p2pnet - rss feed: Screw you, Viacom
p2pnet news P2P | Freedom:- “Screw you, Viacom. Take your lousy videos and —-
—- watch them yourselves.”
That’s Stan Schroeder on Mashable, responding angrily to the news judge Louis L. Stanton has ordered Google to hand IP addresses and other YouTube user data over to Viacom.
“Let me tell you, in the shortest possible terms, what this means,” Schroeder says, continuing >>>
The court justified its decisions partly by what the folks at Google had written in a blog post a while ago. An IP address is not personal data; it cannot identify you without any additional information, they argued. Google has stabbed itself in the foot with that post, but even without going into its analysis, I can tell you the following:
a) Viacom wants these IP addresses precisely because they want to be able to identify the users. Why else would they ask for them?
b) Yes, the IP address is only one piece of the puzzle. YouTube login info - which Google also must produce to Viacom - is another. I bet those two are enough for full identification of many users. But even if they’re not, asking for this data and saying ‘they’re not enough to identify the user’ is completely stupid, because little by little Viacom will get the rest of the data they need - from the ISPs, for example. It’s like saying: hey, you: I’m not going to ask you for your personal data, only your first name and the city you live in, please.
I think I’m not alone here when I say screw you, Viacom. Take your lousy videos and watch them yourselves. Slap a nice watermark on each one so I can make sure I never watch one again. In the meantime, can someone make sure that judges who probably don’t have a clue about what an IP address is don’t get assigned to cases like this? Thank you.
In his post, Schroeder cites Kurt Opsahl’s EFF (Electronic Frontier Foundation) analysis which states >>>
Yesterday, in the Viacom v. Google litigation, the federal court for the Southern District of New York ordered Google to produce to Viacom (over Google’s objections):
all data from the Logging database concerning each time a YouTube video has been viewed on the YouTube website or through embedding on a third-party website
The court’s order grants Viacom’s request and erroneously ignores the protections of the federal Video Privacy Protection Act (VPPA), and threatens to expose deeply private information about what videos are watched by YouTube users. The VPPA passed after a newspaper disclosed Supreme Court nominee Robert Bork’s video rental records. As Congress recognized, your selection of videos to watch is deeply personal and deserves the strongest protection.
The Logging database contains:
for each instance a video is watched, the unique “login ID” of the user who watched it, the time when the user started to watch the video, the internet protocol address other devices connected to the internet use to identify the user’s computer (”IP address”), and the identifier for the video.
Google correctly argued that “the data should not be disclosed because of the users’ privacy concerns,” citing the VPPA, 18 U.S.C. § 2710. However, the Court dismissed this argument with no analysis, stating “defendants cite no authority barring them from disclosing such information in civil discovery proceedings, and their privacy concerns are speculative.”
In a footnote, the Court references the VPPA, noting that the federal law “prohibits video tape service providers from disclosing information on the specific video materials subscribers request or obtain.” It is possible that the reference to “video tapes” in the VPPA was confusing. However, the Act is not limited to the technology available at the time of its enactment.
To the contrary, the act refers to “prerecorded video cassette tapes or similar audio visual materials.” A YouTube video may not be a videotape, but certainly qualifies as audio visual material. Thus, YouTube is a “video tape service provider” under the act, because it is “engaged in the business [of] delivery of “audio visual materials.” The VPPA protects “personally identifiable information,” which is defined to include “information which identifies a person as having requested or obtained specific video materials or services.” This is exactly what is in the Logging database.
Accordingly, pursuant to this federal law, the Court may not order the production of “personally identifiable information”:
in a civil proceeding [except] upon a showing of compelling need for the information that cannot be accommodated by any other means, if;
(i) the consumer is given reasonable notice, by the person seeking the disclosure, of the court proceeding relevant to the issuance of the court order; and
(ii) the consumer is afforded the opportunity to appear and contest the claim of the person seeking the disclosure.Today’s court order made no finding that Viacom could not be accommodated by any other means, nor were the YouTube users provided with notice and an opportunity to contest the claim.
Instead, the Court focused on some statements made by Google on its blog:
We . . . are strong supporters of the idea that data protection laws should apply to any data that could identify you. The reality is though that in most cases, an IP address without additional information cannot.
The Court also stated that Google did “not refute that the ”login ID is an anonymous pseudonym that users create for themselves when they sign up with YouTube’ which without more ‘cannot identify specific individuals.’”
As an initial matter, this is factually insufficient. If any single one of the YouTube users in the Logging database picked a Login ID that does identify that user (i.e. if my YouTube login was kurtopsahl), then the Logging database’ information about viewing habits is protected by the VPPA, even if others pick anonymous pseudonyms.
Furthermore, even Google’s IP address statement only asserts that “in most cases” the IP address is not identifiable, certainly not in all cases. Putting aside whether a Google Public Policy blog’s statement on an unrelated topic can waive the privacy rights of YouTube users, the statement means that at least some YouTube users are identifiable, and must be protected by the VPPA.
In any event, the court ordered production of not just IP addresses, but also all the associated information in the Logging database. Whatever might be said about ‘an IP address without additional information,’ the the AOL search history leak fiasco shows that the material viewed by a user alone can be sufficient to identify the user, even with neither a login nor an IP address.
The Court’s erroneous ruling is a set-back to privacy rights, and will allow Viacom to see what you are watching on YouTube. We urge Viacom to back off this overbroad request and Google to take all steps necessary to challenge this order and protect the rights of its users.
Stay tuned.
.
.Stumble It!
hand IP addresses - Give Viacom user data, Google ordered, July 3, 2008
Mashable - Again, One Clueless Person Destroys the Privacy Of Millions, July 3, 2008
Kurt Opsahl - Court Ruling Will Expose Viewing Habits of YouTube Users, July 2, 2008
Use free p2pnet newsfeeds for your site. It’s really easy!Subscribe to p2pnet.net | | rss feed: http://p2pnet.net/p2p.rss | | Mobile - http://p2pnet.net/index-wml.php
Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for details. Download here.
July 3rd, 2008 at 8:29 am
Who cares about rights when ***COPYRIGHT*** is at stake…