Internet Law Commons^™

After Notice And Choice: Reinvigorating “Unfairness” To Rein In Data Abuses, Lina M. Khan, Samuel A.A. Levine, Stephanie T. Nguyen

Faculty Scholarship

The Federal Trade Commission (FTC) has long served as America’s default privacy enforcer. Yet for much of its history, the agency relied on self-regulation through a “notice and choice” framework that left the public vulnerable in an era of rampant data collection and digital surveillance. Businesses overwhelmed users with dense privacy notices while amassing and exploiting vast troves of personal data. The agency’s historical approach, rooted in outdated assumptions about self-correcting markets and an ideologically cramped view of the FTC’s authorities and mandate, helped usher in a digital economy where data abuses became routine.

During the Biden Administration, the FTC …

The False Choice Between Digital Regulation And Innovation, Anu Bradford

Faculty Scholarship

This Article challenges the common view that more stringent regulation of the digital economy inevitably compromises innovation and undermines technological progress. This view, vigorously advocated by the tech industry, has shaped the public discourse in the United States, where the country’s thriving tech economy is often associated with a staunch commitment to free markets. U.S. lawmakers have also traditionally embraced this perspective, which explains their hesitancy to regulate the tech industry to date. The European Union has chosen another path, regulating the digital economy with stringent data privacy, antitrust, content moderation, and other digital regulations designed to shape the evolution …

The End Of Consent: Data And The Corporate-Consumer Relationship, Faisal Hijjawi

LL.M. Essays & Theses

Consumer data is largely regulated through the notice-and-choice approach in the United States, which relies on consumer consent. The notice-and-choice approach is rooted in the control theory of information privacy. This paper will argue that the control theory is limited due to its reliance on property law, its breadth, as well as it reinforcing the ‘no privacy in public’ concept. Further, the notice-and-choice approach relies on consent being both free and informed. However, consent cannot be considered free due to the lack of choice and the manipulation exerted on the consumer. Also, consent is not informed as the consumer lacks …

Europe's Digital Constitution, Anu Bradford

Faculty Scholarship

This Article uncovers the fundamental values underlying the European Union’s expansive set of digital regulations, which in aggregate can be viewed as Europe’s “digital constitution.” This constitution engrains Europe’s human-centric, rights-preserving, democracy-enhancing, and redistributive vision for the digital economy into binding law. This vision stands in stark contrast to the United States, which has traditionally placed its faith in markets and tech companies’ self-regulation. As a result, American tech companies today are regulated primarily by Brussels and not by Washington. By highlighting the distinctiveness and the global reach of the European digital constitution, this Article challenges the common narrative that …

Verification Dilemmas In Law And The Promise Of Zero-Knowledge Proofs, Kenneth A. Bamberger, Ron Canetti, Shafi Goldwasser, Evan J. Zimmerman

Faculty Scholarship

Individuals who wish to access a website or qualify for a loan are expected to expose personally identifying information, undermining their privacy and security. Firms share proprietary information in dealmaking negotiations which, if the deal fails, may be used by the negotiating partner for a competitive advantage. Regulators are expected to disclose their algorithmic tools to comply with public transparency and oversight requirements, a practice that risks rendering these tools circumventable and ineffective. Litigants might have to reveal trade secrets in court proceedings to prove a claim or defense. Such “verification dilemmas” — costly choices between opportunities that require the …

Unspoken Criticism: Audiovisual Forms Of Critique As Fair Use, Alec Fisher

Kernochan Center for Law, Media, and the Arts

This Note argues that the traditional legal framework for analyzing a work of alleged criticism as fair use is particularly constraining for YouTube reaction videos and other audiovisual forms of criticism that largely critique or comment on an original work in a non-spoken, visual manner. It discusses the emphasis that the current fair use jurisprudence places on spoken and written critical elements when undertaking a fair use analysis of a work of criticism, then advocates for a new conception of fair use criticism that incorporates film-specific analytical techniques and concepts when analyzing the critical elements of online audiovisual works. Part …

Conundra Of The Berne Convention Concept Of The Country Of Origin, Jane C. Ginsburg

Faculty Scholarship

This essay explores one of the most important, but occasionally intractable, issues under the Berne Convention, the concept of Country of Origin. Article 5(4) of that treaty defines a work’s country of origin, but leaves out several situations, leaving those who interpret and apply the treaty without guidance in ascertaining the country of origin. I will call those situations the “Conundra of the country of origin,” and will explore two of them here. First, what is the country of origin of an unpublished work whose authors are nationals of different countries? Second, what is the country of origin of a …

The Promise And Limits Of Cyber Power In International Law: Remarks, Monica Hakimi, Ann Väljataga, Zhixiong Huang, Charles Allen, Sue Robertson, Doug Wilson

Faculty Scholarship

Hi, everyone. I am Monica Hakimi from the University of Michigan Law School, and I would like to welcome you to our panel on cyber power and its limits. The topic almost does not need an introduction. We all know just from reading the news that our collective dependence on cyberspace is also a huge vulnerability, and state and non-state actors exploit this vulnerability to do one another harm. They use cyber technologies not just to spy on one another, but also, for example, to interfere in national elections, to steal trade secrets or other valuable information, to disrupt the …

Internet Jurisdiction: Using Content Delivery Networks To Ascertain Intention, Patrick Lin

LL.M. Essays & Theses

Specific jurisdiction in civil litigation centers on the rather general,yet immutable, concept of intention. Although the word “intention” does not surface prominently in the personal jurisdiction case law, it is clearly intrinsic to the concept of “purposeful availment”. On the Internet, however, intention is hard to ascertain: how does a court, for example, determine whether the defendant intended that its website, application, or advertisement within a mobile application should end up in the forum state? In answering such a question, courts have historically used one of two approaches to establish intent: (i) a targeting test or (ii) a degree of …

Cyberattacks And The Constitution, Matthew C. Waxman

Faculty Scholarship

Contrary to popular view, cyberattacks alone are rarely exercises of constitutional war powers – and they might never be. They are often instead best understood as exercises of other powers pertaining to nonwar military, foreign affairs, intelligence, and foreign commerce, for example. Although this more fine-grained, fact-specific conception of cyberattacks leaves room for broad executive leeway in some contexts, it also contains a strong constitutional basis for legislative regulation of cyber operations.

Nascent Competitors, C. Scott Hemphill, Tim Wu

Faculty Scholarship

A nascent competitor is a firm whose prospective innovation represents a serious threat to an incumbent. Protecting such competition is a critical mission for antitrust law, given the outsized role of unproven outsiders as innovators and the uniquely potent threat they often pose to powerful entrenched firms. In this Article, we identify nascent competition as a distinct analytical category and outline a program of antitrust enforcement to protect it. We make the case for enforcement even where the ultimate competitive significance of the target is uncertain, and explain why a contrary view is mistaken as a matter of policy and …

A United States Perspective On Digital Single Market Directive Art. 17, Jane C. Ginsburg

Faculty Scholarship

To a US appraiser, article 17 of the Digital Single Market Directive suggests the EU has learned from American mistakes (and from its own) in the allocation of internet intermediaries’ liability for hosting and communicating user-posted content. Before the DSM Directive, art. 14 of the 2000 eCommerce Directive set out a notice-and-takedown system very similar to the regime provided in 17 U.S.C. section 512(c). Both regimes replaced the normal copyright default, which requires authorization to exploit works, with a limitation on the liability of service providers who complied with statutory prerequisites. Because the limitation ensured that service providers would not …

The Limits Of Smart Contracts, Jens Frankenreiter

Ira M. Millstein Center for Global Markets and Corporate Ownership

This essay investigates the potential of smart contracts to replace the legal system as an infrastructure for transactions. It argues that (contract) law remains relevant for most transactions even if they are entirely structured by way of smart contract. The reason for this is that the power of smart contracts to create and enforce obligations against attempts by the legal system to thwart their execution is limited. These limitations are most relevant for obligations to perform certain actions outside the blockchain, but also apply to other obligations contingent on facts outside the records stored on the blockchain.

Introduction To The Symposium On Cyber Attribution, Monica Hakimi

Faculty Scholarship

This symposium explores some of the legal issues surrounding the attribution of cyber conduct to states. Relative to states’ other activities, cyber conduct poses particularly thorny attribution challenges. States that engage in such conduct often use technology to obscure their identities or the full effects of their operations. The attribution challenges in turn raise difficult questions about how victim states should be allowed to respond — whether in kind, with other retorsions or countermeasures, with kinetic force, or by doing nothing at all. For example, how confident must a victim state be that it has correctly identified the source of …

Protecting Consumers In The Age Of The Internet Of Things, Nicole Smith Futrell

Faculty Scholarship

“Wake up, baby!”

Imagine waking up in the middle of the night to the sound of a stranger speaking to your baby through the baby monitor. For one Texas couple, this horror story became reality when a man hacked their internet-connected monitors to watch and stalk their child. In a similarly horrifying scenario, a hacker stalked Miss Teen USA, Cassidy Wolf, for a year via her webcam. The stalker had 24/7 access to her webcam and also traced the keystrokes on her keyboard to learn her passwords for various web accounts. Subsequently, the hacker used private information he learned about …

Informed Trading And Cybersecurity Breaches, Joshua Mitts, Eric L. Talley

Faculty Scholarship

Cybersecurity has become a significant concern in corporate and commercial settings, and for good reason: a threatened or realized cybersecurity breach can materially affect firm value for capital investors. This paper explores whether market arbitrageurs appear systematically to exploit advance knowledge of such vulnerabilities. We make use of a novel data set tracking cybersecurity breach announcements among public companies to study trading patterns in the derivatives market preceding the announcement of a breach. Using a matched sample of unaffected control firms, we find significant trading abnormalities for hacked targets, measured in terms of both open interest and volume. Our results …

Sources Of Tech Platform Power, Lina M. Khan

Faculty Scholarship

A handful of tech platforms mediate a large and growing share of our commerce and communications. Over the last year, the public has come to realize that the power these firms wield may pose significant hazards. Elected leaders ranging from Senator Elizabeth Warren (D-MA) to Senator Ted Cruz (R-TX) have expressed alarm at the level of control that firms like Amazon, Alphabet (Google’s parent company), and Facebook enjoy. In a recent poll, a majority of Americans voiced concern that the government wouldn’t do enough to regulate U.S. tech companies. As the editor of BuzzFeed observed, a “major trend in American …

Liability For Providing Hyperlinks To Copyright-Infringing Content: International And Comparative Law Perspectives, Jane C. Ginsburg, Luke Ali Budiardjo

Faculty Scholarship

Hyperlinking, at once an essential means of navigating the Internet, but also a frequent means to enable infringement of copyright, challenges courts to articulate the legal norms that underpin domestic and international copyright law, in order to ensure effective enforcement of exclusive rights on the one hand, while preserving open communication on the Internet on the other. Several recent cases, primarily in the European Union, demonstrate the difficulties of enforcing the right of communication to the public (or, in U.S. copyright parlance, the right of public performance by transmission) against those who provide hyperlinks that effectively deliver infringing content to …

Strategic Law Avoidance Using The Internet: A Short History, Tim Wu

Faculty Scholarship

We are now some twenty years into the story of the Internet's bold challenge to law and the legal system. In the early 2000s, Jack Goldsmith and I wrote Who Controls the Internet, a book that might be understood as a chronicle of some the early and more outlandish stages of the story. Professors Pollman and Barry's excellent article, Regulatory Entrepreneurship, adds to and updates that story with subsequent chapters and a sophisticated analysis of the strategies more recently employed to avoid law using the Internet in some way. While Pollman and Barry's article stands on its own, …

Euro-Yearnings? Moving Toward A "Substantive" Registration-Based Trademark Regime, Jane C. Ginsburg

Faculty Scholarship

In Alan Jay Lerner’s lyric, Professor Henry Higgins laments: "Why can’t a woman be more like a man?" Professor Rebecca Tushnet’s provocative article in effect urges that a U.S. trademark should be more like a European Union trademark, at least with respect to the relationship of registration to substantive protection. The article convincingly exposes the current incoherence in U.S. trademark law – a hybrid between “procedural” and “substantive” registration regimes, in which the traditional emphasis on use-based trademark rights undermines the business-planning benefits that flow from registration.

Before elaborating on the similarities between Tushnet’s suggested reforms of U.S. trademark law …

Whither (Not Wither) Copyleft, Eben Moglen

Faculty Scholarship

This article contains an edited version of Professor Eben Moglen’s speech at the SFLC Fall Conference 2016. It explores the topic of Copyleft, enforcement and community engagement from the perspective of one of the key individuals in the rise of Free and Open Source Software from interesting idea to a central pillar of the global technology industry.

Cyber Strategy & Policy: International Law Dimensions, Matthew C. Waxman

Faculty Scholarship

Important international law questions for formulating cyber strategy and policy include whether and when a cyber-attack amounts to an “act of war,” or, more precisely, an “armed attack” triggering a right of self-defense, and how the international legal principle of “sovereignty” could apply to cyber activities. International law in this area is not settled. There is, however, ample room within existing international law to support a strong cyber strategy, including a powerful deterrent. The answers to many international law questions discussed below depend on specific, case-by-case facts, and are likely to be highly contested for a long time to come. …

"Section 5 And 'Unfair Methods Of Competition': Protecting Competition Or Increasing Uncertainty?", Tim Wu

Faculty Scholarship

Since the late 1980s, Section 5 of the FTC Act has come to center on a certain kind of case, the so-called anticompetitive “scheme” featuring extraordinary and nefarious conduct – like gaming a standards process, rigging industry tests, that sort of thing. Deception, fraud, bad-faith and oppressive action are typical. This kind of self-restraint has, to its credit, yielded a focus on cases where the conduct is extraordinary, an anticompetitive intent is obvious and the harm is substantial. At this point, the self-imposed limits on Section 5 enforcement are extensive enough that a critic could fairly accuse the agency of …

Intellectual Property In News? Why Not?, Sam Ricketson, Jane C. Ginsburg

Faculty Scholarship

This Chapter addresses arguments for and against property rights in news, from the outset of national law efforts to safeguard the efforts of newsgathers, through the various unsuccessful attempts during the early part of the last century to fashion some form of international protection within the Berne Convention on literary and artistic works and the Paris Convention on industrial property. The Chapter next turns to contemporary endeavors to protect newsgatherers against “news aggregation” by online platforms. It considers the extent to which the aggregated content might be copyrightable, and whether, even if the content is protected, various exceptions set out …

Does Google Content Degrade Google Search? Experimental Evidence, Michael Luca, Tim Wu, Sebastian Couvidat, Daniel Frank

Faculty Scholarship

While Google is known primarily as a search engine, it has increasingly developed and promoted its own content as an alternative to results from other websites. By prominently displaying Google content in response to search queries, Google is able to use its dominance in search to gain customers for this content. This may reduce consumer welfare if the internal content is inferior to organic search results. In this paper, we provide a legal and empirical analysis of this practice in the domain of online reviews. We first identify the conditions under which universal search would be considered anticompetitive. We then …

Leveraging Mining Demand For Internet And Telecommunications Infrastructure For Broad Economic Development: Models, Opportunities And Challenges, Perrine Toledano, Clara Roorda

Columbia Center on Sustainable Investment Staff Publications

The initial phase of the Leveraging Mining-Related Infrastructure Investments for Development project consisted of a worldwide survey of regulatory, commercial and operating case studies of shared use of mining-related infrastructure. This Policy Paper delivers the findings for internet and telecommunications.

Governing, Exchanging, Securing: Big Data And The Production Of Digital Knowledge, Bernard E. Harcourt

Faculty Scholarship

The emergence of Big Data challenges the conventional boundaries between governing, exchange, and security. It ambiguates the lines between commerce and surveillance, between governing and exchanging, between democracy and the police state. The new digital knowledge reproduces consuming subjects who wittingly or unwittingly allow themselves to be watched, tracked, linked and predicted in a blurred amalgam of commercial and governmental projects. Linking back and forth from consumer data to government information to social media, these new webs of information become available to anyone who can purchase the information. How is it that governmental, commercial and security interests have converged, coincided, …

Sender Side Transmission Rules For The Internet, Tejas N. Narechania, Tim Wu

Faculty Scholarship

Since 1966, the Federal Communications Commission has, one way or another, protected businesses that deliver services over the nation’s communications infrastructure. But in January 2014, the U.S. Court of Appeals for the D.C. Circuit struck down the FCC’s net neutrality rules contained in its 2010 Open Internet Order. FCC Chairman Tom Wheeler has since indicated that he will take up the D.C. Circuit’s invitation to implement rules that, consistent with historic practice, “will meet the court’s test for preventing improper blocking of and discrimination among Internet traffic.”

Chairman Wheeler’s statement invites an obvious question: presuming that the FCC wants …

Rethinking Privacy, William H. Simon

Faculty Scholarship

Anxiety about surveillance and data mining has led many to embrace implausibly expansive and rigid conceptions of privacy. The premises of some current privacy arguments do not fit well with the broader political commitments of those who make them. In particular, liberals seem to have lost touch with the reservations about privacy expressed in the social criticism of some decades ago. They seem unable to imagine that preoccupation with privacy might amount to a “pursuit of loneliness” or how “eyes on the street” might have reassuring connotations. Without denying the importance of the effort to define and secure privacy values, …

Hackback: Permitting Retaliatory Hacking By Non-State Actors As Proportionate Countermeasures To Transboundary Cyberharm, Jan E. Messerschmidt

National Security Law Program

Cyberespionage has received even greater attention in the wake of reports of persistent and brazen cyberexploitation of U.S. and Canadian firms by the Chinese military. But the recent disclosures about NSA surveillance programs have made clear that a national program of cyberdefense of private firms' intellectual property is politically infeasible. Following the lead

of companies like Google, private corporations may increasingly resort to the use of self-defense, hacking back against cross-border incursions on the Internet. Most scholarship, however, has surprisingly viewed such actions as outside the ambit of international law. This Note provides a novel account of how international law …