California Invasion of Privacy Act Lawsuits Challenge Website Live Chats

Posted by:

Does your business use live chats to offer customer service support to your customers?  Throughout the past year, hundreds of nearly identical suits have been filed alleging that the live chat features on businesses’ websites may violate the California Invasion of Privacy Act (CIPA).  Most of the lawsuits have been filed by attorneys at the Newport Beach, California, firm called Pacific Trial Attorneys, but other firms have brought very similar lawsuits.

CIPA is a set of California penal statutes that are directed against unconsented wiretapping or recording of telephone communications. The CIPA complaints allege that some software vendors that facilitate customer service live chats are acting as third-party eavesdroppers or wiretappers who share sensitive customer information with entities such as Meta for purposes of targeted advertising. In order to fit their allegations of internet-based communications into the CIPA wiretapping and eavesdropping prohibitions protecting telephone communications, the lawsuits often allege that the plaintiffs accessed the defendant’s live chat through their smart phone’s web browser.

The Conkle firm attorneys believe the plaintiff law firms’ approach is a flawed legal theory that is an unwarranted attempt to extend the scope of the CIPA statute.  At present, no reported decisions have determined the merits of these types of claims, and it appears that most of the lawsuits are intended primarily to draw settlements from defendants wishing to avoid the expense and risk of defending themselves.

If your business has a web presence that involves a “chat” function, it may be prudent to take proactive measures to reduce the risk of having to defend a CIPA lawsuit.  Such measures include plain disclosures to live chat users about the involvement of a third-party software vendor, a method of documenting consent of the live chat user, and links to an appropriately-phrased privacy policy. Such prophylactic measures will not only help deter plaintiffs’ lawyers from targeting your business for CIPA violations but can also contribute to a transparent and trustworthy customer experience.

It is also important that you respond quickly and appropriately if you receive a warning letter or demand from a law firm claiming that your business is violating CIPA. A swift and appropriate response is an important part of your defense to such claims and may ward off a lawsuit that is otherwise almost sure to follow. Should you receive a demand letter alleging a CIPA violation based on the above-conduct, it is best to promptly contact experienced counsel for guidance and assistance. Conkle, Kremer & Engel attorneys are very familiar with this area of the law and can guide your business to improve website chat features to forestall such claims, respond to demand letters or, if necessary, defend CIPA litigation.

0

CCPA Metrics Disclosure Requirement Takes Effect July 1, 2021

Posted by:

Effective July 1, 2021, annual public disclosure requirements will start to apply to every business that is required to comply with the California Consumer Privacy Act (“CCPA”), and which knows or should know that (alone or in combination) it  buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes the personal information of 10 million or more California residents in a calendar year. This requires these businesses to compile the following metrics for the previous calendar year (January 1, 2020 through December 31, 2020):

  1. The number of requests to know that the business received, complied with in whole or in part, and denied;
  2. The number of requests to delete that the business received, complied with in whole or in part, and denied;
  3. The number of requests to opt-out that the business received, complied with in whole or in part, and denied; and
  4. The median or mean number of days within which the business substantively responded to requests to know, requests to delete, and requests to opt-out.

This information must be disclosed in the business’s privacy policy or posted on its website and accessible from a link included in the privacy policy.  The metrics must be updated annually by July 1. In the disclosure, a business may choose to disclose the number of requests that were denied in whole or in part because the request was not verifiable, was not made by a consumer, called for information exempt from disclosure, or was denied on other grounds.

To review, the CCPA, which became effective on January 1, 2020, grants California consumers the right to control the personal information that businesses collect about them. Through the CCPA, California residents have the right to know what personal information is being collected, whether their personal information was sold or disclosed (and to whom), and may request that businesses delete their personal information.  Currently, only for-profit businesses that collect consumers’ personal information and meet one or more of these criteria must comply: (1) the business has an annual gross revenue in excess of $25 million; (2) the business collects, buys, receives, sells, or shares the personal information of 50,000 or more California-resident consumers, household, or devices; or (3) the business derives 50% or more of its annual revenue from selling consumers’ personal information. For more information about the rights afforded to California residents, and businesses’ obligations under the CCPA, see below for some of our previous CCPA blog posts.

Among other requirements, all businesses that are required to comply with the CCPA must maintain records of CCPA consumer requests and how the business responded to the requests for at least 24 months. These businesses are required to implement and maintain reasonable security procedures and practices in maintaining these records. Such records may be maintained in a ticket or log format, provided that the ticket or log includes the date of request, nature of request, manner in which the request was made, the date of the business’s response, the nature of the response, and the basis for the denial of the request if the request is denied in whole or in part.

In addition, the businesses must establish, document, and comply with a training policy to ensure that all individuals responsible for handling consumer requests made under the CCPA or the business’s compliance with the CCPA are informed of all the requirements in these regulations and the CCPA.

Attorneys at Conkle, Kremer & Engel are staying current with the CCPA and to guide their clients through compliance with this sweeping data privacy law.

0

Timed Out vs Youabian: The Conkle Firm Establishes that the Right of Publicity is an Assignable Property Right

Posted by:

It is virtually impossible to get through a day without seeing the “right of publicity” in action.  Everywhere, there are advertisements featuring photographs of professional models and celebrities of every variety published to sell all types of products and services.  It is strange, then, that no statute or case precedent in California specifically established that models and celebrities have the ability to assign or license those publicity rights for proper use and for enforcement if their likenesses are misused.  Until now.

On September 12, 2014, the California Court of Appeal agreed with the arguments of Eric Engel of the Conkle Firm (working with co-counsel at Hall & Lim), and established the first published precedent in California that explicitly holds that the right of publicity is assignable.  In Timed Out, LLC v. Youabian, Inc., Case No. B242820, the Second District Court of Appeal finally settled a long-simmering dispute that had confused many lower courts:  Whether the right of publicity is a “personal right” that can only be exercised during lifetime by the individual owner, or whether the right of publicity is a form of intellectual property that can be freely assigned and licensed to others for use and enforcement.

The dispute had its origin many years ago, when an influential tort law treatise by famed Professor Prosser observed that the right of publicity historically derived from the “right of privacy.”  The classic form of the “right of privacy” is protection against hurt feelings and injury to personal reputation that can occur when personal information about a private individual is published without her consent.  That type of injury is considered personal in nature and cannot generally be assigned.  But, as the Timed Out decision observed, the right of publicity has evolved away from its origin into a distinctly commercial and non-personal interest.

The right of publicity is now virtually the opposite of the original right of privacy:  The right of publicity is the ability of a person to control the commercial value of the use of her image and information.  Timed Out recognizes that a person’s likeness, voice, signature or other identifying characteristics can have substantial commercial value, regardless of whether the person is a celebrity and regardless of whether the commercial value of the identified person’s “persona” is created by happenstance or by investment of great time and effort.  Timed Out finally establishes that the value created is a form of property, freely assignable by the person who owns it.

The Court of Appeal also resolved a separate important issue that is frequently in dispute in right of publicity actions:  Whether federal copyright law subsumes and preempts right of publicity claims.  Timed Out v. Youabian established that the right of publicity is distinct from copyright interests in a photograph or image, and that right of publicity claims generally are not preempted by federal copyright laws.

The effect of Timed Out LLC v. Youabian, Inc. for models, celebrities, manufacturers, advertisers and resellers is to finally establish that the right of publicity can be licensed and assigned to third parties, and enforced by third parties such as Timed Out, and that such rights are independent of federal copyright interests.  That means models and celebrities no longer have to make the difficult decision whether it is worth their time, expense and effort to pursue claims when their publicity rights are violated – they can assign the affected publicity rights to agencies such as Timed Out to pursue the claims.  Manufacturers, advertisers and resellers will no longer waste effort and time attempting to determine whether the publicity rights were assignable.  They can and should instead focus on establishing whether they had the necessary rights to use the image, photograph, likeness, voice or other identifying characteristic of the “persona” of the model or celebrity.  This puts a premium on making sure that any “model releases” obtained prior to advertising are well-written and appropriate for each particular use of the model or celebrity’s photograph, image, likeness or other identifying features.

Conkle, Kremer & Engel counsels and helps clients avoid these kinds of issues with effective model releases, licenses and assignments.  Timed Out v. Youabian demonstrates that CK&E is also at the forefront of enforcing the right of publicity when model and celebrity rights are violated.

0

Manuel Noriega and Lindsay Lohan have No Doubt about their Right of Publicity

Posted by:

What do Manuel Noriega, Lindsay Lohan and the rock group No Doubt have in common? All of them have sued videogame makers for infringement of their rights of publicity. On July 15, 2014, Manuel Noriega sued videogame maker Activision Blizzard in Los Angeles Superior Court when his name and animated likeness were included in the videogame Call of Duty: Black Ops II. Less than two weeks earlier, Lindsay Lohan filed a Complaint alleging that her likeness was used, under a pseudonym of “Lacey Jonas,” in the Rockstar Games videogame Grand Theft Auto V. No Doubt alleged that Activision exceeded the consent it gave for use of band members’ likenesses as avatars in the videogame Band Hero.

These claims seem to be emblematic of a recent upswing in claims of violations of the “right of publicity”.  One prominent example is Davis v. Electronic Arts, a case on behalf of some 6,000 retired pro football players who are suing Electronic Arts over use of their identities in the Madden NFL video game series.  In arguments pending in the Ninth Circuit Court of Appeal, Electronic Arts claims First Amendment protection for claimed “transformative use” of the players’ images.  Even if that argument were successful, it will not likely be of much help to others who simply use a photograph or other unadorned likeness of an individual.

California and most other states recognize that a person has a right to protect his or her name, likeness, signature, voice and other identifying aspects of personae from commercial exploitation without consent. The right of publicity protects not just photographs but all forms of likenesses, including animated versions of people in videogames. The right of publicity is a type of intellectual property – in some ways analogous to (but not the same as) a trademark. An important point to understand is that the right of publicity is not ordinarily precluded simply by ownership or license of the copyright in the image – even if you took a photo of Lindsay Lohan yourself and you own the copyright in that photograph, that in itself generally does not mean you can use it in an advertisement to sell a product without Lindsay Lohan’s consent.

The right of publicity is distinct from rights protecting against slander or defamation – there is no requirement that a person’s reputation has been harmed in any way, or that he or she ever had a positive reputation. Manuel Noriega is probably best known as a former leader of Panama who was deposed, tried and convicted of drug trafficking, racketeering and money laundering. Nonetheless, Manuel Noriega has the same right to prevent others from commercially exploiting his name and likeness as anyone.

An important and often overlooked aspect of the right of publicity is that it is a right held by everyone – not just celebrities. While celebrities presumably may command more money for the commercial use of their identities, everyone has the same right to protect his or her name from commercial exploitation without consent, regardless of previous anonymity.

This is a particularly important lesson for businesses that might be inclined to scour the Internet, copy a photograph of some unknown model and use it in advertising or packaging. In addition to the risk that unauthorized copying and use might violate a copyright in the photo, such unauthorized use for commercial promotion runs a strong risk of violating the model’s right of publicity and giving rise to a claim for damages. Even a business that has ordered a photo of a professional model specifically for use in advertising or packaging would do well to check whether the model signed a release that covers the particular use, because model releases can differ in scope, duration and effect.

Conkle, Kremer & Engel has been involved on both sides of the right of publicity – defending actions by models against companies who thought they had sufficient releases of the models’ rights of publicity, and asserting models’ rights to be compensated for the commercial value of their likenesses. CK&E attorneys stay current on the developing law of the right of publicity, which is a quickly expanding area of law affecting everyone from manufacturers and marketers to models, celebrities and ordinary people.

0