SOPArss

CISPA: ‘Devil Is in the Details’ of Cybersecurity Bill, UB Law Professor Says

expert photo
EXPERT CONTACT :

Mark Bartholomew

Associate Professor of Law

University at Buffalo School of Law

716-645-5959

bartholo@buffalo.edu

Bartholomew is an expert in intellectual property and cyber law. Here, he comments on the Cyber Intelligence Sharing and Protection Act (CISPA), a controversial cybersecurity bill pending in Congress.

On the intent of CISPA:
“The basic thought behind CISPA is to enable corporations holding personal online data to share it with the federal government when necessary to prevent a national security threat.”
On why CISPA could raise serious privacy concerns:
“I think CISPA is a good idea, but the devil is in the details. Right now, the language of the proposed act calls for sharing of online data when it is needed to help prevent a ‘cyber threat.’ The real question is how do you define 'cyber threat?'
“I do not want that definition of ‘cyber threat’ to be satisfied except in extraordinary circumstances. There are serious privacy concerns at stake, and personal online data should only be shared with the Feds when it really is needed to prevent a national threat.”
On the difference between CISPA and SOPA, a previous cybersecurity bill that sparked significant protest among consumers:
“SOPA (the Stop Online Piracy Act) was designed to prevent intellectual property infringement, not threats to national security. SOPA was about giving intellectual property-holders and the government the right to shut down infringing websites -- for example, stopping foreign websites that allowed you to watch bootleg copies of Hollywood movies. CISPA addresses a different issue: when is it acceptable for companies to turn over your personal online information to the Feds.”
Why some tech companies like CISPA:  
“It is important to note that the legislation does NOT require companies to turn over your online data to the government. It just allows companies to do so when that definition of cyber threat has been satisfied.
“Companies like Facebook like this proposed law because it gives them legal cover if they turn over personal information and then someone tries to sue them for a privacy violation. They also argue that the legislation will help them coordinate with government agencies and respond to cyber threats to their own platforms more quickly. My big concern is that, if cyber threat is defined too vaguely, it would give the government too great of an ability to snoop through our personal online information.”
On whether CISPA, like SOPA, will spark widespread outrage and protest:
“I don’t know. The online outrage at SOPA was kind of shock to me; usually, pro-intellectual property rights legislation like SOPA just sails through Congress. I think there is definitely the possibility for CISPA to galvanize many in the online community like SOPA did because there are many who do not like the idea of their personal information being shared with others.
“On the other hand, one big force against SOPA was that powerful technology companies like Google and Wikipedia moved against the legislation because they saw it as a threat to their bottom line. Here, I do not know what the corporate constituency is against CISPA. It looks like it is just up to individual citizens (and advocacy groups like the ACLU) to protest if CISPA portends to turn everything into a cyber threat."

Related Q&A: SOPA's Vague Language Could Lead to Wide Restrictions on Information Available on the Internet, UB Expert Says

Related Topics:

CISPA, cyber law, cybersecurity, Internet, SOPA

SOPA's Vague Language Could Lead to Wide Restrictions on Information Available on the Internet, UB Expert Says

expert photo
EXPERT CONTACT :

Mark Bartholomew

Associate Professor of Law

University at Buffalo Law School

716-645-5959

bartholo@buffalo.edu

Bartholomew is an expert in intellectual property and cyber law. With Wikipedia, Reddit and other websites “going dark” today to raise awareness about two anti-piracy bills that could affect the amount of content available on the Internet, Bartholomew shared his thoughts on the pending legislation. The bills, the Stop Online Piracy Act and PROTECT IP Act, are commonly known as “SOPA and PIPA.”

On why SOPA could have a “chilling” effect:
 
“The problem with SOPA is that the language is very vague. So let’s say this passes without any further changes -- then we’re going to have to rely on judges to evaluate this language. They could construe it very narrowly and it won’t affect things very much. Or they could construe it very broadly so that all of a sudden, all this information on the Web is no longer available. And that’s something potentially chilling -- having this vague language out there that gets passed by Congress.”
 
“From the perspective of Google and other Silicon Valley technologists, the thought is that this is going to go too far: How are we supposed to know when a rogue website is 100 percent bad? Maybe they just have a couple of things that are infringing.  Should a search engine really be required to block all access to that website?”
 
On the widespread protest against SOPA and PIPA on the Web, with Wikipedia and other sites “going dark” to raise awareness about the legislation:
 
“I have been surprised. The story of modern copyright law in this country has largely been of the copyright interests having their way with Congress. The music and motion picture industries have been incredibly effective lobbyists. But now we see for perhaps the first time technologists like Google really flexing their political muscle to potentially stop this legislation in its tracks. I’m not that surprised that the blogosphere is objecting to these proposed laws, but I am impressed by how technology companies are channeling this Internet outrage into real political momentum.”
 
On the purpose of SOPA:
 
“The purpose of the law is to limit the activity of infringers who offer copyrighted material for free online. We can’t stop these rogue infringers who act in foreign jurisdictions, where U.S. law often doesn’t reach. So the next best thing is to require Google or Yahoo and sites like these to kick those people off the system.”
 
“Currently, Internet companies are only responsible for removing specific infringing materials when they’re notified of those specific materials by the copyright holder. With SOPA, the threat is that they can be forced to remove entire websites. So instead of removing one infringing video, Google would no longer be able to present you with search results from an entire website.”
Related Topics:

cyber law, Internet, SOPA

Login