MediaPost Publications Netflix: Privacy Law Prevents Facebook Integration 07/25/2011

Netflix told shareholders today that a 23-year-old privacy law is “discouraging” it from integrating with Facebook in the U.S.

The 1988 Video Privacy Protection Act requires movie rental companies to get customers’ written consent before disclosing information about the videos they have rented. The law also requires companies to shed users’ video rental records within a year of the time the provider no longer needs the data.

Congress passed the VPPA after a newspaper obtained the video rental records of Robert Bork, who had been nominated (unsuccessfully) to serve on the U.S. Supreme Court. The statute provides for $2,500 in damages per violation.

Netflix says that the VPPA is “ambiguous” about how users can give permission for information on video viewing to be shared. The company also says it backs a proposed bill, HR2471, that would offer clarification.

That measure, introduced by Rep. Robert Goodlatte (R-Va.), would allow consumers to consent online to disclosure of their video rentals. It also would allow people to consent on an ongoing basis. The current statute requires consumers’ to give written consent “at the time the disclosure is sought.”

via MediaPost Publications Netflix: Privacy Law Prevents Facebook Integration 07/25/2011.

Russia Amends Federal Data Protection Law; Privacy Enforcement on the Rise : Info Law Group

Last week, the upper house of Russia’s federal legislature approved amendments to the country’s federal data protection law. The amendments impose detailed information security requirements on businesses that process personal data and revise some of the statute’s data subject consent provisions.The amended law will come into force when it is published in the official newsletter.

Russia originally enacted a comprehensive federal data protection law in 2006, but the statute has faced major headwind. While the law is similar in its approach to the EU Data Protection Directive 95/46/EC, it is much more restrictive regarding personal data processing. After several delays, the law came into effect on July 1, 2011. Commentators, however, continue to view the law unfavorably, arguing that it’s unworkable.

The amended security provisions include the requirements to:

Conduct an assessment of threats to the safety of personal data and the effectiveness of the measures that the business has in place to safeguard personal data;

Employ only verified methods of protecting personal data;

Implement controls for access to personal data;

Log all actions takes with respect to personal data;

Detect and record incidents of unauthorized access to personal data; and

Implement measures to restore information that is lost, destroyed or damages as a result of an information security breach.

The amended law directs the government to develop regulations that will set forth appropriate levels of information security protections. The regulations will also establish the security requirements for processing biometric data.

via Russia Amends Federal Data Protection Law; Privacy Enforcement on the Rise : Info Law Group.

White & Case’s Terwilliger Calls for FCPA Safe Harbor | Corporate Crime Reporter

You just have to admire the corporate community’s non-stop drive toward criminal amnesty.

Ten years ago, most cases against large corporations were resolved with plea agreements.

Today, most cases are resolved with deferred and non prosecution agreements.

Tomorrow, the captains of industry will park their behemoths in safe harbors – completely protected from criminal prosecution.

At least, that is the way it will be if it is left up to the U.S. Chamber of Commerce.

And George Terwilliger, a partner at White & Case in Washington, D.C.

Last week, Terwilliger went before the House Judiciary’s Subcommittee on Crime, Terrorism and Homeland Security.

And in his testimony, he laid out what big corporations want.

Their key demand?

A safe harbor from criminal prosecution under the Foreign Corrupt Practices Act (FCPA).

“A statutory safe-harbor provision in the law could provide companies that strive for anti-corruption compliance with increased certainty that their efforts will provide them with some level of protection from FCPA liability,” Terwilliger said. “Such a provision could shield from criminal liability companies that operate demonstrably robust compliance programs and that self-report the misconduct in question that arises despite their best efforts. It makes no sense to me to engage in criminal prosecution of a company that operates a state of the art compliance program and that investigates, corrects and self-reports non-compliant circumstances that do arise.”

“I think many if not most prosecutors would agree with me on that proposition and have so concluded in the context of enforcement decisions, at least in some cases. But doubt as to the precise benefits of voluntary disclosure under existing enforcement policy produces uncertainties. Such uncertainty could be replaced with a bright line providing that companies acting responsibly on the terms which I have outlined would have a safe harbor from criminal liability even where a violation arose despite their best efforts.”

“Providing for greater certainty in the terms of the statute and its enforcement promotes good corporate compliance practices and that helps secure further the statute’s objectives to promote corruption free markets. It has the added benefit of helping to allow business decisions to be grounded more in business terms rather than legal risk analysis.”

via terwilliger06172011.

Q+A – Professor finds flaws in U.S. anti-bribery enforcement – TrustLaw

Enforcement of the U.S anti-graft law, the Foreign Corrupt Practices Act (FCPA) is, “in certain cases, contrary to the statute itself,” says prominent FCPA commentator, Mike Koehler.

Koehler, an assistant professor of business law at Butler University in the United States and author of the popular blog FCPA Professor, spoke to TrustLaw about the FCPA, its enforcement and two high profile provisions within the Dodd–Frank Wall Street Reform and Consumer Protection Act (Dodd-Frank Act) which the U.S. government is expected to use in its fight against corruption.

WHAT OBJECTIONS DO YOU HAVE TO THE FCPA OR ITS ENFORCEMENT?

The FCPA is a fundamentally sound statute that was rightly passed by the U.S. Congress in 1977. Is the FCPA a perfect statute? No, I do not believe that it is. An issue deserving of serious analysis is the creation of an “adequate procedures” defence similar to the UK Bribery Act. Certain FCPA reform bills in the 1980s containing such a defence passed the U.S. House in 1988, and this is an issue that ought to be revisited.

That the FCPA is a fundamentally sound statute does not mean that FCPA enforcement is fundamentally sound. I, along with many others, have serious concerns about FCPA enforcement across a wide spectrum. On one end, many enforcement theories seem to be contrary to the intent of Congress in passing the FCPA and indeed, in certain cases, contrary to the statute itself. On the other end, the most egregious instances of corporate bribery are resolved

via Q+A – Professor finds flaws in U.S. anti-bribery enforcement – TrustLaw.

FCPA Got You Shaking In Your boots?

This year, many US companies have been on a bumpy rollercoaster ride with the DoJ and SEC when it comes to the four dreaded words: ‘Foreign Corrupt Practices Act’ (FCPA).

With increasing international trade and attractive cross-border deals, the FCPA has leapt from a seldom enforced, broadly written statute to one of the highest law enforcement priorities today.

‘Companies should know what the FCPA prohibits, what it requires and what are their responsibilities under the law,’ warns Richard Cassin, a lawyer and creator of the FCPA Blog, a site that provides practical information about the FCPA and compliance. ‘The basic prohibitions in the antibribery provisions are that no one subject to the FCPA should corruptly give or promise to give anything of value to a foreign official, directly or indirectly, to obtain or retain business or gain an unfair advantage.’

Unfortunately, not every company understands the scope or the scale of the FCPA. Last week, California-based Lindsey Manufacturing, makers of electrical transmission towers, got a taste of the act when the company’s president, its CFO, and a Mexican sales agent were convicted by a federal jury in Los Angeles for bribing Mexican officials at a state-owned operation, Comisión Federal de Electricidad, through its sales agents during the period 2002-2009.

How did it end? It wasn’t pretty.

After a five-week trial the jury handed down guilty verdicts and the company’s high-powered execs now face a maximum penalty of five years in prison and a fine of at least $250,000 on the FCPA conspiracy charge, together with a further $100,000 for each of five additional FCPA counts.

via FCPA Got You Shaking In Your boots?.

U.S. Court Holds Litigant In Non-U.S. Suit Subject to American Discovery Rules | K&L Gates

On January 24, 2011, the United States Court of Appeals for the Seventh Circuit issued a decision broadly interpreting a federal statute affording parties in non-U.S. litigation access to American-style discovery.  Heraeus Kulzer, GmbH v. Biomet, Inc., Nos. 09-2858, 10-2639 (7th Cir. January 24, 2011).  The federal Court held that a party in a lawsuit pending in Germany could be subjected to American discovery rules – which it acknowledged are “far broader than in most (maybe all) foreign countries” – even though the Court assumed that the discovery sought would not be allowed by the German court in which the case was pending.  Although the Court recognized that the discovery requests might be excessive and that a “discovery demand in our courts might yield a haul of 30 million emails, few of which would be admissible in evidence [in Germany],” it held that where the requirements of the federal statute are met, a litigant in a non-U.S. dispute is entitled to obtain discovery in accordance with the Federal Rules of Civil Procedure absent a showing that the discovery is sought for an abusive motive, or would have an abusive effect.

The case presented the Seventh Circuit with the issue of whether the plaintiff (a German company) in a theft of trade secrets case pending in Germany could employ American law to require the defendant, Biomet, Inc. (an international company with offices in the U.S.), to produce documents for use in the foreign proceeding.  To obtain the documents, Heraeus relied upon a federal statute, 28 U.S.C. § 1782, which authorizes the federal court in “the district in which a person resides or is found” to “order” discovery of documents and other things from such person or entity for use in proceedings before foreign tribunals.

via K&L Gates : Newsstand : U.S. Court Holds Litigant In Non-U.S. Suit Subject to American Discovery Rules.

Business Pays for Bribery Act – WSJ.com

Bribery should not be condoned. Few business people would dare take issue with this statement, hence the dearth of voices being raised against the U.K. Bribery Act 2010, which is now on the statute book and due to come into force in April next year. Taking issue with a piece of legislation which is intended to toughen up the existing law against bribery does not look like good corporate citizenship.

Nevertheless, plenty of reservations about the Act are being aired privately and with good reason. This is a piece of legislation with huge implications for the conduct of businesses and not just those that are British. The territorial ambitions of the Act are so far reaching that any company with operations in the U.K. could fall foul of it, wherever in the world the alleged offence may be committed. And so extreme is the Act in its attempt to wipe out corrupt practices that it does not even allow the exception for ‘facilitation’ payments that exists under the United States Foreign Corrupt Practices Act.

View Full Image

Bloomberg

BAE Systems paid heavy fines over bribery allegations.

That sensible exception ensures that in countries where officials demand and expect a payment for doing their jobs, such as processing customs forms or issuing visas, it is possible for US companies to operate without falling foul of the FCPA. The Bribery Act makes no such concession.

via Business Pays for Bribery Act – WSJ.com.

Patent Markers Beware of False Claims | Legal Intelligencer

Products and packages often bear legends stating, “Patent Pending,” “covered by U.S. Patent No. X,XXX,XXX,” or other similar phrases. And, companies sometimes advertise their products as being “patented.” It may be worthwhile to investigate the accuracy of such representations because it could pay off — big time. How so? First a little background and then the answer.

Patentees may represent that their products are covered by a patent or are patent pending — i.e., that a patent application has been filed — for various reasons. For one, these “patent markings” serve as proverbial “no trespassing” signs directed at potential infringers. Also, the patented or patent pending status of a product can earn it respect and credibility among the consuming public. Furthermore, failure to mark one’s products with applicable patent numbers can adversely affect the amount of damages awarded to patentees who succeed in patent infringement lawsuits.

Under the patent marking statute, 35 U.S.C. § 287(a), marking one's product with an applicable patent number provides the public with constructive notice of the patent alleged to cover the product. Without such constructive notice, a patentee may only recover infringement damages beginning from the date that an infringer received actual notice of the patent at issue, e.g., by a letter from the patentee. Consequently, a failure to mark may interfere with a patentee’s ability to recover for years’ worth of infringement. Accordingly, patentees have incentive to apply patent markings to their products.

However, patent marking can be a double-edged sword. The patent laws include a “false marking” statute, 35 U.S.C. § 292, which penalizes intentionally deceptive representations that a product is covered by a patent or patent application.

The false marking statute has been around in one form or another since 1842, but has attracted very little attention until only recently. The Federal Circuit's Dec. 29 landmark decision in The Forest Group Inc. v. Bon Tool Co. dramatically changed the law on false marking. The court held that the penalty for false marking, which is a statutory maximum of $500 per offense, is “to be imposed on a per article basis.” This means, for example, that if 1 million products were falsely marked with deceptive intent, the penalty may be as much as $500 x 1 million offensive markings, or $500 million.

The foregoing hypothetical is not hyperbole. In a false marking case currently on appeal before the Federal Circuit, Pequignot v. Solo Cup Co., the patentee was accused of falsely marking tens of billions of products with expired patent numbers, allegedly in violation of the false marking statute. Clearly, false marking is serious business.

One more rather important detail: quite literally anyone can sue for false marking. There is virtually no standing requirement in the traditional sense — cognizable injury, etc. — to bring a false marking action. False marking is brought as a qui tam action, whereby a private individual or business entity can investigate false marking offenses and bring lawsuits against alleged offenders on behalf of the U.S. government. A successful false marking plaintiff, known as a “relator,” would split the award 50/50 with the United States.

via Law.com – Patent Markers Beware of False Claims.

New French Case Removes Automatic Privacy Shield From Employee E-Mails, Making Them More Amenable to US Discovery : H&H Chronicle of Data Protection

A new decision released on 8 January 2010 from the French high labor court (the Cour de Cassation Chambre Sociale) may provide some grounds for arguing that a party in France can review a French employee’s e-mails and electronically stored information to determine whether the data is relevant to a U.S. litigation, without the employee’s knowledge or presence.  This is a significant development in the perennial tension between EU privacy law and U.S. discovery principles.

European Union policies protecting personal privacy almost always conflict with United States policies that grant litigants full and complete discovery of documents and electronically stored information in U.S. court actions.  The conflict is particularly acute in France, where a French corporation participating in U.S. litigation may easily run afoul of the French Blocking Statute (Law No. 68-678, as amended), data processing laws (e.g. Law No. 78-17, as amended), and the EU Directive 95/46 on Personal Data (“Directive”), among others.

Indeed, after years of goading by U.S. courts, French authorities even prosecuted someone, a French lawyer, under the blocking statute.  His crime was attempting to comply with a U.S. court order compelling production of documents.  See In re Christopher X, Cour de Cassation, Chambre Criminelle, Paris, December 12, 2007, No. 07-83228 (French Supreme Court upholding conviction and €10,000 fine against French lawyer attempting to facilitate collection of evidence for use as ordered in a U.S. judicial proceeding).  Examples of U/S. goading include In re Vivendi Universal S.A. Secs. Litig., No. 02 Civ. 5571, 2006 WL 3378115 at *3 (S.D.N.Y. 2006) (French blocking statute did not subject parties to a “realistic risk of prosecution”) and Minpeco S.A. v. Conticommodity Servs., Inc., 116 F.R.D. 517 at 528 (S.D.N.Y. 1987) (“this is not a situation in which the party resisting discovery has relied on a sham law such as a blocking statute to refuse disclosure”).

via New French Case Removes Automatic Privacy Shield From Employee E-Mails, Making Them More Amenable to US Discovery : H&H Chronicle of Data Protection.