Originally posted on TechCrunch:

The good folks at the new Beijing and San Francisco-based startup Landscape Mobile have launched Sight today, an app that makes it easier to organize articles on mobile devices.

Copying and pasting on mobile devices is a huge pain in the caboose, and Sight solves that problem by allowing users to take a screen shot of whatever they’re reading through the Sight app (available on iOS and Android), which then scours the web for the story and saves it to the app’s own clipboard.

The technology and talent behind Sight was persuasive enough for IDG Capital to sign on for a $1.85 million seed round.

“An image is the new URL on the mobile web,” says Landscape Mobile’s co-founder and chief executive Yue Zhuge. Yue, a former executive at Yahoo and Microsoft in Beijing and Silicon Valley, has a lot of experience with mobile advertising.

“Because of mobile devices, the…

View original 131 more words

Contracts for Interior Design Professionals

This crash course on legal contracts is designed for interior designers who are drafting a contract for the first time or wanting to make an existing one airtight.

There’s a reason you became a designer, and it probably didn’t have anything to do with lawyers and contracts.

You’re the expert in color, fabric, floor plans, and furniture schemes, not intellectual property and arbitration provisions. If you’re already confused, don’t fret. This crash course is designed for those drafting a contract for the first time or wanting to make an existing one airtight. Led by David Adler, an actual lawyer who understands the ins and outs of the design industry, this workshop will cover the clauses you need to protect yourself in the unfortunate event that something doesn’t work out as planned. Clients can be difficult enough. Don’t let legal trouble slow you down.

In this class, you will learn how to:

  • Define what you are doing for your client, as well as NOT doing for them
  • Make sure you get paid on time and in full
  • Protect yourself against outside factors that may affect cost and ability to complete a project
  • Give yourself a way to get out of your contract if things aren’t working

By the end of class, you will have:

  • A basic understanding of key contract terms and the reasons as to why they are there
  • A basic client agreement that you can use or customize

The Instructor, David Adler, is an attorney, nationally-recognized speaker, and founder of a boutique law practice focused on serving the needs of creative professionals in the areas of intellectual property, media, and entertainment law. He provides advice on choosing business structures, protecting creative concepts and ideas through copyright, trademark, related intellectual property laws and contracts, and structuring professional relationships. He has 17 years experience practicing law, including drafting and negotiating complex contracts and licenses with Fortune 500 companies, advising on securities laws (fundraising) and corporate governance, prosecuting and defending trademark applications, registrations, oppositions, and cancellations before the US Patent & Trademark Office (USPTO), and managing outside counsel. Currently recognized as an Illinois SuperLawyer® in the areas of Media and Entertainment Law, he was also a “Rising Star” for three years prior. He received his law degree from DePaul University College of Law in 1997 and a double BA in English and History from Indiana University in Bloomington, Indiana. Outside the practice of law, David is an Adjunct Professor of Music Law at DePaul College of Law, formerly chaired the Chicago Bar Association’s Media and Entertainment Law Committee, and is currently a member of the Illinois State Bar Association Intellectual Property Committee.

A recent case involving a Spanish lawyer and his lawsuit to remove information about decade old yet repaid debts from a widely-circulated Spanish newspaper and Google Internet search engine results, was a case of first impression for the European Court of Justice (ECJ), requiring the examination of the EU Privacy Directive in the context internet search engines.

Of note to U.S. companies are the ECJ’s discussions relating to the legal position of an Internet search engine service provider and the so-called “right to be forgotten,” e.g., the right to request that some or all search results related to the individual be removed. More specifically, the classification of Google’s search engine as a “Data Processor” has broad implications for digital business applications such as cloud services and web-based information.

By statute, the European Union (EU) protects the personal data of individuals and regulates both the processing and free movement of such data. Generally known as the EU Privacy Directive, this law applies to defined players called “Data Processors” and “Data Controllers.” A Data Controller is a legal person or any other entity that determines the purposes and means of the processing of “personal data.” A Data Processor is one who processes data on behalf of a Controller.

For companies doing business on the Internet, the ECJ’s decision has four key take-aways: 1) certain automated processes conducted over the Internet are inherently “data processing” subject to the Directive; 2) it is almost axiomatic that a service operator will also be a “controller” because the operator determines the purpose and method of processing the data; 3) a territorial nexus to an EU member state exists where the data processing is in relation other commercial activities that occur within or are directed at the member state; and 4) an individual has the right to request removal of links to information related to his name because the additional information has the potential to create a broader data profile affecting the subject’s privacy rights.

1. Certain Automated Processes Are Inherently “Data Processing”

The ECJ began its analysis by discussing the services offered by Google. The ECJ held that by searching automatically, constantly and systematically for information published on the Internet, by indexing, storing and retrieving those information records, by organizing the data in question, and storing it on servers and, ultimately, disclosing and making it available in the form of structured lists of results, Google is expressly and unconditionally a “Processor” of data, regardless of the fact that it conducts these activities without distinguishing personal data from other types of information, even under circumstances that exclusively concern material that has already been published as it stands in the media.

For U.S. companies the implication is clear. Whether providing or utilizing most, if not all, of today’s cloud-based digital business services, the acts of automatically searching, indexing, storing, organizing, retrieving, disclosing or otherwise making data available, makes such companies data processors subject to the Directive.

2. A Service Operator Will Almost Always Be A “Controller”

After determining that Google was a data processor, it was nearly a forgone conclusion that Google was also a “Processor” of data. According to the ECJ, Google is the controller since it determines the purposes and means of the processing. Without saying as much, the ECJ concluded that Google’s activity of locating, indexing, storing and retrieving information published by third-parties (e.g. original source web sites such as the newspaper) was in addition to that of publishers of web sites and, therefore, liable to affect the fundamental rights to privacy and to the protection of personal data. Google’s liability was derivative of the original publisher with the same responsibilities, powers and capabilities, to ensure compliance with the Directive.

3. Commercial Activities Directed At A Member State Create A Territorial Nexus

U.S. based companies would do well to note the territorial scope of the Directive since a U.S.-based company could be subject to the ECJ’s jurisdiction on questions of compliance with the Directive. With respect to the territorial scope, the ECJ stated that Google Spain – a subsidiary of Google Inc. – was located on Spanish territory and, therefore, an ‘establishment’ within the meaning of the Directive. Importantly, the ECJ explicitly rejected the argument that processing of personal data by Google Search is not carried out as part of the business activities conducted in Spain. According to the ECJ “data processed for the purposes of a search engine operated by an entity that has an establishment in a Member State [has] a nexus if [it conducts] other commercial activities within in the Member State.” For example, Google search engine results were connected to Google’s commercial activity of selling advertising to users located in Span.

4. An Individual Has The Right To Request Removal Of Personally-identifiable Links

One aspect of the judgment has gotten the most media coverage: “the right to be forgotten.” This stems largely from the fact that there is no U.S. equivalent. Given our broad freedom of speech and press, enshrined in the nation’s Constitution, the idea that one’s past can be ‘scrubbed’ is anathema to most U.S. citizens. Nevertheless, given the broad EU focus on protecting the privacy of the individual, the ECJ upheld an individual’s right to request removal of links to information related to the individual’s name on the theory that the additional information has the potential to create a broader data profile affecting the subject’s privacy rights. According to the Court the real risk is that an Internet user, who searches an individual’s name, can obtain other information concerning “a vast number of aspects” of his private life enabling Internet users to establish a detailed profile of the person. This “profiling effect is heightened since the Internet and search engines now make access to such information ubiquitous. Hence, Google is, in certain circumstances, obliged to remove links to web pages that are published by third parties and contain information relating to a person from the list of results displayed following a search made on the basis of that person’s name. The ECJ underscored that the obligation may also exist in a case where that name or information is not erased beforehand or simultaneously from those web pages, and even when its publication on those pages is lawful.

A Murky Future

Recognizing that the information sought may affect a legitimate interest in having access to that information, the ECJ cautioned in its holding that “a fair balance should be sought in particular between [the data subject’s privacy] interest and the data subject’s fundamental rights, in particular the right to privacy and the right to protection of personal data.” Unfortunately, the ECJ’s framework for achieving that balance was anything but clear: “the balance may … depend, in specific cases, on the nature of the information in question and its sensitivity for the data subject’s private life and on the interest of the public in having that information, an interest which may vary, in particular, according to the role played by the data subject in public life.” The touchstone inquiry appears to be an examination of whether “even initially lawful processing of accurate data may, over time, become incompatible … where the data appear to be inadequate, irrelevant or no longer relevant, or excessive in relation to the purposes for which they were processed and in the light of the time that has elapsed.” The ECJ gave no insight as to how or under what circumstances that would occur.

If you find this content useful or if you believe that your colleagues or other members of your network might find it useful please feel free to share thank you.

As more devices are connected, there is a real opportunity to enhance security. The DropCam Tab is a “connected device” that isn’t creepy.

Online marketing continues to evolve and affiliate marketing can be a great method of building brand awareness. Online marketers need to stay ahead of legal and regulatory compliance trends. This article looks at recent Federal Trade Commission (“FTC,” “Commission,” or “agency”) activity that impacts online marketing.

Given the lack of a comprehensive federal regulatory scheme, and the increasing awareness of deceptive marketing practices, it is not surprising that the FTC has ramped up enforcement efforts against entities not covered by existing, industry-specific federal regulations over the last decade. Notably, one company has defended itself against the FTC by challenging the FTC’s authority to pursue such broad enforcement.

Jurisdiction

The widely-watched case of FTC v. Wyndham Worldwide Corp is not just about Cybersecurity.

The Federal Trade Commission (FTC) has just won the first major round of its fight with Wyndham Hotels over data security. However, the importance of the case has more to do with the FTC’s jurisdiction, challenged when Wyndham moved to dismiss the FTC’s case. Affirming the FTC’s broad jurisdiction, the federal judge overseeing the controversy noted that the case highlights “a variety of thorny legal issues that Congress and the courts will continue to grapple with for the foreseeable future.”

Affiliate Marketing: A Roadmap for Compliance: Text Message Marketing

The Commission is cracking down on affiliate marketers that allegedly bombard consumers with unwanted text messages in an effort to steer these consumers towards deceptive websites falsely promising “free” gift cards.

For example, in eight different complaints filed in courts around the United States, the FTC charged 29 defendants with collectively sending more than 180 million unwanted text messages to consumers, many of whom had to pay for receiving the texts. The messages promised consumers free gifts or prizes, including gift cards worth $1,000 to major retailers such as Best Buy, Walmart and Target.

By now, many in the Affiliate Marketing industry are familiar with the Legacy Learning Systems case. In March, 2011 the FTC settled charges against Legacy — which sells instructional DVDs — that Legacy represented, directly or indirectly, expressly or by implication, reviews of their products were endorsements reflecting the opinions of ordinary consumers or independent reviewers, when many of the favorable endorsements were posted by affiliate marketers who received a commission from Legacy for sales they generated.

Regardless of the form of affiliate marketing – email campaigns or text message campaigns – there are a couple key take-aways here.

First, identify and disclose a material connection between a product user or endorser and any other party involved in promoting the product. A “material connection” is a relationship that affects the credibility of an endorsement and wouldn’t be reasonably expected by consumers. See our article about complying with the endorsement guides here.

Second, set up and maintain a system to monitor and review affiliates’ representations and disclosures to ensure compliance. For example, Legacy looked at its top 50 revenue-generating affiliates at least once a month, visiting their sites to review their representations and disclosures. It has to be done in a way designed not to disclose to the affiliates that they’re being monitored.

Third, understand he requirements for conducting legally-compliant text message marketing. The Telephone Consumer Protection Act (TCPA) makes it unlawful to make any call (other than a call made for emergency purposes or made with the prior express consent of the called party) using any automatic telephone dialing system or an artificial or prerecorded voice … to any telephone number assigned to a . . . cellular telephone service … or any service for which the called party is charged for the call. The prohibition on calls to cell phones applies to text messaging.

On March 24, 2104, the U.S. Copyright Office published its final rule establishing new copyright registration fees. The new fees will reflect  increased and decreased fees. Under the new fee structure, the fee for online registration of a standard claim will increase from $35 to $55. However, a new online registration option for single works by single authors that are not works made for hire has been introduced at a lower fee of $35. In addition to fees for registration, related services, and special services, this final rule establishes updated fees for FOIA-related services.

 

Privacy Law Update: California “Do Not Track” 

Two California laws went into effect at the beginning of the year that  require additional notifications to consumers.  The California Online Privacy Protection Act (“CalOPPA”) requires that web sites, mobile apps and other online services available to California residents (in reality anyone with a web site that may be accessed by a CA resident) post a privacy policy that gives notice to consumers regarding behavioral or interest-based advertising practices (“OBA”).

Disclosures must explain:
1. If a web site operator allows other parties to use tracking technologies in connection with the site or service to collect certain user data over time and across sites and services; and
2. How it responds to browser “do not track” signals or other mechanisms designed to give consumers choice as to the collection of certain of their data over time and across sites and services

In addition, the “California Shine the Light Act” requires that companies (except non-profits and businesses with less than 20 employees) collecting broadly defined personal information from California consumers on or offline either: (a) give consumers a choice as to the sharing of that information with third parties (including affiliates) for direct marketing purposes; or (b) provide notice of, and maintain, a method by which consumers can annually obtain information on the categories of information disclosed the names and addresses of the recipients of that data, and a description of the recipients’ business.

If an e-commerce service offers tangible goods or services, or vouchers for them, to California consumers, it must give certain notices to consumers, including how they can file a complaint with the CA Department of Consumer Affairs.

Are you  concerned about how to disclose how your service responds to “Do Not Track” signals or similar tools and settings, and whether third parties are permitted to collect personally identifiable information about consumer online activities over time and across different websites when a consumer uses that online service? We may be able to help. We can review your policies, your information gathering and sharing practices, and advise on whether there is room for improvement.

Please contact us for a no-fee consultation.

Follow

Get every new post delivered to your Inbox.

Join 3,111 other followers

%d bloggers like this: