Last updated: 
1 week 5 days ago
Blog Manager
One of Jisc’s activities is to monitor and, where possible, influence regulatory developments that affect us and our customer universities, colleges and schools as operators of large computer networks. Since Janet and its customer networks are classified by Ofcom as private networks, postings here are likely to concentrate on the regulation of those networks. Postings here are, to the best of our knowledge, accurate on the date they are made, but may well become out of date or unreliable at unpredictable times thereafter. Before taking action that may have legal consequences, you should talk to your own lawyers. NEW: To help navigate the many posts on the General Data Protection Regulation, I've classified them as most relevant to developing a GDPR compliance process, GDPR's effect on specific topics, or how the GDPR is being developed. Or you can just use my free GDPR project plan.

Group administrators:

Don't Look, Don't Touch

Wednesday, June 6, 2012 - 10:57

That seems to be the rather depressing message from the European Court of Justice to websites that allow third parties to post content (e.g. the comments on this blog). Article 14 of the European eCommerce Directive says that those hosts are protected from liability for the content until they are aware of specific infringements of the law. Once aware, they must act expeditiously to deal with the problem. Usually that "awareness" will come in the form of a notice from the party whose rights are infringed, leading to the common "notice and takedown" process.

But in ruling on a trademark case between eBay and L'Oreal the Court has concluded that Article 14 protection doesn't arise at all if the website does more than "providing that [hosting] service neutrally by a merely technical and automatic processing of the data provided by its customers" (para 113). The ruling agrees with an earlier case involving Google that a site can set terms and provide general information about its service, and  be paid for it, without breaching this requirement, however an action such as "optimising the presentation of the offers for sale in question or promoting those offers" (para 116) would mean that the host was no longer a neutral participant and could lose Article 14 protection.

The Court also considered how the host might obtain "awareness" of an infringement and thereby lose protection. They confirm what has long been suspected: that a host can gain awareness "as the result of an investigation undertaken on its own initiative" (para 122). However they also expand the kind of awareness that will suffice: knowledge of a specific infringement is still sufficient to require expeditious action, but (if the illegality is of a kind that could lead to an award of damages) so is being "aware of facts or circumstances on the basis of which a diligent economic operator should have identified the illegality in question" (para 120).

This confirms a worry I expressed in our response to the recent UK Government consultation on defamation law: that life is getting increasingly hard for web hosts who actually want to police their own sites. If there is a risk that content posted by third parties may break UK civil law (e.g. defamation or copyright) then a host who chooses to check it will now have to be as good as a "diligent economic operator" at recognising  illegality and dealing with it. A site that actively intervenes (for example by highlighting particular postings) will have to be even more careful, since that intervention may take them beyond the neutral service provision that the Directive protects.

Effective processes for dealing with complaints about websites have always been a good idea: it seems that rules and training for anyone doing self-policing of them may now be at least as important.