Google has faced countless lawsuits in the US and across the EU over its service. Despite claims that selling brand names as keywords encourages acts of parasitism and counterfeiting, the European Court of Justice has upheld the practice as lawful so long as the associated ads do not mislead the user as to the identity of the advertiser. The Report proposes that keywords associated with registered trademarks should only be available if the owner of the trademark authorises such use of the brand in question.
Targeted advertising is also flagged up as an unfair advertising practice. With significant implications for Google’s Gmail service, the Report recommends the complete prohibition of third parties reading private emails for advertising purposes. It is suggested that such practices are intrusive and constitute an attack on the privacy of individual consumers. Besides Google, websites such as Trip Advisor could also come under fire if the proposals are taken up. The Report warns of the danger of ‘hidden advertising’ which takes place in forums where consumers post comments to one another about various goods or services. It recommends the creation of forum moderators, and suggests running a campaign to alert consumers about this form of advertising.
The Report is scheduled for a full vote in December.
Further reading
Read the Juvin Report
Internal Market and Consumer Protection Committee press release
By Katey Dixon
- Follow Forde Campbell on Twitter
Tuesday, 16 November 2010
Friday, 15 October 2010
Nominet orders ‘ihateryanair.co.uk’ to be handed over to the airline
Internet registry, Nominet has held that the privately owned website, ‘Ihateryanair.co.uk’ takes unfair advantage of the airline’s trademark, and should therefore be handed over to them. The website was set up in 2007 by Robert Tyler- a dissatisfied Ryanair customer. Its primary purpose was to create a forum for people to share their negative experiences of flying with the no-frills airline.
Ryanair complained to Nominet that Tyler’s use of their Community trademark in his website’s domain name constituted ‘abusive registration’. Although the judgment found in favour of Ryanair, expert Jane Seager clearly emphasised the importance of the continued existence of criticism websites, such as Tyler’s, in a democratic society. Nominet’s finding was not determined by Tyler’s use of a trademarked word for his domain name, but rather turned on the fact that he had received an income from the commercial links included on the site. Although the amount was insubstantial (£322), and despite the fact that making a profit was evidently not Tyler’s primary intention behind the site, Nominet concluded that using the trademark almost certainly increased the level of traffic to the website, and therefore constituted abusive registration. It was irrelevant that the domain name in its entirety made it clear that the website was not affiliated with the airline.
Nominet controls domain names with the co.uk ending. Its Dispute Resolution Service assesses registered websites in light of its policy of use, rather than undertaking an examination into legal issues. Wings clipped, but undeterred, Tyler has moved his website into the .org domain.
By Katey Dixon
Further Reading:
http://www.nic.uk/disputes/drs/decisions/decisionssearch/?searchText=i+hate+ryanair&x=0&y=0
http://www.guardian.co.uk/business/2010/oct/12/i-hate-ryanair-website-closed
Ryanair complained to Nominet that Tyler’s use of their Community trademark in his website’s domain name constituted ‘abusive registration’. Although the judgment found in favour of Ryanair, expert Jane Seager clearly emphasised the importance of the continued existence of criticism websites, such as Tyler’s, in a democratic society. Nominet’s finding was not determined by Tyler’s use of a trademarked word for his domain name, but rather turned on the fact that he had received an income from the commercial links included on the site. Although the amount was insubstantial (£322), and despite the fact that making a profit was evidently not Tyler’s primary intention behind the site, Nominet concluded that using the trademark almost certainly increased the level of traffic to the website, and therefore constituted abusive registration. It was irrelevant that the domain name in its entirety made it clear that the website was not affiliated with the airline.
Nominet controls domain names with the co.uk ending. Its Dispute Resolution Service assesses registered websites in light of its policy of use, rather than undertaking an examination into legal issues. Wings clipped, but undeterred, Tyler has moved his website into the .org domain.
By Katey Dixon
Further Reading:
http://www.nic.uk/disputes/drs/decisions/decisionssearch/?searchText=i+hate+ryanair&x=0&y=0
http://www.guardian.co.uk/business/2010/oct/12/i-hate-ryanair-website-closed
Monday, 4 October 2010
UK to be tried by European Court for Failing to Implement Data Protection Rules
The European Commission has commenced ‘infringement proceedings’ against the UK government, alleging it has breached EU data protection laws. The decision follows a year-long investigation into whether UK law provides sufficient safeguards against the interception and surveillance of internet traffic.
Concerns were initially raised when the EC received complaints from citizens about a British telecom firm’s use of behavioural advertising. In 2006-2007, BT tested behavioural advertising technology on its broadband users, without the consent of the customers involved in the trial. The advertising system, known as Webwise, was invented by Phorm – a US-based company which specialises in advertising software. Once an ISP has signed up to the service, Webwise is able to ‘trawl’ sites visited by its users in order to build up a profile of the users’ interests and habits. The information can be exploited by advertisers who are then able to target customers on the sites they visit thereafter. What sets Phorm’s technology apart from other behavioural advertising systems, is that it works in conjunction with ISPs, rather than simply relying on data shared between associated websites. Although BT later rejected the technology, and no other UK ISPs are known to have used it since, the UK government failed to give a satisfactory verdict on the legality of the BT trials. It did, however, conclude that the technology itself is legal so long as users have actively given their consent, and web-sites can easily opt out of the system.
Having considered the situation in the UK, the Commission concluded that data protection in the UK is not sufficiently robust to fulfil its obligations under the e-Privacy Directive 2002/58/EC and the Data Protection Directive 95/46/EC. The Commission identified three areas of potential infringement:
(1) The UK has failed to establish an independent national authority to supervise the interception of internet communications.
(2) Current UK law authorises the interception of communications, not only where the persons involved have given their consent, but also where the person intercepting has “reasonable grounds” for believing that consent has been given.
(3) Current UK law only provides sanctions where unlawful interception is “intentional”.
If the Court finds in favour of the Commission, the UK will be obliged to implement the measures necessary to comply with the judgment. If the UK subsequently fails to take the steps required, a financial sanction will be imposed by the Court.
For further reading:
Europa
BBC
The Guardian
By Katey Dixon
Concerns were initially raised when the EC received complaints from citizens about a British telecom firm’s use of behavioural advertising. In 2006-2007, BT tested behavioural advertising technology on its broadband users, without the consent of the customers involved in the trial. The advertising system, known as Webwise, was invented by Phorm – a US-based company which specialises in advertising software. Once an ISP has signed up to the service, Webwise is able to ‘trawl’ sites visited by its users in order to build up a profile of the users’ interests and habits. The information can be exploited by advertisers who are then able to target customers on the sites they visit thereafter. What sets Phorm’s technology apart from other behavioural advertising systems, is that it works in conjunction with ISPs, rather than simply relying on data shared between associated websites. Although BT later rejected the technology, and no other UK ISPs are known to have used it since, the UK government failed to give a satisfactory verdict on the legality of the BT trials. It did, however, conclude that the technology itself is legal so long as users have actively given their consent, and web-sites can easily opt out of the system.
Having considered the situation in the UK, the Commission concluded that data protection in the UK is not sufficiently robust to fulfil its obligations under the e-Privacy Directive 2002/58/EC and the Data Protection Directive 95/46/EC. The Commission identified three areas of potential infringement:
(1) The UK has failed to establish an independent national authority to supervise the interception of internet communications.
(2) Current UK law authorises the interception of communications, not only where the persons involved have given their consent, but also where the person intercepting has “reasonable grounds” for believing that consent has been given.
(3) Current UK law only provides sanctions where unlawful interception is “intentional”.
If the Court finds in favour of the Commission, the UK will be obliged to implement the measures necessary to comply with the judgment. If the UK subsequently fails to take the steps required, a financial sanction will be imposed by the Court.
For further reading:
Europa
BBC
The Guardian
By Katey Dixon
Tuesday, 28 September 2010
ACS Law, Party Babes and the Information Commissioner: Here’s What’s Happening
ACS Law is a London based law firm specializing in file-sharing infringement cases. The firm’s practice includes acting for copyright holders, whom the firm advises on legal action against individuals allegedly guilty of unlicensed file sharing.
ACS Claim Process
Typically, the story begins with an individual receiving a letter from ACS Law alleging that a file (usually pornographic, the cases we have seen refer to “Party Babes”) belonging to ACS’ client has been illegally downloaded. ACS’ letter states that ACS has used a court order to oblige the relevant ISP to reveal the IP address to which the file was downloaded. The letter then identifies the individual as the owner of the IP address, claims that the owner has infringed ACS Law’s client’s copyright and points out the legal consequences. Letters that we have seen and advised upon contain a settlement offer, whereby in return for a sum (typically around £495) ACS’ client will drop the claim.
ACS has allegedly sent claim letters to thousands of people. Concerns have been raised that many individuals may be mistakenly accused, particularly given the fact that ACS’ case typically relies on identifying an individual via an IP address. An IP address may be used by someone other than the individual to whom the IP address relates, either by someone using the individual’s computer, or by third party access to the IP address via an unsecured wifi connection or a virus. Websites have been set up to offer assistance to genuinely innocent individuals, such as http://beingthreatened.yolasite.com/.
Concerns have grown into outcry on numerous sites and forums, with ACS Law apparently being scrutinized by the Solicitors Regulation Authority. Concerns turned into a full blown attack on ACS Law when hackers obtained details from ACS’ website of over 5,300 individuals the firm was pursuing for unlicensed filesharing.
Data Breach
The disclosure of the details of the individuals’ data, if it contained personal data, would potentially be a breach by ACS of UK data protection legislation: the Seventh Principle of the Data Protection Act 1998 requires that “appropriate technical and organizational measures shall be taken against unauthorized or unlawful processing of personal data”.
The UK’s data protection watchdog, the Information Commissioner, has already expressed his concern about the situation (see interview here), and will want to establish whether ACS had put in place appropriate measures to prevent such disclosure. The Information Commissioner has the power to fine any organisation who breaches the data protection laws up to £500,000. The gravity of this situation, including in particular details of pornography allegedly downloaded by the individuals whose data has been disclosed, means that the ICO will take a particular interest in this case.
Defence
Ultimately, ACS may rely on an argument that the law firm had done everything appropriate and that even the best IT defence can’t protect against a determined hacker. This would be ironic, since many of the denials received by ACS from alleged file infringers rely on exactly the same defence.
By Rory Campbell
ACS Claim Process
Typically, the story begins with an individual receiving a letter from ACS Law alleging that a file (usually pornographic, the cases we have seen refer to “Party Babes”) belonging to ACS’ client has been illegally downloaded. ACS’ letter states that ACS has used a court order to oblige the relevant ISP to reveal the IP address to which the file was downloaded. The letter then identifies the individual as the owner of the IP address, claims that the owner has infringed ACS Law’s client’s copyright and points out the legal consequences. Letters that we have seen and advised upon contain a settlement offer, whereby in return for a sum (typically around £495) ACS’ client will drop the claim.
ACS has allegedly sent claim letters to thousands of people. Concerns have been raised that many individuals may be mistakenly accused, particularly given the fact that ACS’ case typically relies on identifying an individual via an IP address. An IP address may be used by someone other than the individual to whom the IP address relates, either by someone using the individual’s computer, or by third party access to the IP address via an unsecured wifi connection or a virus. Websites have been set up to offer assistance to genuinely innocent individuals, such as http://beingthreatened.yolasite.com/.
Concerns have grown into outcry on numerous sites and forums, with ACS Law apparently being scrutinized by the Solicitors Regulation Authority. Concerns turned into a full blown attack on ACS Law when hackers obtained details from ACS’ website of over 5,300 individuals the firm was pursuing for unlicensed filesharing.
Data Breach
The disclosure of the details of the individuals’ data, if it contained personal data, would potentially be a breach by ACS of UK data protection legislation: the Seventh Principle of the Data Protection Act 1998 requires that “appropriate technical and organizational measures shall be taken against unauthorized or unlawful processing of personal data”.
The UK’s data protection watchdog, the Information Commissioner, has already expressed his concern about the situation (see interview here), and will want to establish whether ACS had put in place appropriate measures to prevent such disclosure. The Information Commissioner has the power to fine any organisation who breaches the data protection laws up to £500,000. The gravity of this situation, including in particular details of pornography allegedly downloaded by the individuals whose data has been disclosed, means that the ICO will take a particular interest in this case.
Defence
Ultimately, ACS may rely on an argument that the law firm had done everything appropriate and that even the best IT defence can’t protect against a determined hacker. This would be ironic, since many of the denials received by ACS from alleged file infringers rely on exactly the same defence.
By Rory Campbell
Thursday, 2 September 2010
Germany's Facebook Ban
Last week a draft bill was backed by the German government limiting the use of Facebook by employers when hiring new staff. The proposed legislation will still allow employers to consult other social websites that make job information and networking public, such as LinkedIn or Xing. However, if an employer was to “befriend” an employee or hack into their account to access private data, with the intention to use the information against them, the employer could expect a fine of up to €300,000.
This development comes off the back of a number of workplace scandals that have recently surfaced. Deutsche Telekom (telecommunications company), Deutsche Bahn (national railway) and Lidl (retailer) are amongst the highest profile employers involved. The bill still faces a final debate and vote in parliament but is speculated to become law as early as this year.
One issue envisaged with the new proposed law is the difficulty in enforcing it. For example, it will be difficult for any employee to prove that personal information from their page on any private social network has made its way into hiring files.
The bill marks the increasing growth of German government control of data privacy. The same bill plans to restrict the use of video recording employees in places where they are not made aware of such use, despite arguments from opponents claiming that the proposal will affect anti-theft measures and employee corruption.
Separately, the German Data Protection Authority is investigating Google Street View for issues of privacy and allegations of collecting unencrypted wifi data. Google have said that this was a mistake and have stopped this process. Google have also introduced tools for German residents to opt out of their property being displayed on the street image software. Meanwhile, German authorities are also testing Apple on their data collection policies for devices like the iPhone.
The proposed bill for Germany seems to be welcomed amongst politicians. Up until now there has been no such legislation regulating social networking websites in this way. It is hoped that it will provide future guidance for courts in the growing number of cases involving networks such as Facebook. It is unknown at this stage whether the UK is soon to follow in Germany's legislative steps.
This blog was largely contributed by Nicola Mallon, whose copyright and moral rights in the blog are asserted. Many thanks to Nicola from everybody at Forde Campbell.
This development comes off the back of a number of workplace scandals that have recently surfaced. Deutsche Telekom (telecommunications company), Deutsche Bahn (national railway) and Lidl (retailer) are amongst the highest profile employers involved. The bill still faces a final debate and vote in parliament but is speculated to become law as early as this year.
One issue envisaged with the new proposed law is the difficulty in enforcing it. For example, it will be difficult for any employee to prove that personal information from their page on any private social network has made its way into hiring files.
The bill marks the increasing growth of German government control of data privacy. The same bill plans to restrict the use of video recording employees in places where they are not made aware of such use, despite arguments from opponents claiming that the proposal will affect anti-theft measures and employee corruption.
Separately, the German Data Protection Authority is investigating Google Street View for issues of privacy and allegations of collecting unencrypted wifi data. Google have said that this was a mistake and have stopped this process. Google have also introduced tools for German residents to opt out of their property being displayed on the street image software. Meanwhile, German authorities are also testing Apple on their data collection policies for devices like the iPhone.
The proposed bill for Germany seems to be welcomed amongst politicians. Up until now there has been no such legislation regulating social networking websites in this way. It is hoped that it will provide future guidance for courts in the growing number of cases involving networks such as Facebook. It is unknown at this stage whether the UK is soon to follow in Germany's legislative steps.
This blog was largely contributed by Nicola Mallon, whose copyright and moral rights in the blog are asserted. Many thanks to Nicola from everybody at Forde Campbell.
Friday, 20 August 2010
Places You Can’t Escape Facebook
At Facebook HQ on 18th August, CEO Mark Zuckerberg launched the highly anticipated new app, ‘Places’.
Following the lead of rival applications, Foursquare and Gowalla, the social networking site now offers its own geolocation service. The application allows users to ‘check in’ to various locations, in order to let their friends know where they are in real-time. It is also possible to tag friends who have been spotted in the same location. Places updates will be broadcast on friends’ News Feeds, on the user’s Wall, and in the ‘activity stream’ for that location.
Michael Sharon, the product manager for Places states that the goal of the app is to take the virtual relationships created through Facebook into the physical world. However, the commercial advantages for local businesses are also clear. Real-time geolocation data would enable shops, restaurants, bars and clubs to send vouchers, prizes, or promotion deals to entice customers who are nearby.
With over 500 million users on the site, the application is certain to send Facebook deeper into the quagmire of privacy debates. Rainey Reitman, spokeswoman for the non-profit consumer advocacy organisation, Privacy Rights Clearinghouse warned, “Location data is tied to people’s safety – if people know where you are, they know where you’re not.” Under the privacy settings, it is possible to control whether others can see your location by unchecking the “include me in ‘People Here Now’ after I check in” option, and disabling the “Friends can check me into places” function. Under the default setting, check ins will automatically be published.
The app is currently only available for smartphones in the US, but plans are already underway to include other countries in the upcoming months.
Further reading:
http://www.facebook.com/places/
http://www.guardian.co.uk/technology/2010/aug/19/facebook-places-location-tool-unveiled
Following the lead of rival applications, Foursquare and Gowalla, the social networking site now offers its own geolocation service. The application allows users to ‘check in’ to various locations, in order to let their friends know where they are in real-time. It is also possible to tag friends who have been spotted in the same location. Places updates will be broadcast on friends’ News Feeds, on the user’s Wall, and in the ‘activity stream’ for that location.
Michael Sharon, the product manager for Places states that the goal of the app is to take the virtual relationships created through Facebook into the physical world. However, the commercial advantages for local businesses are also clear. Real-time geolocation data would enable shops, restaurants, bars and clubs to send vouchers, prizes, or promotion deals to entice customers who are nearby.
With over 500 million users on the site, the application is certain to send Facebook deeper into the quagmire of privacy debates. Rainey Reitman, spokeswoman for the non-profit consumer advocacy organisation, Privacy Rights Clearinghouse warned, “Location data is tied to people’s safety – if people know where you are, they know where you’re not.” Under the privacy settings, it is possible to control whether others can see your location by unchecking the “include me in ‘People Here Now’ after I check in” option, and disabling the “Friends can check me into places” function. Under the default setting, check ins will automatically be published.
The app is currently only available for smartphones in the US, but plans are already underway to include other countries in the upcoming months.
Further reading:
http://www.facebook.com/places/
http://www.guardian.co.uk/technology/2010/aug/19/facebook-places-location-tool-unveiled
Monday, 16 August 2010
ASA throws CAP at asterisked profanities
The Advertising Standards Agency (ASA) last week ruled that an expletive in an advert could still be considered offensive even if it was partly obscured by asterisks. The judgment came in response to two complaints made over The Fuel Agency Ltd’s direct mailing campaign. The marketing agency sent out 1000 valentine’s cards reading “I F**CKING LOVE YOU” on the front. Inside the card was the phrase “…You might f**king love us”. The Fuel Agency Ltd argued that it was commonly accepted that an expletive masked by asterisks does not cause offence.
Dismissing this viewpoint, the ASA Council adjudicating considered that it breached the decency clause in the Committee of Advertising Practice (CAP) Code. Clause 5.1 states that “Marketing communications should contain nothing that is likely to cause serious or widespread offence.” It stipulates that “Compliance with the Code will be judged on the context, medium, audience, product and prevailing standards of decency.” The Council held that although the swear words were partially obscured, the meaning was still clear. It considered persuasive the fact that the ad was positioned on the front cover of untargeted direct mail, and noted that use of the expletives was gratuitous as it was unrelated to the product being advertised.
The consequence of the Council’s finding means that the offending ad must not appear again in its current form. The Fuel Agency Ltd is also under caution to ensure that future ads do not cause serious or widespread offence.
Further Reading
http://asa.org.uk/Complaints-and-ASA-action/Adjudications/2010/8/The-Fuel-Agency-Ltd/TF_ADJ_48884.aspx
Dismissing this viewpoint, the ASA Council adjudicating considered that it breached the decency clause in the Committee of Advertising Practice (CAP) Code. Clause 5.1 states that “Marketing communications should contain nothing that is likely to cause serious or widespread offence.” It stipulates that “Compliance with the Code will be judged on the context, medium, audience, product and prevailing standards of decency.” The Council held that although the swear words were partially obscured, the meaning was still clear. It considered persuasive the fact that the ad was positioned on the front cover of untargeted direct mail, and noted that use of the expletives was gratuitous as it was unrelated to the product being advertised.
The consequence of the Council’s finding means that the offending ad must not appear again in its current form. The Fuel Agency Ltd is also under caution to ensure that future ads do not cause serious or widespread offence.
Further Reading
http://asa.org.uk/Complaints-and-ASA-action/Adjudications/2010/8/The-Fuel-Agency-Ltd/TF_ADJ_48884.aspx
Subscribe to:
Posts (Atom)
