Supreme Court Overturns Conviction Related to Facebook Threats

In Elonis v. United States, U.S. Supreme Court, Case No. 13-983 (2015), petitioner sought relief from a conviction related to his Facebook posts that were deemed to be in violation of 18 U.S.C. §875(c), the transmission in interstate commerce of “communication containing any threat . . . to injure the person of another.”Petitioner argued the jury was provided with inappropriate instructions that required only a reasonable person standard, without any showing of subjective criminal intent, to determine whether his statements on Facebook would be regarded as a threat.

Back in 2010, after petitioner’s wife left him and he lost his job, he began to post rap lyrics on Facebook that contained violent language and imagery concerning his wife, former co-workers, the police force, and local schools. Petitioner’s former employer informed the FBI who began monitoring his Facebook activity and eventually arrested him for violation of §875(c). 

In 2012, when issuing jury instructions, the U.S. District Court for the Eastern District of Pennsylvania followed the decision in United States v. Kosma, 951 F.2d 549, 557 (3d Cir. 1991) related to §875(c), and held that a statement is a true threat when a reasonable person would foresee the statement would be interpreted as a threat. Following those instructions, the jury convicted petitioner and he was sentenced to 44 months in jail.

In 2013, on appeal to the Third Circuit, petitioner unsuccessfully argued that the jury instruction should have required the Government to prove that petitioner intended to communicate a ”true threat.”

On June 1, 2015, the U.S. Supreme Court reversed the Third Circuit and held that requiring only negligence with respect to the communication of a threat is not sufficient to support a conviction under §875(c) and remanded the case for further proceedings to determine whether recklessness suffices for criminal liability under§875(c). As stated by the U.S. Supreme Court, although a reasonable person standard is a feature of civil liability in tort law, the Court “ha[s] long been reluctant to infer that a negligence standard was intended in criminal statutes.” Rogers v. United States, 422 U. S. 35, 47 (1975) (Marshall, J., concurring).

CISPA Passes House Committee Vote

Cybersecurity bills and laws are on the rise. As noted in a recent article from TheHill.com, Congress is on the move to try to enact some legislation that impacts the Internet and your privacy.

CISPA - the Cyber Intelligence Sharing and Protection Act - is not new. It was introduced last year and never cleared the Senate and was threatened to be vetoed by the White House if it did. Privacy advocates fought hard against it.

In this new version, there have been several amendments to try to appease companies and privacy advocates. For instance, one amendment extends liability protection from legal action to any company that complies with the law to share threat data with the government. Another amendment requires the government to strip any data of personally identifiable information. This would help to alleviate some privacy concerns and goes a step forward from the last version which initially required companies to strip that information before providing such data to the government.

Although privacy advocates have not fully supported this bill as of yet, it appears as though a few more tweaks may get them on board, or at least a chance of a vote in Congress that could lead to approval at the White House.

Copyright Alert System - Six Strikes System

If you are notorious for downloading movies, music, games, books . . . your ISP may be contacting you soon. As this is not as threatening as receiving a cease and desist letter, or even a lawsuit, from a major studio or publisher, this may be a good thing.

In an effort to decrease litigation and increase education, certain ISPs look to give users several chances to understand and correct any possible illegal behavior, before possibly being sued.

As noted in the Verge article, once a copyright owner identifies an IP Address of a user that is hosting content without permission, they will alert the ISP. It will then be up to the ISP to determine how to proceed with alerting the user, at the IP Address provided, to educate them on the possible inappropriate behavior and/or impair their services for a period of time.

If the ISP is contacted about a specific IP Address six times, thus the 'six strike system,' the ISP may forgo further alerts and may warn the user that a content owner may pursue legal action and that the ISP may be forced to reveal the user's contact information.

To the extent a user does reach the 'six strike' mark, the content owner will be in a much better position to suggest to the court that the user was well aware of their activity and failed to correct their behavior. Accordingly, if it gets to that stage, the user may have a tougher time to defend themselves by saying 'they didn't know what was going on.'

Overall, the education angle should help reduce any inappropriate behavior and hopefully save a lot of legal fees.

App Privacy on Mobile Smart Phones

At what point do you realize that you have become a global company? Most likely when you start to get complaints, inquiries, and/or investigations from international users and/or governments.

In WhatsApp's case, as noted at MercuryNews.com, Canadian and Dutch authorities are investigating this Santa Clara based company's privacy practices, as it relates to the use of their app on smart phones.

Specifically, the authorities are questioning WhatsApp's ability to extract all contact information from a client's phone, regardless of whether the contact is a user of the WhatsApp product or not.

WhatsApp appears to have taken steps towards a manual addition of contacts, rather than an automated full extraction of all contacts on a phone, as well as enhancing its encryption of data stored by its app.

There does not appear any final 'findings', however, the authorities continue their investigation.

In general, to the extent you do have any data related to a user or non-user of your product, you should make sure you follow your privacy policy with respect to how you collect, store and maintain such information.