Computers, Privacy & the Constitution

View   r1
NicoleKimFirstPaper 1 - 04 Mar 2013 - Main.NicoleKim
Line: 1 to 1
Added:
>
>
META TOPICPARENT name="WebPreferences"
On February 26th, the 9th Circuit denied petitions for rehearing and petitions for rehearing en banc of the $9.5 million settlement approved by the district court in Lane v. Facebook, Inc.. The settlement pertained to Beacon, which was controversially part of Facebook’s advertisement system from November 2007 to September 2009. The 9th Circuit’s refusal to review the settlement means that Facebook members, contrary to the goal of class action lawsuits, are left in no better position after the settlement than before, due to the cy pres award to a charity Facebook is ordered to found.

FACTS

“Beacon” was launched in November 2007. It was meant to allow “members to share with friends information about what they do elsewhere on the Internet.” Lane v. Facebook, Inc., 696 F.3d 811, 816 (9th Cir. 2012). In short, it sent data from external websites to Facebook, which allowed for targeted advertising and publishing of external activities on members’ personal profiles. Companies such as Overstock.com, Blockbuster, and Bluefly contracted with Facebook to participate in the Beacon program.

The program was not opt-in; it never required the Facebook members to give affirmative consent in order to participate. Many members complained about a violation to their privacy. While one could “opt-out” of the Beacon program, in order to do so the member had to understand Facebook’s privacy controls, but also those of third party Beacon participantshttp://docs.justia.com/cases/federal/district-courts/california/candce/5:2008cv03845/206085/1/. Further, there was no option to turn off the program altogether. A Computer Associates security researcher found that Beacon reported back to Facebook about a member’s activities on third party participant sites, even if users were logged off Facebook and opted out of Beacon. There were many complaints by Facebook users about Beacon – within ten days, more than 50,000 Facebook members signed a petition objecting to the program. The Beacon program remained turned on by default until December 2007, when, in response to negative press and negative responses by Facebook members, Facebook instituted new privacy controls. Ultimately Beacon was taken down altogether in 2009, as a condition of the class action settlement.

As a result of the settlement, the plaintiff’s attorneys were paid around $2.5 million; the 19 named plaintiffs on the class action received amounts varying from $1,000 to $15,000; but the remaining $6.5 million was not disbursed to the class, and instead was granted cy pres to fund (and found) a charity called the Digital Trust Foundation. The Foundation will directed by a three-person board, including Facebook’s director of public policy, Tim Sparapani. The Foundation made a written commitment to “fund and sponsor programs designed to educate users, regulators[,] and enterprises regarding critical issues relating to protection of identity and personal information online through user control, and the protection of users from online threats.” In short, the Foundation, created by Facebook’s money, which has a Facebook officer as a member of its three-person board, would do no work to remedy Internet companies’ unauthorized disclosure of private information and invasion of privacy. Rather, its goal will be to educate users and to shift the onus of responsibility for invasion of privacy to the person who had their private information disseminated.

JUDGE MILAN SMITH’S DISSENT

The cy pres settlement drew criticism and challenges, including from the Electronic Privacy Information Center. “[T]he term ‘cy pres’ derives from the Norman French expression cy pres comme possible, which means ‘as near as possible,’” and arose as a rule of construction to save a testamentary charitable gift that would otherwise fail, allowing the next best use of the funds. Democratic Cent. Comm. v. Washington Metro. Area Transit Comm’n, 84 F.3d 451, 455 n.1 (D.C. Cir. 1996). Upon the 9th Circuit’s denial of rehearing en banc, Judge M. Smith, joined by Judges Kozinski, O’Scannlain, Bybee, Bea, and Ikuta, dissented on the grounds that the cy pres award (1) was neither reasonably certain to benefit the class, (2) nor advanced the objectives of the statutes relied upon in bringing suit.

As Judge Smith noted, the Digital Trust Foundation has no record of service in remedying the types of wrongs alleged by class action plaintiffs, because the Foundation is going to be created as a part of the settlement. As such, it has no history whatsoever. Arguably, having a organization specifically created to address the types of wrongs alleged by plaintiffs could be an appropriate remedy, as long as the funds granted by the settlement would be definitely and narrowly used for the benefit of class members. However, “[[http://cdn.ca9.uscourts.gov/datastore/opinions/2013/02/26/10-16380.pdf][[f]ashioning an open-ended, one-sentence mission statement]] . . . completely eviscerate[s] the meaning of [the 9th Circuit’s] previously controlling case law” on cy pres. The Foundation’s written commitment is to fund and sponsor “programs” to “educate users” on “critical issues” relating to Internet privacy—very general terms.

Ninth Circuit precedent requires that charities spend cy pres funds to advance “objectives of the underlying statutes.” Nachshin v. AOL, LLC, 663 F.3d 1034, 1036 (9th Cir. 2011). However, in this case, all but one of the underlying statutes under which class action plaintiffs brought their cases—the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Video Privacy Protection Act, and the California Computer Crime Law (exception is the California Consumer Legal Remedies Act)—are meant to prevent the unauthorized access or disclosure of private information. Given that Facebook already has possession of all of member information, it seems rather pointless to have a charity that will focus on teaching users on how to protect themselves “through user control” and from “online threats.” If cy pres is supposed to mean “as near as possible,” this falls far short of the mark. As Judge Smith pithily notes, the only way the Foundation could teach Facebook users to protect themselves from Facebook is if it “teaches Facebook users not to use Facebook. That seems unlikely.” And indeed, this seems even more unlikely given Facebook’s presence on the board.

CONCLUSION

As it stands, the cy pres award has been diverted away from plaintiffs into a cause that doesn’t seem like it is designed to redress the wrongs done to the class. As such, it doesn’t benefit the class, and the 9th Circuit should have chosen to rehear the settlement for plaintiffs’ true benefit.

-- NicoleKim - 04 Mar 2013

 
<--/commentPlugin-->

Revision 1r1 - 04 Mar 2013 - 03:32:18 - NicoleKim
This site is powered by the TWiki collaboration platform.
All material on this collaboration platform is the property of the contributing authors.
All material marked as authored by Eben Moglen is available under the license terms CC-BY-SA version 4.
Syndicate this site RSSATOM