You are on page 1of 4

Trademark.

15USC1116grantsfederalcourtsinjunctionstopreventviolations
ofanyrightofamarkregisteredwiththetrademark
15U.S.C.1114(1)(a)Anypersonwhowithoutconsentofregistrant
useincommerceanyreproduction/counterfeit/copyorcolorable
imitationofaregisteredmarkinconnectionwithsaleoradvertisingof
goodslikelytocauseconfusion/mistakeshallbeliablefor
trademarkinfringement//Under1114and1125plaintiffmustprove
ithasvalidmarkandconfusionwillarisefromdefendantsuse
15U.S.C.1125(c)Dilutionbyblurringortarnishment:Injunction
againstanotherpersonwhousesthat(widelyrecognized
geographicreach,volumeofsales)markincommercethatislikelyto
causedilutionbyblurringortarnishment///Regardlessofany
economicinjury///Blurringlook@degreeofsimilarity,inherent
distinctivenessofmark,extentofuse,degreeofrecognition///
Tarnishmentharmsthereputationorlesseningofvalue///
Exclusions:Fairuse(canuseininfringement,blurring,tarnishment),
newsreportingandcommentary,andnoncommercialuses
(d)CyberpiracyPreventionLiableforcivilactionifthereisabad
faithintenttoprofitfromaregisteredmarkandregistration,trafficin,
oruseofthedomainnamethatisconfusingsimilaroridentical///
Badfaithfactors:IPrightsindomain,legalnameused,priorusewith
bonafideofferingsofgoodsorservice,noncommercialuse,offersto
(not)sell
SAFEHARBOR15U.S.C.1114(2)(D)Domainregistrarsfollowing
courtordersunderSection1125orremovingadomainregistration
undera"reasonablepolicy"areimmunefromdamages///ifa
domainisremovedbya"policy"decision,theregistrantcan(after
filingnoticewiththetrademarkowner)fileforinjunctiverelief///
(i)(II)injunctionifdomainregistrardoesnotcomplywithcourtor
providejurisdiction///(i)(III)plaintiffmustshowbadfaithintentto
profitbyregistrartosucceedfordamages///misrepresentationby
markholderallowsregistrartocollectanydamagesitmustpayunder
1114//seeLockheedMartinv.NetworkSolutions(nocontributtory
infringementordilutionclaimsforregistrarwhodidnotknoworhave
reasontoknowthatitsservicewasusedtoinfringePsmark)
RulesforUniformDomainNameDisputeResolutionPolicy
ICCANN'sadministrativeprocedureprovideamorecosteffective
avenuefortrademarkownerswhofindtheirdomainshavebeen
usurped//Doesnotneedtobearegisteredmark//veryfriendlyto
trademarkholdes(85%transferrate)//reviewbyfederalcourt
possibleforloser
GreenProductsCov.IndependenceCorn(1997)(courtconsidered
thestrengthofPmark,strongsimilaritybetweenmarkandDs
domain,closecompetitiveproximity,likelihoodDintendedto
capitalizeonconfusiontolurepotentialcustomerstosite,andthe
degreeofcarethatPscustomerswouldusetofindP'ssiteruledin
favorofplaintiffbyweighingtheriskofharmtobothparties)
Ballyv.Faber(1998)(fairusecriticismexceptiontodiluitionclaim
cantsayBallysSuckswithoutBallys)
Bihariv.Gross(2000)(fairusedefenselooksat(1)descriptive
natureofthetradeusageand(2)goodfaithofthedefendant
metatagsarenotperseviolationsb/cdescriptive,badfaithisnot
foundjustbecausecriticalofmarkownerdisclaimerbydefendatof
noassociationwithmarkholderhelpsbutnotdispositive)
Brookfieldv.WCE(1999)(DsuseofPsmarkinmetatagswasnot
nominativebutwasmeanttoinfringeonPsmarketconfuse
customersandleadthemawayfromP)
Panavisionv.Toeppen(1998)(Dpurchases
panavision.comforphotosofPana,Ill,offerstosellitto
Pfor$13,000,Psuesfordilution.Offertosellis
commercialuseandalesseningofthemark)
Playboyv.Welles(2002)(Psuseofthemarkis
nominativeneedPlayboytosayPlayboyPMOY
BUTherwallpaperwatermarkwasnotnominativeinits
repeatinguseofthePMOYandbunnylogonominative
usetest:wouldtheusebereadilyidentifiablewithout
thetrademark")
SportysFarmv.Sportsmans(2000)(Badfaithfound
whenDcreatedSporty'sFarmafterregistering
sportys.comandgettingintotheaviationbusiness
occupiedbySporty'sstupidstoryaboutdog)
Tyv.Perryman(2002)(Dtakesadvantageofthe
secondarymarketbyacquiring"bargainbeanies.com"
whichTyfilessuitfordilutionofmark,butthiis
nominative,secondarymarkwasintentionallycreated
byTybylimitingrunsofbeaniebabies)
Therearereally3separatetrademark
regimes:federal,state,andcommonlaw.Federal
governedbytheLanhamAct.Statesmayalsoestablisha
separatelegislativeframework(seeIndianaCode242).
Commonlawtrademark(commonlydenotedwithTMor
SM)alsoexistswithjudicialgloss.All3canbeusedto
coordinateprotectionofvaluablemarks

Patents(1/2).
Rightforinventortobar/excludesomeoneelseto
makeusesell,offertosellorimportthesubjectmatter
ofthepatent///ArticleI,Section8Constitutionalbasis:
advancingsciencepolicy///Balancingactsareinvolved
though:discouragemonopoliesvsprotectinvestment
FederaljurisdictionAnyD.CFederalCircSC
Threekindsofpatents:(1)plant(2)design(3)utility
patents(wayitworks,whatitdoes,howit'sputmade
RightsgrantedPatentslast20yearsfromthedateits
filedandthentheinventionentersthepublicdomain
entitlinganyonetopracticetheinventionthemselves
3Qualifyingcriteria(1)Patentablesubjectmatter:
processes,machines,articlesofmanufacture,
compositionsofmatter+improvementsonexisting
patents(mighttrytocreateportfoliotoprotectyourself)
//DisqualifiedAbstractideas,naturallaworalgorithms,
no"usefulpurpose"(2)Noveltyhastobenewtothe
world//PriorArttestwhatwasknown?//"Firstto
file"systemthatisinlinewiththerestoftheworld//1
YearGraceperiodifinventiondisclosed(3)Distinctness
ornonobviousness:MaybepatentableandnovelBUT
isitaleap,anexpressionofintellectualcapital,whatis
levelofskillapersonhavingordinaryskillinthatart
Threewaystoapply:RegularORprovisional
application,intenttoapply//eitherinventororagentof
inventormaysubmit//feescanbe1530ktoapply,
costscanextrapolateoverseas//thereisabackand
forthbetweeninventorandofficenarrowingscope

Patent(2/2).
InfringementMakes,uses,offerstosellorsellsorimportswithout
authorityfromthepatentholder(license)///Injunctiverelief,
compensatorydamages(presumedroyalty,perhaps)oractual
damages///Willfulinfringement(actualorconstructiveknowledge+
infringement)getsyoutripledamagesandattorneyfees
Businessmethodexceptionwhittlesawaysoftwareasmath
ideathathadpreviouslykeptoutofpatents//Amethodof
operatinganyaspectofaneconomicenterprise//Whencomputers
cametobeinvolvedintheprocess,itlookedmorelikepatentable
subjectmatter
StateStreetBankv.SignatureFinancial(1998)(Businessmethods
arepatentable,hubandspokefinancialsevicessystemOKtopatent,
ifyoutakealgorithmandcreatepracticalutilitytoit,itsprotected
Bilskicases:Pushbackonthebusinessmethodpatent//The
patentofficemighthavebeenoverwhelmedafterStateStreet
SupremeCourtrejectedofmachineortransformationtest:You
couldhaveapatentableprocessifitis:(1)Tiedtoamachineor(2)
TransformsaparticulararticleintoadifferentarticleSupremeCourt
reversedthis,saidlookatallfactorstoconstituteprocess///
Whetheramachineisinvolvedhelpsyoubutisn'tdispositive

Copyright.
Copyrightablematerial?(1)Fixed,(2)original/creativeexpression
Excluded:Factsanddiscoveries(compilationsonlyifcreativityin
selection,coordinationi.e.Feist),abstractideas(commonthemes,
characters),functionalworks(systems,processses,exceptseemerger
doctrine)andusefularticles(patent),wordsandshortphrases
Protectedrights106:(1)reproduction(2)derivativerights(3)
distribution(butseeFirstSaleDoctrine)(4)publicperformance(5)
publicdisplay(6)digitalaudiotransmissionpreemptsstatelaw
Provinginfringement:(1)proveownership(2)copyinginfact
lookataccessandprobativesimilarity(3)improperappropriation
FairUse:Considerfourfactors(1)purposeandcharacteroftheuse
(2)thenatureofthecopyrightedwork(creativevs.facts)(3)amount
andsubstantialityoftheworkusedand(4)effectuponthemarket//
categories:criticism,reporting,cteaching,scholarship,research
WorkMadeForHire:(1)workpreparedbyemployeewithinscope
ofemploymentORworkspeciallyorderedorcommissioned(BUTonly
if(1)collectivework(2)motionpicture/audiovisualwork(3)
translation(4)supplementarywork,(5)compliation,(6)isntructional
textandanswersANDONLYIFneedexpresswrittenagreement
signedbyboth//preparedasemployeelookatcontrolofmeansof
work,benefitsvs.flatfee,taxtreatment,durationandscope///
scopeofemploymentwasthistypeofworkemployeewashiredto
do?Duringtimeandspaceofjob?Motivatedbypurposetoserve
employer?
ContributoryInfringement:(1)knowledgeofinfringingactivityand
(2)substantialparticipationorinducementofinfringement
VicariousLiaiblity(1)rightandabilitytocontrolinfringerand(2)
directfinancialbenefit
LATimesv.FreeRepublic(fairusedeniedb/crepostingfulltextof
articlesonforumdidnotchangenatureofwork,seemscommercial,
exactcopies,lessensthemarket)
Kellyv.ArribaSoft(fairusefoundb/ceventhouseoffullphoto,
smallersizeandtransformeduse(searchfunctioninsteadofart)use
offullsizeimagesmayhavebeeninfringingthough,remanded)

MAIv.Peak (loadingcodeinRAMfixesacopy)//
overruledbySection117(c)and(d)forrepairservices
Perfect10v.Amazon(distributionrightnot
implicatedbylinks,fairuseagainfoundinimages,but
DMCAsafeharborsnotconsideredforcontrliability)
RTCv.Netcom(noknowledgefound(remand)where
therewasautomaticprocess)
A&MRecordsv.Naptster(NoDMCAsafeharborb/c
nottransmittingconnectionsorpassingthroughserver)
ALSScanv.Remarq(ceaseanddesistorderenough
fornotificationunderDMCArequirements)
Hendricksonv.Amazon(noadequatenoticeb/c
allegedinfringingmaterialwasnotyetpostedtosite)
MGMv.Grokster(contrliabforpromotionof
infringingthenextNapsternosubstantiallawfuluse)
Sonyv.Universal(Betamaxcapableofsubstantial
noninfringingtimeshiftinguse,thusnoconliab)
512OSPrequirementsToqualify,aserviceprovider
must(1)"Adoptandreasonablyimplement"apolicy(2)
providesforterminationinappropriatecircumstances
(3)of"repeatinfringers"//musthavemeansfor
copyrightholderstoidentify,protectworks//no
circumventionofDRM
512(a)ConduitSafeHarbor:forOSPSwhoare(1)
offeringtransmission,routingorprovidingof
connectionsof(2)onlinecommunications(3)between
pointsspecifiedbytheuser,of(4)materialoftheuser's
choosing(5)withoutmodification
512(c)StorageSafeHarbor:forOSPswith(1)no
actualknowledge(orawareoffactsorcircumstances
makinginfringementapparent)(2)uponobtaining
knowledge,expeditiouslyremoves(mustprovideagent
tocontact)(3)nofinancialbenefitdirectlyattributable
totheinfringingactivity
512(c)(3)NotificationMUSTIDthematerial,givea
waytoreasonablylocatethematerial,givecontactinfo,
submitgoodfaithbelief///Ifyoudon'tgivetheman
accurateidentifiedlistofstuff,youcan'tclaimactual
knowledgeunder512(c)//noticeandcounternotice
provisionsallowISPstoarguefairuseorotherdefenses
512(d)InformationLocationSamenoticeandtake
downregime,butforlinkingtoinfringingcontent(no
actualknowledge,factsandcircumstances,prompt
removal,nofinancialbenefit)
Ellisonv.Robertson(changing512contactinfoemail
withoutfwdornoticewasnotreasonablepolicy)
Misapproprationoftradesecret(somethingofvalue
derivedfromsecretw/reasonableprotectionofit)

Contracts,Licensing(1/2).
ProCDv.Zeidenberg(Assentbyconductoflicense
terms,eventhoughnotapparentbeforepurchase)
Hillv.Gateway(continueduseassentedtothe
arbitrationclauseincontract,evenifdictatedbyseller)
Klocekv.Gateway(shippingcomputerwasoffer
andplaintiffdidntaccepttermsbutminorityview)
Davidsonv.IG(clickthroughagreement/continued
usebyplaintiffmeansheacceptedterms)
Contracts,Licensing(2/2).
Spechtv.Netscape(termshiddenbylinksonoagreement)
InreRealNetworks(nosubstantiveorprocedural
unconscionabilityjustb/csmallprint,forumselectionfarfromhome)
Browerv.Gateway(expenseofarbitrationforum(4xpriceofthe
product)meantthetermwasunconcionsable)
Dontgetcutewithtermstowlineclosely,donthidethem
UETAStatuteofFrauds:Documentmaynotbedenied
enforceabilityjustbecauseitisindigitalform//esigorewritingOK
//BUTonepartymayinsistvalidlyonprinteddocuments
UETAwriting?Transient(IM)maybeOKifcapableofPRTSCRN,
butgenerallyneedcapableofbeingprinted//UETAdoesnotreplace
substnativelawofstate,looktostateforwritingrequirements
UETAsignature?(1)Electronicsound,symbolorprocess(2)
attachedtoorlogicallyassociatedwitharecordand(3)executedor
adoptedbyaperson(4)withintenttosignrecord.//EMAILSIGOK
FederalESIGNAct:IfUETAisnotenacted,ESIGNapplies//limited
tocommercialbusinesaffectinginterstatetransactionsONLY//
cannotvarytermsofESIGN:(1)nooralsig(2)allpartiesneedaccess
torecords//Lookatemailstoseeifanythingconstitutesa
transactionormeetingofthemindswithattachedsignature
InternationalCasingsv.PremiumStandardFarms(emailssent
duringnegotationsbecomepartofnegotiatedterms,emails
constitutebindingwrittencontract,headerofemail+send=sig)
Jeffersonv.BestBuy(doingsettlementnegotiationsbyemail
meantthatacceptinganofferbyhittingSendwasacceptance)be
carefulaboutwhatcommunicationsaresentthatcancreatecontract

IntrusiveCommunications.
TrespasstochattelTrespasstochatteloptionsareavailableif
someoneisinterferingwithyourserverimpairedastocondition
qualityorvalueBUTIntelsaysuneedmeasureableloss(minority)
ImpliedLicenseforuse:Canbeadefense,butisrevocablewhen
serverputsintechnologicalblocks+tellsoffenderstop
Compuservev.CyberPromotions(Trespasstochattelmaybe
committedbyintentionallyusing/intermeddlingwithchattelserver
ispersonalpropertycourtlookedatwhetherchattelwas
impairedastocondition,qualityorvalue)
Intelv.Hamidi(trespassnotfoundb/cnodemonstrableharm
couldbeprovedmustshowmeasurablelosstoshowthatchattel
wasimpairedperCompuserve)
AOLv.LGCM(trademarkdilutionforspoofingdomainnamein
headersofemailsalsotermsofserviceandexceededauthCFAA)
CANSPAMACT:Bansfalseormisleadingheaderinformation//
prohibitsdeceptivesubjectlines//requiresthatemailhasoptout
andhavelimitedprivaterightofaction//preemptsstatelaw
CFAA:18USC1030(Effectivetoolforgoingaftersomeone
tamperingwithyoursystem)//offenses:(1)compromise
confidentialityofcomp,(2)trespassgovtcomp,(3)accessingcompto
defraudorobtainvalue(4)transmission/access(wormsvirusesetc)
(5)traffickingpwds(6)extortionw/threatstodamagecomp
CFAAScope:Includesattempt//govtorfinancialinstitcomp
usedininterstateorforeigncommerceorcommunication
CFAAPrivateRightofAction:Ifloss>$5k,orforimpairingmedical
exam/diagnosis/treatment,physicalinjury,threattopublicsafety
StateLawApproachesyoumightapplycyerstalkinglaws,antivirus
lawsorcyberterrorismlaws(welookedatI.C.354323(b)comp
trespasslaww/accessdef:approachinstructcommunicatestore
JurisdictionalConcerns.
Jurisdiction:Canreachdefendantifthereisgeneral
presenceorminimumcontactsforpersonaljurisdiction
Statelawsbyandlargewilltellusjurisdiction(upto
constitutionaldueprocessorlimited)//longarmstat
Zippov.Zippo.com(jurisdictionhingesonnatureof
$$/site:contractingforbusinessinstate(PJ)>posting
information(NoPJ)vastmiddlegroundwithsome
levelofinteractivitytotest)
Cybersellv.Cybersell(noPJb/cnopurposeavailb/c
justpostingwebsitedoesnotavailtoallforumsno
contacts,sales,incomefromthestate)
Intentionalandtortiousconductaimedatstate=PJ
(inonlinesetting,yourpostingisintentionalsomaybe
youllbesubjecttojurisdiction)
Panavisionv.Toeppen(PanaIllinoissite;Calderv.
JoneseffectstestharmaimedatCalif.,feltinstate)
Compuservev.Patterson(whatsthenatureofthe
contactsthatcompanyhadw/state?PJnotcreatedb/c
someonebroughtyoursoftwaretoanotherstatetho)
Bensusanv.King(whatdoesitmeanfortortto
happeninstate?NYjazzclubtriestobringMOclubinto
NYcourtnotenoughtojusthavewebsiteforclubBUT
PJcouldhypoapplyifsitemarketedtoNYresidents)

ThirdPartyDefamation.
DefamationElements:(1)person(2)makesafalse
statementabout(3)athirdpartythatis(4)published///
hastopresentedtothirdparty//truthdefense
Damagesforperseandperquad(lesserharm)
Cubbyv.Compuserve(lookatsomeonewhorepeats
orrepublishesdefamatorycommentvs.someonewhois
apublishercompuservewasnewsstandwhohadno
reasontoknow(NYstandard)ofdefamationpostedon
itsmessageboardsdontwanttochillonlineISPs)
StrattonOakmontv.Prodigy(levelofeditorial
controldeterminesstandardfor3
rd
partyhereProdigy
publishedcontentguidelines,usedscreensoftware,
employedfolkstoenforceguidelines,THUSnotCubby)
CommunicationsDecencyAct47USC$230
(d)ProtectionforgoodSamaratinblockingor
screeningofoffensivematerialnoprovideroruserof
interactivecomputerserviceshallbetreatedasspeaker
(e)Noeffectonapplicablecriminallaws/IPlaws/state
(f)Definitions:interactivecomputerserviceany
informationservice,systemoraccesssoftwareproviding
computeraccessbymultipleuserstoserver///
informationcontentprovideranypersonresponsible
inwholeorpartforcreationofinformationprovided
Zeranv.AOL(230barslawsuitsholdingISP
responsiblefortraditionalnetfunctionspublishermust
bebroadsensemeananyonewhoiscommunicating)
Blumenthalv.Drudge(AOL/Drudgenotliableunder
230forpublishingwifebeatingcomments)
Anonuserunmasksubpoena(checkprivacypolicy,
makesurenotifyuser,politicalspeechhas^standard)
ColumbiaInsurancev.Seescandy(unnamedD
allowedforPtogetDidentitysufficientspecificity)
PrivacyandHIPPAclaims(Class11).
HIPAA:Coveredentitiesonly:healhplans,insuranceissure,HMO,
individualorgroupplanpayingformedicalcare,providers,hybrids
///protectedhealthinformationPHIhealthinformationtransmitted
ormaintainedinanyformormediumIDingtheindividualormaking
iteasytoIDindividualcreatedorreceivedbyacoveredentityrelating
tophysicalormentalhealthofindividual,provisionofcare,payment
//PHIdisclosureonlyallowedwithconsentUNLESStoindividual,
whenreqddbylaw,litigationpurposesandonlyminimumnecc.
SarbanesOxleyActgovernsreportingreqsofpubliclytradedCIA
Contractuallybasedobligations:Creditcardacceptancemaymean
securingcardinformationandcostsoflosingthatinfo(PCIDSSbig
finesifyoudontmaintainsecurityprogramtoprotectcarddata)
Stateprivacybreachnoticelaws:IfSSN,etcyoumustdisclose
Whichlawsappliestoyourinstitution?
Qstoconsider(1)Whereisyourplaceofbusiness?(2)Wheredo
youdobusiness?Ifstateslawmightapplytoyourinstitution,does
longarmjurisdictionreachfarenough?Whatisbreach?(1)How
muchtoknowdatareasonablybelievedacquired//Difficultto
knowhowmuchwastakenorcompromisedsometimes
InformationSecurity/MaintainingPrivacyofData.
CIA:Careforconfidentiality,integrityofinformation,accessibility
FERPA:FERPAdoesn'tspeakmuchtorequirementsofmaintaining
privacyofstudenteducational///Reasonablemeansmustbeputin
place,butthe"lawstopsrightthere"///"Technologist'sdream"tobe
thisopenended///lookatlikeinstitutionsinlikesituationsscope,
scaleoftheinstitutioncanbebroughtintoreasonablenesscalculation
GLBAFinancialinstitutiondataldevelopimplementand
maintainacomprehensivesecurityprogram//"Insure"the
confidentialityofcustomerinfostrictliability?//trytoanticipate
thehazards//Protectagainstunauthorizedaccesstooruseof
informationthatcouldresultinsubstantialharmtocustomerMOAR
GLBAreqs:Adequatelytrained//Lookatwholesystemlookat
network,softwaredesign//DesignandimplementsafeguardsAND
pickproviderswhoarecapableofsafeguarding//BrazossaidGLBA
wasOKwhenwrittenpolicy,currentrisksknown,propersafeguards
HIPAAHIPAAhasamuchmorerobustsetofrequirementsfor
"coveredentity"//EPHI=ElectronicProtectedHealthInformation//
InsureconfidentialityintegrityandavailabilityofEPHI//Protect
againstreasonablethreatsandhazardstosecurityandintegrityof
informationandprotectagainstreasonableforeseeableworkforce
requirements///"Noonesizefitsallapproachtosecurity"youhave
someflexibilityofapproach///Whatcanyoutakeintoaccount?Size
oforganization,howcomplex,whattheorganizationiscapableof
(twodoctoroffice,vs.HMOvs.researchhospitalconnectedto
university)//AdministrativesafeguardsHastobesecurity
managementprocesspreventing,detectingcorrectingsecurity
violationsRequiredriskanalysisandassessmentwhatarerisks
andhowbadarethey?///Requiredsanctionpolicy(ifyouhave
employeesthatdon'tmaintainpolicieswhatsanctionsapplyto
them)//Informationsystemactivityreviewareviewthathastobe
putinplace///AnyplacethattouchesHIPAAinfotoo//Physical
safeguardsandtechnicalsafeguards///HowdoyouIlimitphysical
access?Accesscontrol,plans,maintrecordsaretakenintoaccount
Guinv.Brazos(PtookrequirementsofGLBAtoshownegligence
thowasnoprivaterightofactioncourtlooksforactualeconomic
harmemployeeofDtookunencrypteddatahome,laptopstolen
BUTnonableforeseeablenessofthisnoproximatecause)
IntheCLOUD.
Whatisacloud?Thirdpartyservice(infrastructure,
platform,softwareasaservice(IaaS,PaaS,SaaS))
InformationSecurityObligations:FERPA,e.g.:school
can'tdiscloserecordswithoutconsent//Itispossible
thattheschoolcancontroltheinformationifitisinthe
handsofathirdpartyYESContractuallyyoucanprovide
thatinformationiscontrolledbyFERPAand3
rd
Pcomply
HIPAAEPHI:Incloudisthisadisclosuretoathird
party?Depends.Technicallyunencrypteddatahanded
offtoacloudprovidergivesthemconstructiveaccess//
Ifyoucantcontrolhowthirdpartycouldaccessthat,in
hismindthat'saconstructivedisclosure.//Need
BusinessAssociateAgreementORencryptthedata
firstUNLESSavailablekeytodatayou'dneedtosatisfy
yourobligationsbyhavingabusinessassociate
agreementinplace//Mostserviceswillnotenterintoa
BAAsomakesurethey'renotgettingunprotectedinfo
ReasonableSecurityinthecloudItcanbedifficult
togetreliableinformationabouthowgoodofsecurity
thatathirdpartyservicehas(andforgoodreason)//
askthemtoshowyouhowtheycompliedwithHIPPA
withoutgivingovertheirwholesecuritydetails
DatabreachnoticelawsWhoinformsincloud?
LitigationissuesObligationstotheclientif
someoneshowsupatGooglewithasubpoena,howcan
Imakesureprivilegehasn'tbeenlostbycloudprovider
disclosure//Privilegecanbewaivedbynotprotecting
informationthat'sdisclosedtoopposingcounselBUT
cloudactivitydoesnotconstituteactivityinandofitself
butpossiblethroughlackofdiligenceinadiscoveryreq
InfringementConcernsPatentclaimsagainstyour
cloudmaymakeyouapatentinfringeraswell
LicenseissuesSometimesserviceshaveclaimsto
unlimitednonexclusiveirrevocableetc.useofyour
information///infoshouldbeproperlysandboxed
IndemnificationAskproviderforindemnification
PaaSLook@licensetodistributesoftware(MIAcopy)
Jurisdiction:E.G.storinginformationinVAmakesyou
availableforjurisdictionalpurposes
ProvisionoftheserviceAskclienthowcriticalthe
serviceuptimeisis99%OK?Getathresholdagrmnt
Endofagreement>WhatdoesTOSsay?Confident
andsecurityreqsMUSTsurviveiftheinfoisintheir
handsREMEMBERTODOTHERISKCALCULUSALWAYS

.EDiscoveryRequests.
Rule34:ElectronicStorageInformationexpandsthe
notionofdocumentstomeanttobeflexible
ReasonablyAccessedESINotallESIiseaytoget
andif$3xtogetESIthandamagesreqdyoumaybeSOL
Safeharbor:Mistakeinproductionnosanctionfor
routine,goodfaithoperationofESIhastoberoutine
Revokingprivilegemaybeinadvertentdisclosurein
datadump,therecanbeclawbackagrmtorcourtseal
Zubulake(deleteevidence,noinform>sanctioned)
ReferenceModel(reasonablyanticipatelit,stopusual
preservationanddestruction,informFREQFLYERS)