Law Firm Cybersecurity: The State of Preventative and Remedial Regulation Governing Data Breaches in the Legal Profession

By: Madelyn Tarr With the looming threat of the next hacking scandal, data protection efforts in law firms are becoming increasingly crucial in maintaining client confidentiality. This paper addresses ethical and legal issues arising with data storage and privacy in law firms. The American Bar Association’s Model Rules present an ethical standard for cybersecurity measures, which many states have adopted and interpreted. Other than state legislation mandating timely disclosure after a data breach, few legal standards govern law firm data breaches. As technology advances rapidly, the law must address preventative and remedial measures more effectively to protect clients from data breaches caused by outdated or ineffective cybersecurity procedures in law firms. These measures should include setting a minimum standard of care for data security protection and creating a private cause of action for individuals whose personal information has been improperly accessed because of a failure to comply with those standards. Download Full Article (PDF) Cite: 15 Duke L. & Tech. Rev. 235

Websites as Facilities Under ADA Title III

By: Ryan C. Brunner Title III of the Americans with Disabilities Act requires public accommodations—private entities that offer goods or services to the public—to be accessible to individuals with disabilities. There is an ongoing debate about whether Title III applies to websites that offer services to the public, but this debate may be resolved in the coming years by litigation or Department of Justice regulations. Assuming for the sake of argument that Title III will eventually be applied to websites, the next inquiry is what that application should look like. The regulatory definition of “facilities” should be amended to include nonphysical places of public accommodations. This change would open the door to a multilayered approach to accessible websites, wherein existing websites are subject to relatively lax requirements but new and altered websites are subject to stricter requirements. Download Full Article (PDF) Cite: 15 Duke L. & Tech. Rev. 171

Schools, Speech, and Smartphones: Online Speech and the Evolution of the Tinker Standard

By: Aleaha Jones Under the Supreme Court’s holding in Tinker v. Des Moines Independent Community School District, public schools may only restrict student speech where the speech is reasonably forecasted to cause a “substantial and material disruption.” With online forums calling into question who may control speech and forecast its impact, the circuit courts have granted public schools broad authority to monitor, and punish, their students for online activity that occurs off-campus. The Supreme Court recently declined the opportunity to reverse this disturbing trend by denying certiorari for Bell v. Itawamba County. As a result, questions remain unanswered regarding students’ right to free speech and how courts should address First Amendment cases in the digital realm. Download Full Article (PDF) Cite: 15 Duke L. & Tech. Rev. 155

What’s in a Name: Cable Systems, FilmOn, and Judicial Consideration of the Applicability of the Copyright Act’s Compulsory License to Online Broadcasters of Cable Content

By: Kathryn M. Boyd The way we consume media today is vastly different from the way media was consumed in 1976, when the Copyright Act created the compulsory license for cable systems. The compulsory license allowed cable systems, as defined by the Copyright Act, to pay a set fee for the right to air television programming rather than working out individual deals with each group that owned the copyright in the programming, and helped make television more widely accessible to the viewing public. FilmOn, a company that uses a mini-antenna system to capture and retransmit broadcast network signals, is now seeking access to the compulsory license. In three concurrent legal cases in New York, California, and D.C., FilmOn argues that it meets the statutory requirements to classify as a cable system. This Issue Brief examines the legal history of cable systems and considers the effects of agency influence, policy concerns, and the lack of judicial or congressional resolution regarding FilmOn’s contested legal status. Download Full Article (PDF) Cite: 15 Duke L. & Tech. Rev. 139

Unprotected and Unpersuaded: The FCC’s Flawed Merger Review Procedures

By: Trey O’Callaghan In CBS Corporation v. FCC, the D.C. Circuit struck down the Federal Communication Commission’s rules for protecting confidential information that it collects during certain merger proceedings. In response, the Commission released a new order, pursuant to the Charter, Time Warner, and Bright House merger proceeding, for protecting confidential information. This iBrief analyzes the policy and legal implications of the Order, arguing that the Order is unlawful because it violates the Trade Secrets Act and notice-and-comment rulemaking requirements. Download Full Article (PDF) Cite: 15 Duke L. & Tech. Rev. 39

Police Body Worn Cameras and Privacy: Retaining Benefits While Reducing Public Concerns

By: Richard Lin Recent high-profile incidents of police misconduct have led to calls for increased police accountability. One proposed reform is to equip police officers with body worn cameras, which provide more reliable evidence than eyewitness accounts. However, such cameras may pose privacy concerns for individuals who are recorded, as the footage may fall under open records statutes that would require the footage to be released upon request. Furthermore, storage of video data is costly, and redaction of video for release is time-consuming. While exempting all body camera video from release would take care of privacy issues, it would also prevent the public from using body camera footage to uncover misconduct. Agencies and lawmakers can address privacy problems successfully by using data management techniques to identify and preserve critical video evidence, and allowing non-critical video to be deleted under data-retention policies. Furthermore, software redaction may be used to produce releasable video that does not threaten the privacy of recorded individuals. Download Full Article (PDF) Cite: 14 Duke L. & Tech. Rev. 346

The Silence After the Beep: Envisioning an Emergency Information System to Serve the Visually Impaired

By: Elana R. Reman Due to a series of legal and regulatory setbacks, media accessibility regulations for consumers who are blind and visually impaired have lagged significantly behind those for deaf individuals. Until April 2014, when the Federal Communications Commission’s Emergency Information Order took effect, blind consumers were left “in the dark” when their safety mattered most—during weather emergencies—because visual emergency information displayed in the on-screen crawl during television programming was not accessible in an aural format. The Commission now mandates that this information be provided in an aural form through the secondary audio stream for linear programming viewed on televisions and mobile devices and other “second screens” used inside the home over the MVPD’s network, but this requirement leaves many issues unresolved. This Issue Brief examines and analyzes the arguments made by industry and consumer groups for and against expanded regulation, and makes several recommendations that efficiently fill gaps in the current regulatory requirements for accessible emergency information. These recommendations are technically feasible, not unduly burdensome, and necessary to effectuate the purpose of the Twenty-First Century Communications and Video Accessibility Act of 2010. Specifically, the Commission can extend emergency information regulations to the entities it failed to reach with

The NLRB’s Purple Communications Decision: Email, Property, and the Changing Patterns of Industrial Life

By: Josh Carroll On December 11th, 2014, in a much-anticipated case, the National Labor Relations Board (“NLRB”) held in a 3-2 decision that employees with access to an employer’s email system had a presumptive right to use that email system during non-working time under Section 7 of the National Labor Relations Act (“NLRA”). In an attempt to adapt to the “changing patterns of industrial life,” the NLRB reversed a seven-year precedent by overturning In re Guard Publ’g Co., 351 N.L.R.B. 1110 (2007), and thereby gave employees the statutory right to use employer email systems for non-business purposes. This issue brief argues that the majority opinion in Purple Commc’ns, Inc., 361 N.L.R.B. No. 126 (2014) erroneously presumed that a ban on employer email systems interfered with employees’ rights to engage in concerted activities under Section 7. In reality, the influx of alternative avenues of communication, such as smartphones, social media, and tablets, have substantially grown for employees over the past several years, thus strengthening employees’ Section 7 rights. The new framework set forth in Purple Communications not only exaggerates the need for employees to exercise their Section 7 rights by using a company’s email system, but also unfairly burdens an employer’s

Legal Nature of Emails: A Comparative Perspective

By: Edina Harbinja There is currently a conflict between laws and the market in their treatment of email. Laws mandate that emails are not protected as property unless copyrightable or protected by another legal mechanism. But the market suggests that emails are user-owned property without further qualification. Moreover, the nature of email is treated slightly differently between the U.S. and U.K. legal regimes. While the current legal regimes applicable to email in the U.K. and U.S. are reasonable, legal harmonization within these systems, and with the service provider market, should be achieved. Download Full Article (PDF) Cite: 14 Duke L. & Tech. Rev. 227

Aereo and Internet Television: A Call to Save the Ducks (A La Carte)

By: Pooja Patel If it looks like a duck, swims like a duck, and quacks like a duck, it is probably a duck. The most recent U.S. Supreme Court decision regarding the Copyright Act employed this “duck test” when determining that Aereo, an Internet content-streaming company, violated the Copyright Act by infringing on the copyrights of television broadcast networks. The Supreme Court ruled that Aereo’s Internet streaming services resembled cable television transmissions too closely. Therefore, by streaming copyrighted programming to its subscribers without the cable compulsory license, Aereo violated the Transmit Clause of the 1976 Copyright Act. Subsequently, Aereo used this Supreme Court decision to obtain a compulsory license from the Copyright Office but was denied. Forced back into litigation, Aereo filed for Chapter 11 Bankruptcy This Issue Brief describes Aereo’s technology, the litigation that followed, and the related precedent, and concludes that the district court should have granted Aereo a Section 111 Statutory License in line with the Supreme Court’s “duck test.” It considers the implications of the Court’s preliminary injunction against Aereo’s “a la carte” TV technology, what this means for the future of similar technological innovation, and the effects on consumers and competition. Download Full Article (PDF)