<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>
	Comments on: Data Center Avoids Copyright Liability By Forwarding DMCA Notices to Its Customer&#8211;ALS Scan v. Steadfast	</title>
	<atom:link href="https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm/feed" rel="self" type="application/rss+xml" />
	<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm</link>
	<description></description>
	<lastBuildDate>Sun, 09 Aug 2020 07:58:42 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
	<item>
		<title>
		By: News of the Week; August 5, 2020 &#8211; Communications Law at Allard Hall		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2696</link>

		<dc:creator><![CDATA[News of the Week; August 5, 2020 &#8211; Communications Law at Allard Hall]]></dc:creator>
		<pubDate>Sun, 09 Aug 2020 07:58:42 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2696</guid>

					<description><![CDATA[[&#8230;] Data Center Avoids Copyright Liability By Forwarding DMCA Notices to Its Customer–ALS Scan v. Stea&#8230; (Eric Goldman) [&#8230;]]]></description>
			<content:encoded><![CDATA[<p>[&#8230;] Data Center Avoids Copyright Liability By Forwarding DMCA Notices to Its Customer–ALS Scan v. Stea&#8230; (Eric Goldman) [&#8230;]</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: David S. Gingras		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2690</link>

		<dc:creator><![CDATA[David S. Gingras]]></dc:creator>
		<pubDate>Thu, 06 Aug 2020 16:59:00 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2690</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2689&quot;&gt;Carole Aubert&lt;/a&gt;.

Carole,

I don&#039;t know if I understand your question.  As I&#039;m sure you know, the DMCA has three different safe-harbor provisions: 512(a), 512(b) and 512(c).

As I already noted, 512(a) is basically intended to protect &quot;networks&quot;, so if you only provide a WIRE that someone uses to connect to infringing material, you get a safe-harbor if someone uses your wires to infringe.  512(b) deals with &quot;system caching&quot; which is similar, but may involve infringing content that is only stored temporarily.

As you noted, 512(a) and 512(b) do not require a designated agent.  This makes sense because a company that only provides wires/connections or temporary caching of data can&#039;t take down infringing content since no such content is actually stored on their network.

512(c) is mainly focused on companies that DO store data provided by users, and obviously 512(c) does require the hosting company to have  a designated agent.

As I understand it, Cloudflare offers several different types of service -- one is simply IP obfuscation which they label &quot;DDoS Protection&quot;, and you&#039;re right -- if a website is using Cloudflare to mask their true IP address, then it may be impossible to determine (without asking Cloudflare) who/where the actual host is for that site.

But that doesn&#039;t mean you can&#039;t send them a 512(c) notice. For one thing, if you see infringing content on XYZ.com, then you simply need to locate the designated agent for XYZ.com. Of course, 512(c)(3) requires the agent&#039;s contact information to be listed on the website itself and also in the copyright office&#039;s DMCA agent directory, so if you can&#039;t find the information in either place, that means XYZ.com is per se excluded from the safe-harbor of 512(c)(3), so there&#039;s really no point in sending them a takedown notice (you can simply sue them, or ignore the infringement).

If you still want to locate the host for XYZ.com but the IP is concealed by Cloudflare, then all you have to do is obtain a 512(h) subpoena and send it to Cloudflare. This is cheap, easy, and effective -- Cloudflare will give you the site&#039;s true IP address which you can then use to send a 512(c) notice to the host (which may not matter if they are located outside the USA).

In any case, the point I was trying to make in my original comment is simply this -- the DMCA has certain technical requirements that you MUST comply with, otherwise your takedown notice may be invalid and ineffective. One of the most obvious requirements is that you must send your 512(c) notice to the designated agent of the site/host where the infringing content is located. If you send a 512(c) notice to the wrong place, then it&#039;s simply invalid...even if it ends up getting forwarded to the correct place.]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2689">Carole Aubert</a>.</p>
<p>Carole,</p>
<p>I don&#8217;t know if I understand your question.  As I&#8217;m sure you know, the DMCA has three different safe-harbor provisions: 512(a), 512(b) and 512(c).</p>
<p>As I already noted, 512(a) is basically intended to protect &#8220;networks&#8221;, so if you only provide a WIRE that someone uses to connect to infringing material, you get a safe-harbor if someone uses your wires to infringe.  512(b) deals with &#8220;system caching&#8221; which is similar, but may involve infringing content that is only stored temporarily.</p>
<p>As you noted, 512(a) and 512(b) do not require a designated agent.  This makes sense because a company that only provides wires/connections or temporary caching of data can&#8217;t take down infringing content since no such content is actually stored on their network.</p>
<p>512(c) is mainly focused on companies that DO store data provided by users, and obviously 512(c) does require the hosting company to have  a designated agent.</p>
<p>As I understand it, Cloudflare offers several different types of service &#8212; one is simply IP obfuscation which they label &#8220;DDoS Protection&#8221;, and you&#8217;re right &#8212; if a website is using Cloudflare to mask their true IP address, then it may be impossible to determine (without asking Cloudflare) who/where the actual host is for that site.</p>
<p>But that doesn&#8217;t mean you can&#8217;t send them a 512(c) notice. For one thing, if you see infringing content on XYZ.com, then you simply need to locate the designated agent for XYZ.com. Of course, 512(c)(3) requires the agent&#8217;s contact information to be listed on the website itself and also in the copyright office&#8217;s DMCA agent directory, so if you can&#8217;t find the information in either place, that means XYZ.com is per se excluded from the safe-harbor of 512(c)(3), so there&#8217;s really no point in sending them a takedown notice (you can simply sue them, or ignore the infringement).</p>
<p>If you still want to locate the host for XYZ.com but the IP is concealed by Cloudflare, then all you have to do is obtain a 512(h) subpoena and send it to Cloudflare. This is cheap, easy, and effective &#8212; Cloudflare will give you the site&#8217;s true IP address which you can then use to send a 512(c) notice to the host (which may not matter if they are located outside the USA).</p>
<p>In any case, the point I was trying to make in my original comment is simply this &#8212; the DMCA has certain technical requirements that you MUST comply with, otherwise your takedown notice may be invalid and ineffective. One of the most obvious requirements is that you must send your 512(c) notice to the designated agent of the site/host where the infringing content is located. If you send a 512(c) notice to the wrong place, then it&#8217;s simply invalid&#8230;even if it ends up getting forwarded to the correct place.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Carole Aubert		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2689</link>

		<dc:creator><![CDATA[Carole Aubert]]></dc:creator>
		<pubDate>Thu, 06 Aug 2020 11:42:00 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2689</guid>

					<description><![CDATA[In reply to &lt;a href=&quot;https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2683&quot;&gt;David S. Gingras&lt;/a&gt;.

Hi David, 
I enjoy reading the &quot;owner&#039;s dog&quot; ;-). An additional question, if I may. I agree with the issue with DMCA designated agent for the case of storage (= hosting provider). In the case of Content Delivery Network such as Cloudflare-type, do you agree to apply 17 U.S. Code § 512 (b) (2) (E) as it is a cache solution ? Therefore for such cases, there is no designated agent required. In addition,due to IP obfuscation with the CDN, it is impossible to know the originated IP (and therefore originated hosting company, as CDN IP is given throught WHOIS requests). Because if you refer to 17 U.S. Code § 512 (c) instead for Cloudflare-type providers, and if they have a DMCA designated agent, they could not in my view limit action to merely forward the notice to originated hosting company.]]></description>
			<content:encoded><![CDATA[<p>In reply to <a href="https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2683">David S. Gingras</a>.</p>
<p>Hi David,<br />
I enjoy reading the &#8220;owner&#8217;s dog&#8221; ;-). An additional question, if I may. I agree with the issue with DMCA designated agent for the case of storage (= hosting provider). In the case of Content Delivery Network such as Cloudflare-type, do you agree to apply 17 U.S. Code § 512 (b) (2) (E) as it is a cache solution ? Therefore for such cases, there is no designated agent required. In addition,due to IP obfuscation with the CDN, it is impossible to know the originated IP (and therefore originated hosting company, as CDN IP is given throught WHOIS requests). Because if you refer to 17 U.S. Code § 512 (c) instead for Cloudflare-type providers, and if they have a DMCA designated agent, they could not in my view limit action to merely forward the notice to originated hosting company.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: IAP Defeats Vicarious Copyright Infringement Claim-UMG v. Bright House - Technology &#38; Marketing Law Blog		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2687</link>

		<dc:creator><![CDATA[IAP Defeats Vicarious Copyright Infringement Claim-UMG v. Bright House - Technology &#38; Marketing Law Blog]]></dc:creator>
		<pubDate>Wed, 05 Aug 2020 15:32:29 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2687</guid>

					<description><![CDATA[[&#8230;] generally, this ruling and ALS Scan v. Steadfast offer important counternarratives to the jurisprudence holding IAPs liable for subscriber-caused [&#8230;]]]></description>
			<content:encoded><![CDATA[<p>[&#8230;] generally, this ruling and ALS Scan v. Steadfast offer important counternarratives to the jurisprudence holding IAPs liable for subscriber-caused [&#8230;]</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: David S. Gingras		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2683</link>

		<dc:creator><![CDATA[David S. Gingras]]></dc:creator>
		<pubDate>Mon, 03 Aug 2020 19:30:00 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2683</guid>

					<description><![CDATA[I may be misinformed about the facts of this case, but this doesn&#039;t sound like a 17 USC 512(a) issue. That part of the DMCA provides protection for &quot;&lt;i&gt;transitory&lt;/i&gt; digital network communications&quot;, and it only applies if &quot;no copy of the material ... is maintained on the system or network ... .&quot; 17 USC 512(a)(4). So if you simply provide network &lt;i&gt;connections&lt;/i&gt;, but don&#039;t actually own any &lt;i&gt;servers&lt;/i&gt; that store infringing content, you&#039;re covered by 512(a).

This decision says: &quot;ALS sued Steadfast, a data-center service provider that leases servers to its many customers, including Imagebam’s owner, so that they can host data on the Internet.&quot; If Steadfast owns the server where infringing content is hosted, then it&#039;s not within the scope of 512(a), but it should be covered by 512(c) assuming it has otherwise complied with the requirements of that section.

The annoying thing about this case is that it deals with a legal unicorn -- a DMCA notice that was sent to Steadfast and then forwarded to its customer. This practice (which is extremely common) drives me INSANE. As I always tell clients: &quot;There is no such thing as a &lt;i&gt;valid forwarded &lt;/i&gt;DMCA notice.&quot; This is a fiction. It does not exist.

Here&#039;s why -- 17 USC 512(c)(3)(A) tells us EXACTLY what is required for a notice to be effective: &quot;To be effective under this subsection, a notification of claimed infringement must be a written communication provided to the designated agent of a service provider ... .&quot;  

GOT THAT? If you are unhappy with infringing content on XYZ.com, then you MUST send a valid takedown notice to the &lt;i&gt;designated agent&lt;/i&gt; of XYZ.com. To be valid, the notice MUST GO TO THE DESIGNATED AGENT for XYZ.com. A notice sent to any other place is NOT VALID (at least not to the extent you&#039;re trying to strip XYZ.com of its safe harbor under 512(c)(3)).

To recap: if you want to send a valid notification of claimed infringement, your notice MUST go to the site&#039;s designated DMCA agent (meaning the person whose contact information is registered with the U.S. Copyright Office). PERIOD. Any notice sent to any other person is NOT VALID and has no legal effect on XYZ.com.

I shouldn&#039;t need to say this, but I will. A notification of claimed infringement is NOT VALID if sent to:
      *The site&#039;s owner.
      *The site&#039;s outside litigation counsel.
      *A friend of the site&#039;s owner.
      *A neighbor of the site&#039;s owner.
      *The owner&#039;s cousin.
      *The owner&#039;s dog.
      *The power company that provides electricity to the site&#039;s servers.
      *Any company that provides service to the site (i.e., Cloudflare, etc.)

Unless the designated agent for XYZ.com happens to also be in one of these other roles (you certainly could designate a dog as your agent), any takedown notice sent to anyone on the above list is invalid/void/meaningless.

Despite this, services like Cloudflare routinely forward DMCA notices to their customers, apparently because they think this is helpful. It is not.

Sorry if the comment comes across as heated, but I&#039;ve spent too many years trying to explain to both clients and service providers why a &quot;forwarded&quot; DMCA notice is &quot;not a thing&quot;.]]></description>
			<content:encoded><![CDATA[<p>I may be misinformed about the facts of this case, but this doesn&#8217;t sound like a 17 USC 512(a) issue. That part of the DMCA provides protection for &#8220;<i>transitory</i> digital network communications&#8221;, and it only applies if &#8220;no copy of the material &#8230; is maintained on the system or network &#8230; .&#8221; 17 USC 512(a)(4). So if you simply provide network <i>connections</i>, but don&#8217;t actually own any <i>servers</i> that store infringing content, you&#8217;re covered by 512(a).</p>
<p>This decision says: &#8220;ALS sued Steadfast, a data-center service provider that leases servers to its many customers, including Imagebam’s owner, so that they can host data on the Internet.&#8221; If Steadfast owns the server where infringing content is hosted, then it&#8217;s not within the scope of 512(a), but it should be covered by 512(c) assuming it has otherwise complied with the requirements of that section.</p>
<p>The annoying thing about this case is that it deals with a legal unicorn &#8212; a DMCA notice that was sent to Steadfast and then forwarded to its customer. This practice (which is extremely common) drives me INSANE. As I always tell clients: &#8220;There is no such thing as a <i>valid forwarded </i>DMCA notice.&#8221; This is a fiction. It does not exist.</p>
<p>Here&#8217;s why &#8212; 17 USC 512(c)(3)(A) tells us EXACTLY what is required for a notice to be effective: &#8220;To be effective under this subsection, a notification of claimed infringement must be a written communication provided to the designated agent of a service provider &#8230; .&#8221;  </p>
<p>GOT THAT? If you are unhappy with infringing content on XYZ.com, then you MUST send a valid takedown notice to the <i>designated agent</i> of XYZ.com. To be valid, the notice MUST GO TO THE DESIGNATED AGENT for XYZ.com. A notice sent to any other place is NOT VALID (at least not to the extent you&#8217;re trying to strip XYZ.com of its safe harbor under 512(c)(3)).</p>
<p>To recap: if you want to send a valid notification of claimed infringement, your notice MUST go to the site&#8217;s designated DMCA agent (meaning the person whose contact information is registered with the U.S. Copyright Office). PERIOD. Any notice sent to any other person is NOT VALID and has no legal effect on XYZ.com.</p>
<p>I shouldn&#8217;t need to say this, but I will. A notification of claimed infringement is NOT VALID if sent to:<br />
      *The site&#8217;s owner.<br />
      *The site&#8217;s outside litigation counsel.<br />
      *A friend of the site&#8217;s owner.<br />
      *A neighbor of the site&#8217;s owner.<br />
      *The owner&#8217;s cousin.<br />
      *The owner&#8217;s dog.<br />
      *The power company that provides electricity to the site&#8217;s servers.<br />
      *Any company that provides service to the site (i.e., Cloudflare, etc.)</p>
<p>Unless the designated agent for XYZ.com happens to also be in one of these other roles (you certainly could designate a dog as your agent), any takedown notice sent to anyone on the above list is invalid/void/meaningless.</p>
<p>Despite this, services like Cloudflare routinely forward DMCA notices to their customers, apparently because they think this is helpful. It is not.</p>
<p>Sorry if the comment comes across as heated, but I&#8217;ve spent too many years trying to explain to both clients and service providers why a &#8220;forwarded&#8221; DMCA notice is &#8220;not a thing&#8221;.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Carole Aubert		</title>
		<link>https://blog.ericgoldman.org/archives/2020/08/data-center-avoids-copyright-liability-by-forwarding-dmca-notices-to-its-customer-als-scan-v-steadfast.htm#comment-2682</link>

		<dc:creator><![CDATA[Carole Aubert]]></dc:creator>
		<pubDate>Mon, 03 Aug 2020 07:43:00 +0000</pubDate>
		<guid isPermaLink="false">https://blog.ericgoldman.org/?p=21425#comment-2682</guid>

					<description><![CDATA[Interesting decision. But in this case, we have a &quot;man in the middle&quot; with Steadfast =&#062; Imagebam (providing image hosting services) =&#062; Imagebam customers (upload infringing content). I am curious about your opinion with Cloudflare style cases: in this latter configuration, the Cloudflare&#039;s clients are directly uploading infringing content. Therefore is the learning from the above decision also applies to Cloudflare regarding its own client behaviour ? Due to the high volume of notifications for certain customers, has Cloudflare in such cases not only a general knowledge but sufficiently specific to start thinking of a contributory liability in case of a total lack of additional response except mere removal of infringing content ? Thank you and most for your appreciate blog.]]></description>
			<content:encoded><![CDATA[<p>Interesting decision. But in this case, we have a &#8220;man in the middle&#8221; with Steadfast =&gt; Imagebam (providing image hosting services) =&gt; Imagebam customers (upload infringing content). I am curious about your opinion with Cloudflare style cases: in this latter configuration, the Cloudflare&#8217;s clients are directly uploading infringing content. Therefore is the learning from the above decision also applies to Cloudflare regarding its own client behaviour ? Due to the high volume of notifications for certain customers, has Cloudflare in such cases not only a general knowledge but sufficiently specific to start thinking of a contributory liability in case of a total lack of additional response except mere removal of infringing content ? Thank you and most for your appreciate blog.</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
