FAST Act Calls for Examination of Internet of Things

The Internet of Things (IoT), as defined by Wikipedia, is the network of physical objects or “things” embedded with electronics, software, sensors, and network connectivity, which enables these objects to collect and exchange data. The IoT allows objects to be sensed and controlled remotely across existing network infrastructure, creating opportunities for more direct integration between the physical world and computer-based systems, and resulting in improved efficiency, accuracy and economic benefit.  Each thing is uniquely identifiable through its embedded computing system but is able to interoperate within the existing Internet infrastructure.

In short, if we look at the objects we use in everyday life – from our phones, to our laptops, to even our copy machines or printers at work – each is able to collect and potentially exchange vast amounts of data.  While the capabilities of these devices and objects to collect data and exchange data will likely improve our daily lives, it is also important to examine how to protect the privacy and security of the information and data which is collected and shared.

The Fixing America’s Surface Transportation Act (FAST Act) includes a number of provisions related to privacy, including an amendment to the Gramm-Leach-Bliley Act (GLBA) as well as the enactment of the Driver Privacy Act of 2015.  Interestingly, the FAST Act also requires a report on the potential of the IoT to improve transportation services in rural, suburban, and urban areas.

Specifically, Section 3024 of Title III, requires the Secretary of Transportation to submit a report to Congress not later than 180 days after December 4, 2015 (the enactment date of the FAST Act).  The report, presumably to address the issues discussed above, is to include (1) a survey of the communities, cities, and States that are using innovative transportation systems to meet the needs of ageing populations; (2) best practices to protect privacy and security, as determined as a result of such survey; and (3) recommendations with respect to the potential of the IoT to assist local, State, and Federal planners to develop more efficient and accurate projections of the transportation.

While it is unclear exactly what information will be captured in the report, it’s clear the drafters of Section 3024 have recognized the importance of data privacy and security while utilizing the IoT to improve transportation.  On a more personal note, I have to believe I am not alone in hoping that the report will finally address (and correct!) the traffic patters related to my daily commute!

Jackson Lewis P.C. © 2015

Three Trending Topics in IoT: Privacy, Security, and Fog Computing

Cisco has estimated that there will be 50 billion Internet of Things (IoT) devices connected to the Internet by the year 2020. IoT has been a buzzword over the past couple of years. However, the buzz surrounding IoT in the year 2015 has IoT enthusiasts particularly exerted. This year, IoT has taken center stage at many conferences around the world, including the Consumer Electronics Show (CES 2015), SEMI CON 2015, and Createc Japan, among others.

1. IoT will Redefine the Expectations of Privacy

Privacy is of utmost concern to consumers and enterprises alike. For consumers, the deployment of IoT devices in their homes and other places where they typically expect privacy will lead to significant privacy concerns. IoT devices in homes are capable of identifying people’s habits that are otherwise unknown to others. For instance, a washing machine can track how frequently someone does laundry, and what laundry settings they prefer. A shower head can track how often someone showers and what temperature settings they prefer. When consumers purchase these devices, they may not be aware that these IoT devices collect and/or monetize this data.

The world’s biggest Web companies, namely, Google, Facebook, LinkedIn, and Yahoo are currently involved in lawsuits where the issues in the lawsuits relate to consent and whether the Web companies have provided an explicit enough picture of what data is being collected and how the data is being used. To share some perspective on the severity of the legal issues relating to online data collection, more than 250 suits have been filed in the U.S. in the past couple of years against companies’ tracking of online activities, compared to just 10 in the year 2010. As IoT devices become more prevalent, legal issues relating to consent and disclosure of how the data is being collected, used, shared or otherwise monetized will certainly arise.

2. Data and Device Security is Paramount to the Viability of an IoT Solution

At the enterprise level, data security is paramount. IoT devices can be sources of network security breaches and as such, ensuring that IoT devices remain secure is key. When developing and deploying IoT solutions at the enterprise level, enterprises should conduct due diligence to prevent security breaches via the IoT deployment, but also ensure that even if an IoT device is compromised, access to more sensitive data within the network remains secure. Corporations retain confidential data about their customers and are responsible for having adequate safeguards in place to protect the data. Corporations may be liable for deploying IoT solutions that are easily compromised. As we have seen with the countless data breaches over the past couple of years, companies have a lot to lose, financially and otherwise.

3. Immediacy of Access to Data and Fog Computing

For many IoT solutions, timing is everything. Many IoT devices and environments are “latency sensitive,” such that actions need to be taken on the data being collected almost instantaneously. Relying on the “cloud” to process the collected data and generate actions will likely not be a solution for such IoT environments, in which the immediacy of access to data is important. “Fog computing” aims to bring the storage, processing and data intelligence closer to the IoT devices deployed in the physical world to reduce the latency that typically exists with traditional cloud-based solutions. Companies developing large scale IoT solutions should investigate architectures where most of the processing is done at the end of the network and closer to the physical IoT devices.

The Internet of Things has brought about new challenges and opportunities for technology companies. Privacy, security and immediacy of access to data are three important trends companies must consider going forward.

© 2015 Foley & Lardner LLP

October 2015 – gTLD Sunrise Periods Now Open

The first new generic top-level domains (gTLDs, the group of letters after the “dot” in a domain name) have launched their “Sunrise” registration periods.

As of the date of this post, Sunrise periods are open for the following new gTLDs:

.pohl

.allfinanz

.trading

.spreadbetting

.cfd

.swiss

.xn--45q11c (八卦 for “gossip” in Chinese)

.forex

.broker

.earth

.gdn

.kyoto

.feedback

ICANN maintains an up-to-date list of all open Sunrise periods here. This list also provides the closing date of the Sunrise period. We will endeavor to provide information regarding new gTLD launches via this monthly newsletter, but please refer to the list on ICANN’s website for the most up-to-date information – as the list of approved/launched domains can change daily.

Because new gTLD options will be coming on the market over the next year, brand owners should review the list of new gTLDs (a full list can be found here) to identify those that are of interest.

© 2015 Sterne Kessler

Amazon Wins Ruling on Results for Searches on Brands It Doesn’t Sell

On October 21, 2015, the Ninth Circuit ruled that online retailer Amazon does not violate the Lanham Act when, in response to a search for a brand it doesn’t sell, it returns a results page that fails to disclose that fact and simply offers competing products sold under different brands. The decision in MultiTime Machine, Inc. v. Amazon.com, Inc. weakens the “initial interest confusion” doctrine in the Ninth Circuit and will likely be perceived as a significant victory for online retailers.

Plaintiff MultiTime Machine (MTM) sells an expensive military-style watch known as the “MTM Special Ops,” but doesn’t sell it through Amazon. When an Amazon customer types “mtm special ops” into the Amazon search box, the result is a list of other brands of military-style watches that Amazon sells. Meanwhile, “MTM Special Ops” remains visible within the search box and also in smaller type at the top of the page. Nothing on the page indicates that Amazon does not sell MTM products. MTM sued Amazon for trademark infringement, claiming that Amazon’s use of its trademark in this way created a likelihood of confusion.

The district court dismissed the case on summary judgment. MTM appealed. In a 2-1 decision issued July 6, 2015, the Ninth Circuit remanded the case, holding that there were issues of fact as to consumer confusion that precluded summary judgment. MTM then petitioned for a rehearing en banc.

On Wednesday, while that petition was pending, the same panel reversed itself and held in a 2-1 decision that “no rational trier of fact could find that a reasonably prudent consumer accustomed to shopping online would likely be confused by the Amazon search results.” Summary judgment in favor of Amazon was affirmed.

Judge Silverman (the dissenter in the July opinion, now writing for the majority) wrote that Amazon is doing no more that “responding to a customer’s inquiry about a brand it does not carry by … stating clearly (and showing pictures of) what brands it does carry.” In the majority’s view, this is “not unlike when someone walks into a diner, asks for a Coke, and is told ‘No Coke, Pepsi’.”

The Court held that the Ninth Circuit’s traditional eight-factor Sleekcraft test for assessing likelihood of confusion is not appropriate for this case. Sleekcraft is designed for cases analyzing similarity of the marks of competing brands. Here, said the Court, there is no issue as to the other marks involved; the only issue is Amazon’s use of MTM’s mark in displaying search results. In cases involving trademarks in the Internet search context, the more appropriate test is “(1) Who is the relevant reasonable consumer; and (2) What would he reasonably believe based on what he saw on the screen?”

Adopting the standard set forth in Toyota Motor Sales, U.S.A. Inc. v. Tabari, 610 F.3d 1171 (9th Cir. 2010), the Court held that the relevant consumer here is a “reasonably prudent consumer shopping online … Unreasonable, imprudent and inexperienced web-shoppers are not relevant.” The Court also noted that the watches at issue are relatively expensive and that consumers are therefore likely to be even more vigilant than usual.

As for what is seen on the screen, the Court focused on the “clear labeling” of all of the competing products returned in the search. MTM argued that “initial interest confusion” might occur because the phrase “mtm special ops” appears three times at the top of the search results page. It also argued that Amazon should change its results page to explain to consumers that it does not offer MTM watches. The Court brushed off both contentions. “The search results page makes clear to anyone who can read English that Amazon carries only the brands that are clearly and explicitly listed on the web page.”

As a result, in the Court’s view, no jury trial is necessary because there are no material issues of disputed fact. The contents of the web page showing “clear labeling,” and the expensive price of the watches, is undisputed. The Court needs no more to conclude that “no reasonably prudent consumer accustomed to shopping online” could be deceived, even initially.

Judge Bea, who had written the majority opinion in the July decision, wrote a sharp dissent. In his view, a jury is entitled to decide whether shoppers would believe that there is a relationship between MTM and the products listed in the Amazon search results. MTM had argued that this could arise from a belief that MTM had acquired those brands, or because they are other brands from the same parent company (much as Honda and Acura automobiles come from the same company). Determining whether or not MTM is correct, said Judge Bea, is a question for a jury, not appellate judges. This is especially true in a case involving brands whose relationships to each other may not be so obvious to consumers – unlike the relationship between Coke and Pepsi.

Judge Bea claims that, by “usurping the jury function,” the majority effectively overrules the “initial interest confusion” basis for infringement. In his view, the question of whether the defendant’s labeling is clear enough to prevent customers from initially believing that the products are connected with those of plaintiff is a fact-intensive inquiry, and prior Ninth Circuit cases have not applied the doctrine as a matter of law, as the Court does here.

Apart from the technical legal issues, the two opinions reflect differing views of how the public interacts with online commerce. The majority appears to believe that online buying is now so common that consumers are conditioned to understand that entering a trademark as a search term will not necessarily return results pointing only to that brand. Its apparent desire to create a bright-line rule on “clear labeling” may make it easier for e-retailers to move to dismiss, without a trial, infringement claims from brand owners concerned about use of their marks to search for competing products. The dissent is more skeptical about consumer sophistication; its approach would create a greater burden on online retailers to defend against infringement claims.

It is unclear whether the majority intends its holding to be applied only in cases where, as here, the goods are relatively expensive and the brands are not well known. Given this uncertainty, the fact that it was a split decision, the prior petition for rehearing en banc, and the participation by multiple amici curiae, it is possible that there will be an en banc rehearing in this case. If the decision stands, however, it may diminish the doctrine of “initial interest confusion” in the Ninth Circuit and allow a freer hand to online retailers in using trademarks to generate searches for broad classes of competitive products.

© 2015 Foley & Lardner LLP

Deciding what Platform to Use for Your Law Firm Website

I often have clients ask me how frequently they should refresh or update their websites. That is a tricky question. When it comes to content, a website should be updated on an on-going basis – every week is good, and every day is not too much. Frequent content additions will increase the likelihood that your site is viewed often, as search engines catalog content using the keywords users are likely to query and return results based on a combination of the most recently posted content, the closest match to the query and the most highly viewed pages that contain the appropriate keywords. That means the more optimized (good use of keywords) content you post, the more views the content is likely to get.

When it comes to design, a website will begin to look dated in two to three years and should be revisited and updated. This is the perfect time to review the site’s navigation and make sure it has remained user-friendly and consistent with current trends in website design. As with most things in business, having an initial strategy when building a website will reduce the need for changes and make the changes easier to implement when it does come time to refresh the site.

So, what does good initial strategy entail when beginning a website build?

The Importance of CMS Selection

First and foremost, you must think about the foundation the site is built upon. Nearly every website built now has a Content Management System (CMS). A CMS allows for ease in operating the website without a need for knowledge of coding. For instance, adding and deleting content can be easily managed on the back-end of the site with the use of built-in templates. There is no reason for a law firm not to use a CMS. The only questions to consider are which category and type of system to choose. This is the big overall strategy decision, and it will impact the ease of use and updates for the life of the site.

There are two categories of CMSs: Proprietary and Open Source. They provide similar functionality, but they operate very differently. A Proprietary CMS is built and owned by an independent company, and that company “leases” the right for a firm to use the technology. Proprietary was the most used form of legal website CMSs for many years.

Open Source CMSs are built and maintained by programmers throughout the world and are open for anyone to use at no cost. Programmers continually update and add to the code making improvements, which they openly share. This is a newer platform for the legal industry.

Deciding Between Open Source or Proprietary

Proprietary CMSs generally come with a hosting and maintenance plan, providing a sense of security to smaller firms without the in-house resources to update and maintain the site. Though this can ease the burden of website management for the firm, it also requires a monthly or annual fee to keep the site up and running. In addition, as most licensors will not allow access to their code, a site refresh will entail additional fees whenever upgrades are needed.

With the use Open Source CMSs, programmers are continually enhancing the code and the updated functionality is freely shared. Any firm can add the enhanced functionality to their site free of charge. That said the firm must have the in-house capability to do so or contract with an outside vendor to complete the project. If a firm does use an outside vendor to assist, it’s a one-time project fee as opposed to a long-term commitment.

The Move Toward Open Source

For the past several years, law firms have steadily trended toward the use of Open Source platforms and ownership of their websites. Long gone are the days of two or three legal power vendors owning the mass market share of law firm websites by using a formulaic, proprietary build approach and charging for site content and technology updates on an hourly or monthly basis.

Not if, but when you do plan for a refresh or new site build, you can reduce costs and enhance site longevity by using an Open Source platform. There are three main options, WordPress, Drupal and Joomla. There have been many comparisons of these Open Source Code options, and I share the main value/asset for each below.

WordPress: This system works best for small- to medium-sized firm websites. (Most Popular)

Drupal: The most powerful Open Source CMS, it allows for efficient upgrades. (Most Advanced)

Joomla: The better platform for e-commerce, it requires some level of technical coding. (The Compromise between WordPress and Drupal)

There is considerable information on the Internet regarding each of the listed Open Source systems. Identifying which CMS to use, whether proprietary or open source, is key to ensuring a smooth and effective website strategy for years to come.

Article By Sue Remley of Jaffe

© Copyright 2008-2015, Jaffe Associates

On Sale Today – .law Domain Names

Today, all law firms will be able to apply for .law names. This top-level domain name is intended to create an online space in which only regulated, licensed legal practitioners can be found.

In order to purchase your .law domain name, there are specific steps involved, as well as some key dates of which to be aware. Here is a quick guide to help you move forward with purchasing your .law domain.

What domain names should you buy?

  1. Purchase the .law version of your domain name.

  1. Purchase keyword specific URLs that are important to your branding efforts, such as employmentlawyer.law, employment.law, advertisinglaw.law, etc. Note that there could be bidding for some of the more popular domains.

When and where can I register the domain?

Oct. 12 – 18, 2015:

  1. Qualified lawyers can apply for domain names. Domain names will be awarded on a first-come, first-served basis.

  2. There will be a one-time Early Access Program (EAP) fee as well as an annual registration fee.

  3. Pricing will decrease each day for the first seven days of General Availability – check with an authorized registrar for purchasing details.

October 19 – Future:

  • Qualified lawyers can still purchase domain names on a first-come, first-served basis, minus the EAP fee.

What is the eligibility process?

  1. Decide which of your firm’s lawyers will be designated a “qualified lawyer” for purposes of purchasing .law domain names – such as your managing partner or marketing partner.

  1. Gather the following information for your qualified lawyer:

  1. Attorney’s name (as it appears on his/her bar registration)

  2. State/jurisdiction(s) where attorney is licensed to practice

  3. Year of registration: Year(s) admitted to practice

  4. Bar registration number(s)

  5. Bar association state and country

How long does it take?

The verification process should take 48 hours, after which time the domain names you applied for will be registered to you.

Copyright 2015 Knapp Marketing

Multistakeholder Group Seeks Comment on Draft Framework for IoT Device Manufacturers

Earlier this week, the Online Trust Alliance released a draft framework of best practices for Internet of Things device manufacturers and developers, such as connected home devices and wearable fitness and health technologies.  The OTA is seeking comments on its draft framework by September 14.

The framework acknowledges that not all requirements may be applicable to every product due to technical limitations and firmware issues.  However, it generally proposes a number of specific security requirements, including encryption of personally identifiable data at rest and in transit, password protection protocols, and penetration testing.  In addition, it proposes the following requirements:

  • A privacy policy that is readily available to review prior to product purchase, download or activation, and that discloses the consequences of declining to opt-in or opt-out of policies on key product functionality and features.

  • A privacy policy display that is optimized for the user interface to maximize readability.  The working group recommends layered privacy policies for this purpose.

  • Conspicuous disclosure of all personally identifiable data collected.

  • Data sharing is limited to service providers that agree to limit usage of data for specified purposes and maintain data as confidential or to other third parties as clearly disclosed to users.

  • Disclosure of the term and duration of the data retention policy.  In addition, the framework goes on to state that data generally should be retained only for as long as the user is using the device or to meet legal requirements.

  • Disclosure of whether the user has the ability to remove or anonymize personal and sensitive data other than purchase history by discontinuing device use.

  • Disclosure of what functions will work if “smart” functions are disabled or stopped.

  • For products and services designed to be used by multiple family members, the ability to create individual profiles and/or have parental or administrative controls and passwords.

  • Mechanisms for users to contact the company regarding various issues, transfer ownership, manage privacy and security preference.

In addition, the draft framework makes various other recommendations that go above and beyond the proposed baseline requirements, although acknowledging that the recommendations may not be applicable to every device or service.

© 2015 Covington & Burling LLP

How to Avoid Being Penalized by Google [Infographic]

Google algorithm updates are usually accompanied by much wailing and gnashing of teeth among marketers, and sometimes it’s for good reason. With one flick of a switch, all that hard work to improve search results can be undone if your site no longer complies with what Google considers to be best practices for your website and blog.

Of course, Google’s intention is not to penalize sites — it’s to improve the user experience. Recently, Internet marketing consulting company QuickSprout developed the infographic below with specifics on what to avoid and strategies for ensuring your sites don’t get penalized by Google.

These tips are easy to understand and not too difficult to implement. The reward of not incurring a Google penalty is well worth your time in becoming educated on current best practices in SEO for Google:

How to Avoid Being Penalized by Google [Infographic]

© The Rainmaker Institute, All Rights Reserved

New Internet Domain Names for Banks: What You Need to Know Now

The world of the Internet is in a state of change. In 2008, the Internet Corporation for Assigned Names and Numbers (ICANN), the administrator of the Domain Name System, approved a new program that enables the creation of an unlimited number of new generic Top-Level Domains (gTLDs). In response, a coalition of banks, insurance companies and financial services associations partnered to establish fTLD Registry Services, LLC (fTLD) in order to apply for and operate the .BANK gTLD on behalf of the global banking community. On September 25, 2014, fTLD was granted the right to operate .BANK as a new gTLD.

The .BANK gTLDs will open up much-needed real estate on the Internet, providing new marketing, branding and cross-selling opportunities for the banking community. Eligible institutions will be able to obtain domain name registrations with a .BANK suffix instead of .COM. In addition, fTLD will implement enhanced control systems to mitigate cyber risks from malicious activities over the Internet. For example, registrants will be required to include charter verification by the registrant’s regulator before they can register a domain name in the .BANK gTLD.

The registration system for the .BANK gTLD became available mid-May 2015 for banks with registered trademarks with ICANN’s Trademark Clearing House (TMCH). The figure below illustrates the timeline for obtaining .BANK gTLDs.

domain name for banks

Domains will be awarded on a first-come, first-served basis in all registration periods. The Qualified Launch Program for Founders period was available for founding members of fTLD that have registered their trademarks in ICANN’s TMCH. The Sunrise period will be available for eligible members of the global banking community that have registered their trademark with ICANN’s TMCH. During the 30-day Sunrise period, banks that meet fTLD’s eligibility requirements will have an advance opportunity, before names are available to other eligible members of the banking community, to register domain names that are exact matches to their registered trademarks. The Founders period will be available to the founding members of fTLD that have yet to register their domains. Eligible members of the global banking community that do not meet the Sunrise or Founders requirements can then register their trademarks, on an ongoing basis, during the General Availability period starting June 24, 2015.

The .BANK gTLD provides new opportunities for marketing, branding and other promotional activities. However, once the Sunrise and Founders periods expire, domain names will be granted on a first-come, first-served basis. Institutions, therefore, should review their current marketing plan to determine if and when registration of the newly available .BANK domain names is appropriate.

© 2015 Vedder Price

Unprecedented Move: Vox Populi Extends Sunrise Deadline for “.sucks” Domain Registration

In a move that is being interpreted as possible overreaching, Vox Populi, operator of the .sucks domain name, extended the period for registering .sucks during the “sunrise period” without notice. The new deadline to register the .sucks domain name is June 19. Not only is it $2,000 or more to register each .sucks domain name, there is also an annual renewal fee of $2,000.

There is online speculation that Vox’s extension is motivated by a relatively large surge in last minute registrations before the original deadline of May 29. This might indicate that Vox is extending the sunrise period for the purpose of taking additional profits from the registration of this already high priced gTLD.

What is a trademark owner to do?

  • Some businesses are defensively registering .sucks then “parking” the domain name to prevent others from using it.

  • Other trademark owners plan to proactively “own” .sucks as a way to receive and curate criticism. This is seen as a way to allow consumers to vet issues and allow companies to manage legitimate issues.

  • Some trademark owners have decided to not register the domain name.

The decision that is right for individual businesses should take into account a variety of factors uniquely associated with the business and its anticipated future use of the Internet for communicating criticism about goods and/or services.

Vox is promoting the registration of this domain name as being consumer friendly providing a “voice” for the people. Vox retained Ralph Nader and Dr. Martin Luther King (via vintage film clip) as two of their celebrity spokes people to promote .sucks as a “protest word.”

There has been significant controversy regarding the launch of the new domain name .sucks. Foremost is Vox’s pricing strategy. Vox Populi (Voice of the People) is offering the domain name to trademark owners for $2,000 for each registration during the “sunrise period.” The sunrise period is an initial brief period of time, usually about two months, during which a trademark owner has priority to register their trademark with the new gTLD. As an example: “chicagocubs.sucks” could be registered by the Chicago Cubs as the trademark owner during the sunrise period for $2,000. Most new domain names (.coffee, .wedding, .football, .media, etc.) can be registered during their sunrise period for $100 – $200. However, if the Cubs decide to not register .sucks, a party qualifying for a “Consumer Advocate Subsidized” registration (as determined by Vox) can register “chicagocubs.sucks” after the sunrise period for only $9.95.

Many trademark owners are questioning whether Vox’s pricing strategy is an impermissible windfall or free speech. Some parties have already brought this matter to the U.S. Federal Trade Commission (FTC) and the Competition Bureau Canada for consideration. Although no final decision has been reached by either agency, FTC Chairwoman Edith Ramirez provided a preliminary response pointedly reminding Internet Corporation for Assigned Names and Numbers (ICANN), acting on behalf of the concerned parties, that the FTC weighed in on these and similar issues years ago prior to the launch of the new gTLD program. While Chairwoman Ramirez cannot comment on the existence of pending investigations she left the door open for monitoring the actions of registries and taking action in appropriate cases “if we have reason to believe an entity has engaged in deceptive or unfair practices in violation of [the] consumer protection authority.” Chairwoman Ramirez urged ICANN to address these issues internally since the dramatic growth of gTLDs brought on by ICANN’s program cannot be “feasibly addressed on a case-by-case basis” by the FTC.

Over the first 30 years of the publically accessible Internet approximately 220 gTLDs, including country codes were made available. Between 2011 and 2014 ICANN initiated a program to create new gTLDs. The stated goal of these new gTLDs was to be inclusive of new interest groups, non-Latin script languages and to anticipate the expansion of the Internet. This initiative was wildly successful with 1,930 applications being received by ICANN. After significant review of the applications approximately 1,370 new gTLDs were scheduled for launch. As of May 1, 2015, the launch of these new gTLDs is approximately one quarter completed with approximately 1,000 new gTLDs still to launch.

© 2015 BARNES & THORNBURG LLP