Digital Millennium Copyright Act/DMCA
Subscribe to Digital Millennium Copyright Act/DMCA's Posts

Final Rule on DMCA Grants Circumvention Exemptions

On October 25, 2024, the Librarian of Congress Carla Hayden adopted a final rule granting exemptions to a Digital Millennium Copyright Act (DMCA) provision that prohibits circumvention of technological measures that control access to copyrighted works. The new final rule went into effect October 28, 2024.

In 1998, as part of the DMCA, Congress added § 1201 to the Copyright Laws (Title 17) to provide greater legal protection for copyright owners in the then-emerging digital environment. Section 1201 generally made it unlawful to “circumvent a technological measure that effectively controls access to” a copyrighted work. Since then, every three years, the Librarian of Congress (US Copyright Office), upon the recommendation of the Register of Copyrights, has been authorized to adopt temporary exemptions specific to classes of copyrighted works that will be in effect for the ensuing three‐year period.

Now, pursuant to § 1201 and based upon recommendation of the Register, the Copyright Office has renewed all but one of the existing exemptions, adopted a new exemption to vehicle operational data for computer programs, and expanded the existing exemptions to text and data mining of audiovisual and literary works and exemptions regarding computer programs for repair of commercial industrial equipment.

The Copyright Office recommended adopting or expanding exemptions for the following classes:

  • [For] Classes 3(a) and 3(b) [exemptions]: Expansion of the exemption for audiovisual and literary works, for the purpose of text and data mining for scholarly research and teaching by allowing researchers affiliated with other nonprofit institutions of higher education to access corpora for independent research and by modifying the provisions concerning security measures and viewing the contents of copyrighted works within a corpus.
  • [For] Class 5 [exemptions]: New exemption for computer programs that control retail-level commercial food preparation equipment for purposes of diagnosis, maintenance, and repair.
  • [For] Class 7 [exemptions]: New exemption for computer programs, for purposes of accessing, storing, and sharing operational data, including diagnostic and telematics data, of motorized land vehicles, marine vessels, and commercial and agricultural vehicles or vessels.

Regarding the Classes 3(a) and 3(b) exemptions, the final rule explains that institutions can “provide outside researchers with credentials for security and authentication to use a corpus that is hosted on its servers but cannot disseminate a copy of a corpus (or copyrighted works included therein) to outside researchers or give outside researchers the ability to download, make copies of, or distribute any copyrighted works.”

Regarding the Class 5 exemptions, the Register agreed that “proponents sufficiently showed . . . adverse effects on . . . proposed noninfringing uses” of computer programs “related to retail-level commercial food preparation” but otherwise declined to extend the exemption to software-enabled industrial devices.

Regarding the Class 7 exemption, the Register determined that “the prohibition on circumvention adversely affects the ability of lawful owners and lessees, or those acting on their behalf, to access, store, and share operational and telematics data, which are likely to be noninfringing.”

The Copyright Office declined to add “an exemption for the [...]

Continue Reading




read more

Digital Rights, Digital Wrongs: The DMCA Lives On

The US Court of Appeals for the District of Columbia affirmed that the Digital Millennium Copyright Act’s (DMCA) laws against bypassing digital locks and distributing circumvention tools are designed to prevent piracy and are not unconstitutionally broad. Matthew D. Green, et al. v. United States Department of Justice, et al., Case No. 23-5159 (D.C. Cir. Aug. 2, 2024) (Pillard, Henderson, Millett, JJ.)

As technology has advanced, access to copyrighted content has expanded dramatically, with billions of people now able to stream or download content instantly. In response to this digital revolution, Congress enacted the DMCA 26 years ago to address the growing threat of digital piracy and unauthorized access to copyrighted materials online. The DMCA reinforces the use of technological protection measures, or “digital walls,” to secure copyrighted works from unauthorized access. The DMCA’s anticircumvention provision prohibits bypassing these technological protections, treating such acts as akin to digital trespassing.

Matthew Green, a computer science professor at Johns Hopkins University, and Andrew Huang, a tech inventor, challenged the constitutionality of key sections of the DMCA. They argued that the DMCA’s anticircumvention and antitrafficking provisions, which prohibit the circumvention of technological protections on copyrighted works and the distribution of circumvention tools, violated their First Amendment rights. They claimed that these provisions excessively restricted their ability to engage in lawful speech, particularly in the context of fair use.

While the DMCA leaves the fair use defense intact, Green and Huang argued that the DMCA unduly restricts fair use, particularly when the DMCA prohibits activities that would otherwise be considered lawful under copyright law. The district court dismissed Green and Huang’s facial First Amendment challenges, finding that they had not demonstrated that § 1201 of the DMCA overwhelmingly restricted protected speech to the extent that it warranted facial invalidation. Green and Huang appealed.

The DC Circuit explained that the DMCA’s anticircumvention provisions primarily target conduct – specifically, the act of bypassing digital protections – rather than expression. The Court noted that such conduct is not inherently expressive and does not typically implicate the First Amendment. The Court also found that the DMCA’s anticircumvention provisions serve a legitimate and extensive purpose in preventing piracy. While Green and Huang cited examples of potential overreach, such as a teacher circumventing a DVD’s encryption for classroom use, the Court explained that these examples did not convincingly demonstrate that the statute’s unconstitutional applications outweighed its lawful ones. The Court further explained that existing exemptions, such as those allowing circumvention for educational purposes, reduce the burden on free speech.

Green and Huang also argued that § 1201(a) imposes an unconstitutional prior restraint on speech by requiring fair users to obtain exemptions from the Librarian of Congress before circumventing technological protections. They likened this process to a speech-licensing regime, claiming that it invites content and viewpoint discrimination without sufficient judicial oversight. However, the DC Circuit rejected this claim, ruling that the DMCA’s exemption process is not a prior restraint on speech. The Court reiterated and emphasized that § 1201(a) regulates conduct, [...]

Continue Reading




read more

Strong Signal: Personal Jurisdiction Over Foreign Defendant Based on Confluence of Factors

The US Court of Appeals for the Fifth Circuit concluded that a district court had personal jurisdiction over a foreign defendant’s website that purposefully targeted a US-based audience. DISH Network, LLC v. Bassam Elahmad, Case No. 23-20180 (5th Cir. Mar. 8, 2024) (Willett, Wilson, Ramirez, JJ.) (per curiam).

DISH Network sued Bassam Elahmad, a German resident doing business as Elahmad.com, for contributory copyright infringement, alleging that Elahmad unlawfully provided access to DISH’s copyrighted Arabic language channels. DISH alleged that Elahmad found, combined and organized illegal streams and loaded links onto Elahmad.com. DISH sent more than 60 copyright infringement notices to Elahmad, who never responded or removed the content. Although Elahmad resided in Germany, DISH argued that any court in the United States had jurisdiction over him under Fed. R of Civ. Pro. 4(k)(2) because his website reached into and targeted the US. DISH also argued that Elahmad was not subject to jurisdiction in any particular US state. The district court disagreed, concluding that it could not exercise personal jurisdiction over Elahmad because DISH’s complaint did not allege that any conduct had occurred in Texas. The district court twice denied DISH’s motions for default judgment and dismissed the complaint. DISH appealed.

The Fifth Circuit addressed the district court’s application of Rule 4(k)(2) and whether DISH had made a sufficient prima facie showing of specific personal jurisdiction to sustain its case.

Addressing Rule 4(k)(2), which provides personal jurisdiction in any US district court if a defendant is not otherwise subject to jurisdiction in a specific state, the Fifth Circuit clarified that for a finding of personal jurisdiction under this rule, the question is whether a defendant has sufficient minimum contact “with the entire United States, not a forum state.” The Fifth Circuit found that the district court’s analysis focused solely on Elahmad’s Texas contacts – not the entire US – and was therefore reversible error.

Turning to DISH’s burden to establish a prima facie case of personal jurisdiction, the Fifth Circuit noted that DISH had properly served Elahmad. DISH therefore only had to satisfy three other conditions: that its claims arose from federal law, that Elahmad was not subject to general jurisdiction in another state, and that exercising jurisdiction would be consistent with the US Constitution. The Court concluded that the first two conditions were easily met because copyright laws are federal and the burden to establish that another state has jurisdiction falls on the defendant. Elahmad had not answered the complaint or joined the appeal. Clearly, he had not met that burden.

The Fifth Circuit found that the third condition was “a closer question” that required consideration of whether Elahmad had sufficient ties to the US to satisfy constitutional due process concerns. Because DISH argued that the district court had only specific personal jurisdiction over the defendant (not general), DISH needed to show that Elahmad purposefully availed himself of “the privilege of conducting activities in the United States,” that DISH’s claim arose out of those contacts, and that it would be [...]

Continue Reading




read more

Yo-Ho-No Vicarious Liability for Online Piracy Without Financial Benefit

The US Court of Appeals for the Fourth Circuit reversed-in-part, vacated-in-part and affirmed in part a district court decision that found an internet service provider liable for $1 billion in damages for vicarious and contributory copyright infringement. Sony Music Entm’t., et al. v. Cox Commc’ns, Inc., Case No. 21-1168 (4th Cir. Feb. 20, 2024) (Harris, Rushing, JJ., Floyd, Sr. J.) (per curiam).

Sony Music along with 52 other music companies filed suit against Cox Communications in July 2018, alleging both contributory and vicarious liability based on copyright infringement by Cox’s customers. Sony argued that Cox knew that some of its customers used its service to download or distribute songs over the internet without permission but chose not to cancel their subscriptions. The Digital Millennium Copyright Act (DMCA) created a safe harbor for internet service providers in such circumstances but a prior case against Cox held that it did not qualify for the safe harbor because “its repeat infringer policy as implemented was inadequate under the DMCA.” In the present case, the jury found Cox liable for vicarious and contributory infringement of all 10,017 copyrighted works alleged to have been infringed and found that Cox’s infringement was willful. The jury awarded Sony more than $99,000 per work infringed, totaling $1 billion in statutory damages. Cox appealed.

The appeal garnered noteworthy amici in support of both sides. Cox was supported by the Electronic Frontier Foundation, the American Library Association and the Center for Democracy and Technology, among others. Sony was supported by the National Music Publishers’ Association, the Songwriters of North America, the Nashville Songwriters Association International and the Copyright Alliance.

Cox raised many questions of law concerning the scope of secondary liability and what constitutes a compilation or derivative work in the digital age. The Fourth Circuit upheld the jury verdict finding Cox liable for contributory copyright infringement, rejecting Cox’s arguments that its service was also used for lawful activity and that its contribution must amount to aiding and abetting the infringement. The Court explained that “supplying a product with knowledge that the recipient will use it to infringe copyrights is exactly the sort of conduct sufficient for contributory infringement.” The Court concluded that the jury saw sufficient evidence that Cox knew specific users were repeatedly infringing but chose not to terminate their service.

The Fourth Circuit, however, reversed the jury’s verdict of vicarious liability, finding that Cox did not profit from its subscribers’ acts of infringement and so did not meet the legal prerequisite for that form of secondary liability. Reviewing landmark cases on vicarious liability, the Court explained that “the crux of the financial benefit inquiry is whether a causal relationship exists between the infringing activity and a financial benefit to the defendant . . . the financial benefit to the defendant must flow directly from the third party’s acts of infringement to establish vicarious liability.” Since Sony failed to show that Cox profited from its subscribers’ infringing activity, it failed to establish vicarious liability.

The [...]

Continue Reading




read more

Foreign Video-Hosting Website Can’t Escape Long Arm of the Law

Focusing on the first prong of the minimum contacts test (whether the foreign defendant purposefully directed its activities at the United States) the US Court of Appeals for the Ninth Circuit reversed a district court holding that it lacked specific personal jurisdiction over the operators of a Japanese-language video-hosting website and remanded the case for further analysis under Fed. R. Civ. P. 4(k)(2), the federal long-arm statute. Will Co. v. Lee, Case No. 21-35617 (9th Cir. Aug. 31, 2022) (Wardlaw, Gould, Bennett, JJ.)

Will is a Japanese adult entertainment producer with more than 50,000 videos registered with the US Copyright Office. Will sells access to its content on its website, where it makes more than $1 million per year from US consumers. Defendants Youhaha Marketing and Promotion (YMP) and Lee own and operate ThisAV.com, a Japanese-language video-hosting website similar to YouTube. ThisAV.com allows users to upload and view videos for free alongside advertisements posted by third-party vendors.

After discovering 13 of its videos on ThisAV.com, Will sent the defendants take-down notices pursuant to the Digital Millennium Copyright Act (DMCA). When the defendants failed to honor the takedown notices, Will sued for copyright infringement. The defendants moved to dismiss the lawsuit for lack of personal jurisdiction because Lee is a permanent resident of Hong Kong currently residing in Canada, and YMP is registered in Hong Kong (where it operates ThisAV.com). Will countered that the lower court had specific personal jurisdiction over the defendants because their display of the copyrighted videos was sufficiently connected to the United States. The district court granted the defendants’ motion to dismiss, concluding that the content on ThisAV.com was not “expressly aimed” at the United States, and that the defendants had not caused “jurisdictionally significant harm,” since only 4.6% of the site’s viewers were from the United States. Will appealed.

The principal issue on appeal was whether the defendants had “purposefully directed” the content of ThisAV.com at the United States under the minimum contacts Calder test, which asks whether the defendant (1) committed an intentional act (2) expressly aimed at the forum state, (3) causing harm that the defendant knows is likely to be suffered in the forum state.

The Ninth Circuit summarily concluded that YMP and Lee had committed intentional acts by operating ThisAV.com and purchasing the domain name and domain privacy services. However, whether Lee and YMP had “expressly aimed” ThisAV.com at the United States was a closer question. The Court noted that “mere passive operation of a website” is insufficient to show express aiming. Instead, the operator must have “appealed to and profited from an audience in that forum.” The Court first determined that the defendants had “profited from” the US market because US consumers viewed advertisements posted on the website more than 1.3 million times, and the defendants were paid by third-party advertisers based on views. The Court further concluded that the defendants had intentionally “appealed to” the US market by enabling the website to be quickly accessible to US consumers with reduced [...]

Continue Reading




read more

DMCA Scienter Requirement Not Satisfied without Evidence of Knowledge of Inducement or Concealment

Interpreting a provision of the Digital Millennium Copyright Act (DMCA), 17 U.S.C. § 1202(b), for the first time, the US Court of Appeals for the Eleventh Circuit affirmed a summary judgment ruling that the plaintiff failed to satisfy the second scienter requirement of § 1202(b) by not showing that the defendant knew, or had reasonable grounds to know, that its actions would induce, enable, facilitate or conceal a copyright claim. Victor Elias Photography, LLC v. Ice Portal, Inc., Case No. 21-11892 (11th Cir. Aug. 12, 2022) (Newsom, Marcus, JJ; Covington, Distr. J.)

Victor Elias is a professional photographer who takes photographs for hotels and resorts throughout the United States, Mexico and the Caribbean. Between 2013 and 2017, Elias took pictures for Starwood Hotels & Resorts and Wyndham Hotel & Resorts. As part of his process, Elias embedded copyright management information (CMI) into the image files.

During this period and into 2018, Starwood and Wyndham contracted with Ice Portal (a division of Shiji at the time of the appeal) to process thousands of images, including 220 images taken by Elias, and make them available to online travel agents. This processing included converting the images to JPEG format, making copies in various industry-standards sizes and optimizing the files for faster display. The processing sometimes resulted in the loss of an image file’s metadata. In 2016, Elias discovered infringing online uses of his images that lacked the embedded CMI. He filed suit against Ice Portal, contending that the stripping of metadata resulted in loss of his embedded CMI, which violated two sections of the DMCA: 17 U.S.C. §§ 1202(a) and 1202(b).

Following discovery, the district found that Elias could not “satisfy the ‘second scienter requirement’ of the statute” and granted Shiji’s motion for summary judgment. Relying on the 2018 Ninth Circuit case Stevens v. Corelogic, the district court found that Elias had not established that Shiji “knew or had reason to know that its action would induce, enable, facilitate, or conceal infringement.” The court determined that Elias failed to demonstrate that the removal of CMI “is the reason, or even the likely reason, for the infringing use of the images,” or that “Shiji was even aware that searching for terms embedded in the extended attributes was a method used by copyright holders to find infringement on the internet.” Elias appealed.

Because this was a novel issue for the Eleventh Circuit, the Court interpreted § 1202(b) as an issue of first impression. After considering the plain terms of the statute and the opinions of sister circuits, the Court agreed with its sister circuits that to satisfy the scienter requirement of §1202(b), a plaintiff “must make an affirmative showing . . . [that] the defendant was aware [of] or had reasonable grounds to be aware of the probable future impact of its actions.”

Elias urged the Eleventh Circuit to adopt a standard that would only require a plaintiff to demonstrate that CMI was knowingly removed without consent and that the defendant either “knows, or has [...]

Continue Reading




read more

Ninth Circuit Once Again Preserves Competitor’s Data-Scraping Rights

On remand from the Supreme Court of the United States, the US Court of Appeals for the Ninth Circuit reaffirmed its own 2019 opinion that preliminarily enjoined a professional networking platform from denying a data analytics company access to publicly available profiles. HiQ Labs, Inc. v. LinkedIn Corporation, Case No. 17-16783, (9th Cir., Apr. 18, 2022) (Wallace, Berzon, Berg (sitting by designation) JJ.).

Previously, the Supreme Court had granted certiorari in this case, but subsequently vacated the judgment and remanded back to the Ninth Circuit for further consideration in view of its  2021 decision in Van Buren v. United States. In Van Buren, the Supreme Court attempted to clarify the reach of the Computer Fraud and Abuse Act of 1986 (CFAA), holding that authorized computer access for arguably improper purposes likely does not constitute a violation of the CFAA. On remand, the Ninth Circuit concluded that Van Buren reinforced its determination that hiQ had raised “serious questions” about whether LinkedIn may invoke the CFAA to preempt hiQ’s claim of tortious interference.

HiQ is a data company that sells “people analytics” focused on predictive employee data. HiQ’s data is largely obtained by scraping public LinkedIn profiles with automated bots. In 2017, LinkedIn sent a demand letter to hiQ asserting that hiQ’s scraping activity was in violation of the CFAA, the Digital Millennium Copyright Act (DMCA), the California penal code and common law. HiQ immediately filed suit seeking injunctive relief and a declaratory judgment that LinkedIn could not lawfully invoke the asserted claims. Granting hiQ’s motion for the preliminary injunction, the district court ordered LinkedIn to remove, and to refrain from implementing, any technical barriers to hiQ’s access to the LinkedIn public profiles.

The Ninth Circuit stated that a plaintiff seeking a preliminary injunction must establish the following:

  • It is likely to succeed on the merits.
  • It is likely to suffer irreparable harm absent the injunction.
  • The balance of equities tips in its favor.
  • The injunction is in the public interest.

This analysis required the Ninth Circuit to focus only on whether hiQ had raised serious questions on the merits of the factual and legal issues presented. The Ninth Circuit’s re-examination of these factors was nearly identical to its 2019 holding.

Starting with irreparable harm, the Ninth Circuit found that the survival of hiQ’s business was threatened since it depends on being able to access public LinkedIn member profiles. The Court also agreed, once again, with the district court’s determination that the balance of the equities tipped in hiQ’s favor. The Court found that the privacy interests of individuals who have opted to maintain a public LinkedIn profile did not outweigh hiQ’s interests in continuing its business. On this factor, the Court noted that “little evidence” suggested that LinkedIn users who choose to make their profiles public actually maintain an expectation of privacy with respect to publicly posted information. The Court also noted that LinkedIn does not own its users’ data, since users retain [...]

Continue Reading




read more

BLOG EDITORS

STAY CONNECTED

TOPICS

ARCHIVES