Is an online marketplace liable for injuries caused by defective products?

The recent case of Eberhart v. Amazon.com, Inc. discussed the question of whether a man could recover from Amazon for severe injuries to his thumb he suffered when the glass of a coffee maker he purchased on Amazon shattered. The court held that Amazon was not liable.

No strict liability

In most states, when a product injures someone, that injured party can seek to hold anyone within the distribution chain “strictly liable” for the injuries. That means that the party is potentially liable regardless of whether it sold the product directly to the consumer, and regardless of whether the injury was foreseeable or was caused because of a lack of due care.

The court concluded that Amazon was not within the coffeemaker’s chain of distribution such that Amazon could be considered a “distributor” subject to strict liability. Amazon never took title to the coffee maker. Moreover, Amazon was better characterized as a provider of services. And finally, many other courts that had considered the question had concluded that Amazon was not strictly liable for defective products sold on its marketplace.

No negligence, breach of warranty or misrepresentation

Plaintiff’s other legal theories against Amazon failed as well. As for his negligence claims, the court held Amazon owed no duty to plaintiff because Amazon did not manufacture, sell, or otherwise distribute the allegedly defective coffeemaker to him. And as for claims sounding in breach of express warranty and misrepresentation, the court held that because Amazon did not make any statement about the coffeemaker (the seller generated that content), it could not be held liable.

Eberhart v. Amazon.com, Inc., 2018 WL 4080348 (S.D.N.Y., August 27, 2018)

About the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Florida court rules that online seller’s terms and conditions were not enforceable

ignore_this_text

Beware the browsewrap.

A Florida state appellate court recently held that an online seller’s terms and conditions, appearing in a “browsewrap” agreement linked-to from the bottom of its web pages, were not enforceable.

Plaintiff, an online purchaser of defendant’s dietary supplements, sued defendant seller over liver damage plaintiff allegedly sustained from the products. Defendant filed a motion with the trial court seeking to enforce an arbitration clause in its online terms and conditions. Plaintiff objected to that motion, arguing that he never agreed to the arbitration clause contained in the browsewrap agreement.

The lower court denied defendant’s motion to compel arbitration, finding that the terms of the browsewrap agreement were not incorporated into the sales agreement. Defendant sought review with the Florida appellate court. On appeal, the court affirmed the denial of the motion to compel.

This was a case of first impression in the Florida state courts.

The court observed that in other jurisdictions, browsewrap agreements have generally been enforced only when the hyperlink to the terms and conditions is conspicuous enough on the web page to place a user on inquiry notice of their terms. (Inquiry notice, simply stated, is, as its name suggests, notice sufficient to make the user aware enough of the terms that their natural inclination is to inquire further as to what the particular terms are.)

The court distinguished this case from the case of Hubbert v. Dell Corp., an Illinois case in which the court found a browse-wrap agreement to be enforceable.

Here, unlike in the Hubbert case, the defendant’s website allowed a purchaser to select a product and proceed to checkout without seeing the hyperlink to the terms and conditions. The website user could complete the purchase without scrolling to the bottom of the page where the link to the terms and conditions appeared.

In this situation the court found that the online seller’s website failed to advise the plaintiff that his purchase was subject to the terms and conditions of the sale, and did not put him on the required inquiry notice of the arbitration provision.

Vitacost.com, Inc. v. McCants, — So.3d — 2017 WL 608531 (Fla.Ct.App. Feb. 15, 2017)

Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Quora gets Section 230 victory in the Tenth Circuit

Pro se plaintiff Silver filed suit in federal court in New Mexico against the online question-and-answer website Quora, alleging that statements made by two different individuals concerning his professional services were defamatory. Quora moved to dismiss, arguing that the immunity provisions of the Communications Decency Act, at 47 U.S.C. 230 shielded it from liability arising from content posted by its users. The district court granted the motion to dismiss. Plaintiff sought review with the Tenth Circuit Court of Appeals. On review, the court affirmed the lower court’s dismissal of the case.

Citing to its previous Section 230 precedent, Ben Ezra, Weinstein, & Co. v. Am. Online Inc., 206 F.3d 980 (10th Cir. 2000), the court held that Quora was a provider of “an interactive computer service,” that its actions forming the basis of alleged liability, namely, in hosting the content, were that of a “publisher or speaker,” and that the content giving rise to the alleged liability was from “another information content provider,” i.e., the users who posted the content.

Silver v. Quora, Inc., 2016 WL 6892146 (10th Circuit, November 23, 2016)

Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Website operator faces copyright liability over use of allegedly infringing third party add-on

4925366648_802681f881_b

The recent case of Live Face on Web, LLC v. Biblio Holdings LLC illustrates some important risks of which any purchaser of third-party technology services or deliverables should be aware. The defendant in this case faces potential copyright liability (and the expenses associated with defending such claims) arising from technology that a third party vendor provided for defendant to enhance defendants’ website.

Plaintiff’s software

Plaintiff developed software that allows website operators to display video of a personal “host” to welcome online visitors to the website. A website operator implements plaintiff’s software by embedding an HTML script tag in the code of its website. The added code links the website to a copy of plaintiff’s software stored on the same server as the customer’s website or on a different server. When a user points his or her browser to the web page, the embedded HTML script tag causes the distribution of plaintiff’s software, which in turn causes the personal host video to be displayed. The browser saves plaintiff’s software into cache or hard drive or both, and automatically loads the software into RAM.

Defendants’ alleged infringement

Defendants allegedly used an infringing version of plaintiff’s software to display a spokesperson video on its website. Specifically, defendants claim that they contracted with a third party vendor that processed video that defendants provided, then sent defendants HTML code which defendants implemented into their site. When a user visited defendants’ website, his or her browser would call on the allegedly infringing code, which was stored on the third party vendor’s server. This caused a copy of the allegedly infringing software to be stored on the visitor’s computer in cache, memory, or its hard drive.

The proceedings

Plaintiff filed suit for copyright infringement in the U.S. District Court for the Southern District of New York. Defendants moved to dismiss for failure to state a claim upon which relief may be granted. The court denied most of the motion to dismiss, leaving the majority of copyright-related claims remaining in the case. It granted the motion to dismiss on the question of contributory liability.

Direct copyright infringement

Defendants raised several arguments as to why they should not be liable for direct copyright infringement . Although the court rejected each of these arguments, it observed that defendants’ most promising argument was that any infringement was actually done by the third party vendor that provided the technology to defendants. In this part of its opinion, the court considered the holdings of Perfect 10 v. Amazon, 508 F.3d 1146 (9th Cir. 2007) and other cases that involved in-line linking. The court observed that the reasoning of these cases appeared to limit plaintiff’s ability to hold defendants liable for direct infringement of plaintiffs distribution right. Nonetheless, the record did not have enough information for the court to definitively make a determination at this early stage. Accordingly, the court decided to permit discovery on the relationship between the third-party technology vendor and he allegedly infringing software.

The court also rejected defendants’ other arguments against liability for direct infringement. It found unpersuasive defendants’ arguments that the software was never downloaded. On this point, the court found that the complaint had sufficiently alleged that the infringing software was automatically saved into the cache or hard drives and automatically loaded into computer memory or RAM of visitors to defendants’ website. The court also rejected defendants’ arguments that the DMCA Safe Harbors protected them from liability, that any copying was only de minimis, and that previous lawsuits against the third-party technology provider should relieve defendants from liability.

Contributory infringement

On the question of contributory liability, the court granted defendants’ motion to dismiss. To bring a claim for contributory infringement, a plaintiff must allege both that its copyrighted work was directly infringed and that the defendant, with knowledge of the infringing activity, induced, caused, or materially contributed to the infringing conduct of another. The court found that plaintiffs had alleged only a bare legal conclusion that defendants knew or had reason to know they were using an infringing version of the software. Without strong enough allegations on the knowledge element of contributory infringement, this claim failed.

Vicarious infringement

Vicarious liability for copyright infringement may be imposed where a defendant profits directly from the infringement and has a right and ability to supervise the direct infringer, even if the defendant initially lacks knowledge of the infringement. The court denied the motion to dismiss on this point, as plaintiff plausibly alleged that defendants controlled the allegedly unlawful distribution of copies of plaintiff’s software to its website visitors. The court drew inferences in plaintiff’s favor, noting the allegation that defendants did modify their website to include code linking to the allegedly infringing software. Plaintiffs also successfully alleged that defendants profited from the use of the infringing software in that having the video host captured, held and prolonged the attention of the average online user, and did in fact generate revenues and profits for defendants. On this point, the court look to Arista Records v. MP3Board, 2002 WL 1997918 (S.D.N.Y. August 28,2002), which stands for the proposition that “infringement which increases a defendant’s user base or otherwise acts as a draw for customers constitutes a direct financial interest.”

Implications

In the course of negotiating technology development and service agreements, a customer should seek to get assurances from its vendor that any technology being provided will not infringe third party intellectual property rights. It is critically important to, were possible, have the vendor warrant and represent that the deliverables are non-infringing. It is equally important, still from the customer’s perspective, to have the vendor obligate itself to indemnify the customer in the event there are third party claims of intellectual property infringement. Although from this opinion we do not see all the facts, it appears this could be a situation where the defendant/customer is being taken to task and having to incur needless expense for the use of infringing software provided by its vendor. If that is the case, it is an unfortunate situation, one which a prudent customer of technology services would be well advised to seek to avoid.

Live Face on Web, LLC v. Biblio Holdings LLC, 2016 WL 4766344 (S.D.N.Y., September 13, 2016)

Photo courtesy of Flickr user J E Theriot  under this Creative Commons license.

Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

No liability for cable company that retained customer information in violation of law

Court essentially holds “no harm, no foul” in case involving violation of federal privacy statute. The case fails to provide an incentive for “privacy by design”.

Can a company that is obligated by law to destroy information about its former customers be held liable under that law if, after the contract with the customer ends, the company does not destroy the information as required? A recent decision from the United States Court of Appeals for the Eighth Circuit (which is located in St. Louis) gives some insight into that issue. The case is called Braitberg v. Charter Communications, Inc., — F.3d —, 2016 WL 4698283 (8th Cir., Sep. 8, 2016).

12493182714_859e827fe6_z

Plaintiff filed a lawsuit against his former cable company after he learned that the company held on to his personally identifiable information, including his social security number, years after he had terminated his cable service. The cable company was obligated under the federal Cable Communications Policy Act to “destroy personally identifiable information if the information is no longer necessary for the purpose for which it was collected.”

The lower court dismissed the lawsuit on the basis that plaintiff had not properly demonstrated that he had standing to bring the lawsuit. Plaintiff appealed to the Eighth Circuit. On review, the court of appeals affirmed the dismissal of the lawsuit.

The appellate court’s decision was informed by the recent Supreme Court decision in Spokeo, Inc. v. Robins, 136 S.Ct. 1540 (S.Ct. 2016), which addressed, among other things, the question of whether a plaintiff asserting violation of a privacy statute has standing to sue.

As a general matter, Article III of the Constitution limits the jurisdiction of the federal courts to actual “cases or controversies”. A party invoking federal jurisdiction must show, among other things, that the alleged injury is both “concrete and particularized” and “actual or imminent, not conjectural or hypothetical”.

In this case, the Court of Appeals found that plaintiff had not alleged an injury in fact as required under Article III and the Spokeo decision. His complaint asserted merely “a bare procedural violation, divorced from any concrete harm.”

The court’s opinion goes on to provide some examples of when the violation of a privacy statute would give rise to standing. It does this by noting certain things that plaintiff did not allege. He did not, for example allege that defendant had disclosed information to a third party, that any other party accessed the data, or that defendant used the information in any way after the termination of the agreement. Simply stated, he identified no material risk of harm from the retention. This speculative or hypothetical risk was insufficient for him to bring the lawsuit.

One unfortunate side effect of this decision is that it does little to encourage the implementation of “privacy by design” in the development of online platforms. As we have discussed before, various interests, including the federal government, have encouraged companies to develop systems in a way that only keeps data around for as long as it is needed. The federal courts’ unwillingness to recognize liability in situations where data is indeed kept around longer than necessary, even in violation of the law, does not provide an incentive for the utilization of privacy by design practices.

Braitberg v. Charter Communications, Inc., — F.3d —, 2016 WL 4698283 (8th Cir., Sep. 8, 2016)

Photo courtesy Flickr user Justin Hall under this Creative Commons license.

Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Cruz campaign still facing copyright and breach of contract liability over songs used in political ads

Court denies motion to dismiss copyright and breach of contract claims over songs used in YouTube and TV political ads.

Months after Ted Cruz ended his presidential bid, his campaign, and the advertising company hired to create ads for the campaign, still face liability over two songs used in YouTube and television ads. A federal court in Washington state has denied the defendants’ motion to dismiss copyright infringement and breach of contract claims brought against them.

An employee of the Cruz campaign’s advertising company allegedly downloaded two songs from Audiosocket, and then used those songs in two separate campaign ads. Audiosocket and the copyright holders sued for infringement and breach of the licensing agreements under which the songs were provided.

The court rejected the defendants’ arguments. It held that the plaintiffs had adequately pled the existence of their copyright registrations, and that the claims for breach of the licensing agreement were not preempted by the Copyright Act. Because the licensing agreement expressly prohibited the songs to be used for political purposes, the breach of contract claims were not “equivalent” to a copyright infringement claim, and therefore not subject to preemption under 17 USC 301.

The case is a reminder of the risks that companies and organizations face when hiring outside vendors to procure and create content. The hiring party should seek, at minimum, to ensure that the vendor has obtained the appropriate rights in the content it will integrate into the deliverables provided under the arrangement. And the vendor should utilize appropriate internal protocols and form documents to help ensure that the content it provides to its customer does not infringe. That kind of diligence will help avoid unpleasant situations between vendor and customer that arise when third parties claim against both of them that intellectual property rights have been infringed.

Leopona, Inc. v. Cruz For President, 2016 WL 3670596 (W.D. Washington, July 11, 2016)

No statutory damages in online copyright case where infringement continued after copyright registration

2240294793_25ebe9cff9_o
If a copyright infringement begins before the plaintiff registers its copyright, and continues after the date of registration, can the plaintiff recover its attorney’s fees and statutory damages for the infringement that occurs after registration? The U.S. District Court for the Southern District of Indiana recently considered that question in the case of Bell v. Turner, 2016 WL 1270221 (S.D. Ind. March 31, 2016).

The prospect of recovering statutory damages and attorney’s fees is a big motivator for copyright plaintiffs. The Copyright Act (at 17 U.S.C. § 504(c)(1)) provides that a plaintiff can receive an award of statutory damages — in lieu of actual damages and profits — in a sum not less than $750 or more than $30,000 for each infringement. If the copyright infringement is willful, “the court in its discretion may increase the award of statutory damages to an award of not more than $150,000.” And 17 U.S.C. § 505 provides that a successful party in a copyright action can recover its costs and attorney’s fees in the court’s discretion.

But statutory damages and attorney’s fees are only available if certain conditions are met. The Copyright Act precludes a plaintiff from obtaining statutory damages and attorney’s fees if the infringement of the work commenced after publication but before registration. The Copyright Act provides, at 17 U.S.C. § 412(2), that “no award of statutory damages or attorney’s fees…shall be made for…any infringement of copyright commenced after first publication of the work and before the effective date of its registration, unless such registration is made within three months after the first publication of the work”.

In Bell v. Turner, the court granted summary judgment to the defendant on the issue of whether plaintiff was entitled to recover statutory damages and attorney’s fees. Plaintiff first published his photo of the Indianapolis skyline online in 2000. In 2009, defendant copied the photo and placed it on his website. In 2011, plaintiff registered the copyright in the work, but defendant left his copy of the photo online, even after the work was registered.

In granting summary judgment to defendant, the court cited to Derek Andrew, Inc. v. Poof Apparel Corp., 528 F.3d 696 (9th Cir. 2009) and observed that “the first act of infringement in a series of ongoing infringements of the same kind marks the commencement of one continuing infringement under § 412.” Because the defendant posted the photo online more than three months before the date plaintiff registered the work, plaintiff was not entitled to recover statutory damages or attorney’s fees, even though the infringement continued after the date of registration.

Bell v. Turner, 2016 WL 1270221 (S.D. Ind. March 31, 2016)


Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Website operator not liable for copyright infringement despite lack of DMCA safe harbor protection

Online platforms that allow user-generated content should take advantage of the safe harbor provisions of the Digital Millennium Copyright Act (DMCA), which protect the platform in the event of a third party claim of copyright infringement over the user-generated content. But the recent case of BWP Media USA, Inc. v. T&S Software Associates, Inc., 2016 WL 1248908 (N.D. Tex., March 25, 2016) shows that a platform may still avoid liability for infringement even if it has not availed itself of the benefits of the DMCA.

Plaintiff copyright holders sued defendant online forum board operator for direct and vicarious copyright infringement, over photos uploaded by users of the online forum board. Defendant moved for summary judgment. The court granted the motion. The defendant successfully defeated these claims of copyright infringement even though it had not met the DMCA safe harbor requirement of designating an agent with the Copyright Office to receive takedown notices.

Direct Infringement

The court found there was no triable issue on plaintiffs’ claim that defendant was liable for direct infringement, because the parties did not dispute that defendant played no direct role in uploading the photos. Citing the seminal case of Religious Tech. Ctr. v. Netcom OnLine Comm’cn Servs., 907 F, Supp. 1361 (N.D.Cal. 1995), the court observed that “making an internet company liable for direct copyright infringement simply because it gave users access to copyrighted material posted by others would create unreasonable liability.”

Vicarious Liability

A defendant may be vicariously liable for copyright infringement where it “profits directly from the infringement and has a right and ability to supervise the direct infringer, even if the defendant initially lacks knowledge of the infringement.” Metro-Goldwyn-Mayer Studios, Inc. v. Grokster, Ltd., 545 U.S. 913, 930 (2005). In this case, the court found that although plaintiffs contended that (1) the copyrighted photographs were displayed alongside paid advertising, (2) defendant received revenue from the paid advertising on its forum, and (3) the revenue received was based, in part, on the website traffic, plaintiff failed to point to any evidence in the record showing that defendant directly profited from the infringing conduct.

Observation: DMCA Safe Harbor Not Needed Here

Online service providers that make their platforms available for the storage of user-generated content (even if such ability is trivial, e.g., allowing users to upload profile pictures) are encouraged to take the appropriate steps to place the service provider within the protections of DMCA safe harbor. These steps include providing appropriate information in the platform’s terms of service, employing internal processes to handle takedown requests and repeat infringers, having a plan in place for dealing with counternotifications, and designating an agent with the Copyright Office to receive takedown notices. Being in the safe harbor means that the service provider has an affirmative defense if it is sued by a third party copyright holder for infringement causaed by the platform’s users.

Many have mistakenly believed that if a service provider fails to get safe harbor protection, it is automatically liable for infringement occasioned by user generated content uploaded to the service. That is not true, and the BWP Media case serves as an example. A copyright-owning plaintiff must still establish the elements of infringement against the service provider — whether for direct infringement or under a theory of secondary liability (like vicarious infringement) — even if the defendant does not find itself within the DMCA safe harbor.

BWP Media USA, Inc. v. T&S Software Associates, Inc., 2016 WL 1248908 (N.D. Tex., March 25, 2016)


Evan_BrownAbout the Author: Evan Brown is a Chicago technology and intellectual property attorney. Call Evan at (630) 362-7237, send email to ebrown [at] internetcases.com, or follow him on Twitter @internetcases. Read Evan’s other blog, UDRP Tracker, for information about domain name disputes.

Court holds browsewrap agreement not enforceable

server_wrap

Plaintiff filed a consumer fraud class action lawsuit against defendant, the operator of an ecommerce website. Defendant moved to have the case heard by arbitration, arguing that the arbitration provision in its website’s terms of use required the dispute to be arbitrated instead of heard in court. The terms of use were in the form of a “browsewrap” agreement — viewable by a hyperlink displayed at the bottom of each page of defendant’s website.

The court denied the motion, finding that the hyperlink to the terms of use (containing the arbitration provision) was too inconspicuous to put a reasonably prudent internet consumer on inquiry notice. Since the agreement was not enforceable, plaintiffs were not bound by the arbitration provision. Defendant sought review with the California Court of Appeal. On appeal, the court affirmed the lower court.

It observed that for a browsewrap agreement to be enforceable, a court must infer that the end user assented to its terms. This may be more difficult to show than in situations involving “clickwrap” agreements, which require the user to affirmatively do something, such as check a box, to indicate his or her assent to the terms of use.

In this case, the court held that although an especially observant internet consumer could spot the defendant’s terms of use hyperlinks on some checkout flow pages without scrolling, that quality alone was not all that was required to establish the existence of an enforceable browsewrap agreement. Rather, as the Second Circuit observed in Specht v. Netscape, 306 F.3d 17 (2d Cir.2002), “[r]easonably conspicuous notice of the existence of contract terms and unambiguous manifestation of assent to those terms by consumers are essential if electronic bargaining is to have integrity and credibility.”

Here, the defendant’s terms of use hyperlinks — their placement, color, size and other qualities relative to defendant’s website’s overall design — were simply too inconspicuous to meet that standard.

Long v. Provide Commerce, Inc., — Cal.Rptr.3d —, 2016 WL 1056555 (Cal Ct. App., March 17, 2016)

About the Author: Evan Brown is a Chicago attorney advising enterprises on important aspects of technology law, including software development, technology and content licensing, and general privacy issues.

Photo courtesy Flickr user Patrick Finnegan under this Creative Commons license.

Communications Decency Act shields Backpage from liability for violation of federal sex trafficking law

backpage

Three Jane Doe plaintiffs, who alleged they were victims of sex trafficking, filed suit against online classified ad provider Backpage.com (“Backpage”), asserting that Backpage violated the federal Trafficking Victims Protection Reauthorization Act (“TVPRA”) by structuring its website to facilitate sex trafficking and implementing rules and processes designed to actually encourage sex trafficking.

The district court dismissed the TVPRA claims for failure to state a claim, holding that the Communications Decency Act, at 47 U.S.C. §230, provided immunity from the claims. Plaintiffs sought review with the First Circuit. On appeal, the court affirmed the lower court’s dismissal.

Section 230 principally shields website operators from being “treated as the publisher or speaker” of material posted by users of the site. In this case, the court held that plaintiffs’ claims were barred because the TVPRA claims “necessarily require[d] that the defendant be treated as the publisher or speaker of content provide by another.” Since the plaintiffs were trafficked by means of the third party advertisements on Backpage, there was no harm to them but for the content of the postings.

The court rejected plaintiffs’ attempts to characterize Backpage’s actions as “an affirmative course of conduct” distinct from the exercise of the “traditional publishing or editorial functions” of a website owner. The choice of what words or phrases to be displayed on the site, the decision not to reduce misinformation by changing its policies, and the decisions in structuring its website and posting requirements, in the court’s view, were traditional publisher functions entitled to Section 230 protection.

Does v. Backpage.com, LLC, No. 15-1724 (1st Cir., March 14, 2016)

Evan Brown is a Chicago attorney advising enterprises on important aspects of technology law, including software development, technology and content licensing, and general privacy issues.

See also:
Seventh Circuit sides with Backpage in free speech suit against sheriff

Scroll to top