CNIL’s Sends Second Questionnaire to Google on Google’s New Privacy Policy

Google’s new privacy policy is not that new, as it “went into force” on March 1. It is still big news in data protection terms, though, at least as far as European data protection authorities are concerned. CNIL, commissioned by the Art. 29 Working Party, has now sent a second rather comprehensive questionnaire to Google. Obviously they were not completely sold on Google’s answers to the first set of questions CNIL had sent in March. Continue reading

German E-Commerce Law: “Button Solution” To Come into Force in August 2012

In March 2012 the German Federal Legislator adopted several comsumer protection statutes that will have considerable impact on B2C e- and m-commerce business activities in Germany, implementing, in particular, Art. 8 (2) of Directive 2011/83/EU. The new law applies to any contractural transaction that is entered into via electronic means of communication and leads to payment obligations for the consumer, i.e. any purchase of a book in an online shop, any subscription of content services made as an in app purchase, as well as any other such contract unless it is free of charge. Continue reading

Fraunhofer Study on the (Lack of) Data Security of Cloud Storage Services

Popular cloud storage sercives often lack data security. This is the result of a detailed study published by MP3 inventor Fraunhofer Institute. Fraunhofer has scrutinized  Dropbox, Cloudme, Crashplan, Mozy, Teamdrive, Ubuntu One and Wuala. Continue reading

ACTA really ad acta soon?

Last week, at the re:publica conference an illustrious crowd gathered for the sixth time and this time in Kreuzbergs’s Postbahnhof for Germanys biggest conference on blogs, social media and the digital society. Part of the crowd was Neelie Kroes, one of the Vice Presidents of the European Commission and Europan Commissioner for Digital Agenda. In her nicely titled speech about „Freedom online“ she dared to mention that “we are now likely to be in a world without SOPA” – the US’s proposed Stop Online Piracy Act – “and ACTA.” Are we really? Continue reading

Direct Effect of the “Cookie Directive” in Germany?

It has been reported that today Mr. Peter Schaar, head of the Federal Commissioner for Data Protection and Freedom of Information, announced at the Data Protection Congress 2012 that is currently held in Berlin that the EU “Cookie Directive” – which has not yet been implemented into German law – has EU law’s “direct effect” (also known as “immediate applicability”), making Art 5 (3) of the Directive directly applicable and effective under German law. He (as reported) added that therefore Art. 5 (3) of the Directive can be applied and enforced by the German data protection authorities in their day to day business. Ooops! Continue reading

Schleswig-Holstein Issues First Online Gambling Licenses

We got news on Friday that Schleswig-Holstein (one of sixteen states of Germany) had just issued its first three online gambling licenses (for sports betting). Forty other applications, partly for online sports betting, but also for online poker and Bovegas casino games, are said to be in the pipeline. So far so good and not overly interesting, but look into the details and the matter becomes more intriguing. Continue reading

Analytics Cookies to Be Exempt from Consent Requirement in France

As reported by DataGuidance, the UK Information Commissioner the enforcement of the “cookie law” will be “pragmatic and realistic” in the UK. “Pragmatic” and realistic”: Sounds good doesn’t it? Doesn’t sound very German, though, does it? As explained here, the cookie situation in Germany is still unresolved, largely due to the (my take on the matter) inability to come up with a draft for transforming the Directive’s into German law that provides for a workable solution the problem. It seems that at least the current government feels uncomfortable to pass a law the wording of which would effectively rule out a good portion of how websites work today.

Even more interestingly, in the same DataGuidance post they report that the French Data Protection Authority (CNIL) will exempt analytics cookies from the new requirement of prior consent. Continue reading

On Facebook Fan Pages

As you may have heard, as per the self-appointedly competent data protection authorities in Germany you may not set up and maintain a Facebook fan page, nor may you embed Facebook plugins into to your web pages (it’s true, read here, here, here, and here). If you do, you’re acting in violation of German data protection law. Continue reading

More on exhaustion

Just after finishing our recent post on the exhaustion doctrine (ECJ “Usedsoft”), I came across two other news reports touching upon the same issues. The first concerned an ongoing dispute between Microsoft and a German used license trading company . The second pointed to an (unintentionally comical) decision of the Higher Regional Court of Stuttgart (Oberlandesgericht Stuttgart). Continue reading

Let’s draw a legal picture of framing: may a frame provider be held liable for a copyright infringement?

Framing is a convenient tool for journalists and readers alike. Putting a frame around a wide variety of content makes life easier for many jobs, passions and commercial interests. However, does framing provide any legal pitfalls?

Let’s first draw a picture of framing: What’s framing exactly? Other than setting an ordinary link to content of a third party’s website, in the case of framing the content is integrated via a link (“embedded” – e.g. as an iframe – or “inline link”) onto the very website which is called up. Via this link the third party’s content is displayed without any further click and without change of the URL in the browsers address bar in a so called frame of the same screen window whilst being stored on the third party’s server.

And legally? May a frame provider be held liable for a copright infringement? He may, but not necessarily: The Cologne Court of Appeal (Oberlandesgericht) recently held that a frame provider embedding content in the way described above does not commit a copyright infringement. Continue reading

EU Cookie Law in Germany

As we are quickly moving towards Germany’s 1st anniversary of non-compliance with the infamous “EU Cookie Directive“, one would expect the legislator to really make a push to get something on paper, right? Well, not so. In fact, there isn’t even a legislative silver lining anywhere to be seen. We have witnessed one draft of a change to the “Telemedia Act” (the place where any transforming the EU’s wisdom into German law would take place) submitted by the federal state of Hessen last year that no one has really talked much about, and one draft submitted by the current opposition in the Bundestag that has now been rebuffed on committee level without before even getting a proper hearing in parliament – without spoiling us by publishing any reasons for the government’s stance, sadly. That said, that’s all good news, really. Continue reading

Federal Constitutional Court on WLAN Liability

Germany’s Federal Constitutional Court has just reminded the Higher Regional Court of Cologne (one of the courts that will hold you liable for just about anything that third parties, i.e. your children, your neighbors, the guests of your hotel etc., might do using your WLAN) that, contrary to what the Cologne Court assumed, not all legal questions have been answered. The Cologne Court had refused a request by the defendant to be granted a second appeal to the Federal Supreme Court because it assumed (for reasons no one can really understand) that the Supreme Court has already decided on the relevant legal issue. Continue reading

Motion to Curtail WLAN Liability

As reported by heise, the Senate of Berlin (in its capacity as government of the Federal State of Berlin) will, it has been announced, put forward a motion in the Federal Council of Gemany (the second “half” of the federal parliamentary instutions next to the Bundestag) aiming at rewriting – or actually writing for the fist time – the law on the liability of those who operate WLANs for unlawful acts commited by other people through those WLANs. If successful, the motion could finally put an end to, or at least regulate by democratic means, some of the rather strange views that the German courts have taken over the past ten odd years regarding this particular “problem” of the Internet age. Continue reading

Search Engine Liability

Now that the Google and its fellow search engines are possibly heading for a new form of liability in the UK, what’s life like for search engine providers in Germany? Well, as usual, it’s complicated.

The question of Google’s responsibility for what one may find when searching for a particular set of terms has been dealt with by a variety of court decisions on appeal court level (our “Oberlandesgerichte”) and even once by the German Supreme Court (Bundesgerichtshof). Interestingly, though, the problem that one would think is the most common problem that people have with the search engine phenomenon has not really been dealt with by the courts. We know that Google is generally allowed to display thumbnails of copyrighted images on its image search site. We have been informed that Google is not liable for the “snippets” that appear as a result of one’s search. But we don’t know what Google is required to do (if anything) when being informed of a clear violation of someone’s, say, protected private sphere committed on the internet and spread through tools like Google’s search engine. Continue reading