Source: https://www.mediainstitute.org/2016/01/25/security-failure-fair-use-analysis/
Timestamp: 2019-04-26 06:29:30+00:00

Document:
In security failure fair use analysis, the failure leads to the opposite outcome (no fair use), but the two kinds of failure may play similar roles. First, what is security failure fair use analysis? In Authors Guild v. HathiTrust,6 and Authors Guild v. Google Inc.,7 plaintiff authors contended that unauthorized access to the database storing millions of in-copyright books scanned by Google would gravely harm the market for their works, were hackers to break inadequately protected copies loose from Google’s or the University of Michigan library’s control. In both cases, the court found Google’s security measures “impressive,” and plaintiffs’ fears of a security breach “hypothetical” and “conjectural.” “Google has made a sufficient showing of protection of its digitized copies of Plaintiffs’ works to carry its burden on this aspect of its claim of fair use and thus to shift to Plaintiffs the burden of rebutting Google’s showing. Plaintiffs’ effort to do so falls far short.”8 Similarly, the court found that Google had successfully designed against multiple user queries that could cumulatively reassemble “snippets” into full pages from the scanned books.
Suppose, instead, the authors had rebutted Google’s showing of sufficient security. In that event, the fourth fair use factor (effect of the use upon the potential market for or value of the work) would have weighed heavily against a fair use determination. Proof of inadequate security would have presented the court with a confrontation of the first and fourth factors, and would have tested the proposition that a finding of “transformative use” sweeps all before it. Recent decisions, particularly in the Second Circuit, had prompted the critique that once it deemed the use “transformative,” a court would find no cognizable market harm. Thus, in HathiTrust, “under Factor Four, any economic ‘harm’ caused by transformative uses does not count because such uses, by definition, do not serve as substitutes for the original work.”9 If a “transformative use” fills a transformative market, which does not substitute for the work’s usual markets, then Factor Four has nothing to add.
The relevance of security failure fair use analysis is not limited to book scanning. The assemblage of databases of digital-original copyrighted works, for example, by digital image search engines that store full copies of the images, also presents security issues. In the Ninth Circuit’s decisions in Kelly v. Arriba10 and Perfect 10 v. Amazon,11 the search engines made, stored, and displayed reduced-sized, low-resolution “thumbnail” versions of the source images. Adopting a distinction devised by the Second Circuit in Bill Graham Archives v. Dorling Kindersley Ltd.,12 and subsequently followed in Google Books, the Ninth Circuit found the thumbnails transformative because their purpose was informational rather than aesthetic. That court further ruled the thumbnail outputs non-economically substitutional because the images’ size and low quality did not compete with the originals (notwithstanding Perfect 10’s claim that thumbnails downloadable from Google competed with Perfect 10’s cellphone download market). If the search engine had provided higher quality images (as was the case in the outputs of the first iteration of the defendant’s search engine), the fair use defense would have been much weaker. In these cases, limiting access to non-substitutional outputs might be seen as a kind of security measure,13 akin to the measures, endorsed by the Second Circuit, that Google took to ensure that users could not through multiple search queries string together “snippets” to form full pages.
These observations bring us to the parallels between market failure fair use analysis and security failure fair use analysis. Just as the emergence and exercise of a licensing market may make previously fair uses unfair, the subsequent inadequacy of security measures brings prospective economic harm to the fore, and may render a previously fair use unfair. In both kinds of failures, fair use is not static; when the facts that supported the fair use finding change, so should the legal conclusion. Thus, for example, advances in hacking should oblige the proprietor of a database containing copyrighted works to update its security, lest a level previously sufficient, and therefore supportive of fair use, later become inadequate and therefore inconsistent with fair use. By the same token, just as courts examine the existence and viability of plaintiffs’ asserted new licensing markets,14 so should they closely scrutinize the impermeability of a prospective fair user’s digital protections. Google’s security may be “impressive,” and Google may have every incentive to maintain it, but not every user capable of scanning and storing in-copyright works for non-infringing, “transformative” purposes may have the resources, expertise, or inclination to safeguard the copied content.
The security issue may increase in practical importance with the broadening dissemination of digitization tools. When Google began its book scanning program in 2004, very few enterprises other than Google possessed the means to undertake mass digitization of books, and they ultimately abandoned the field to Google. Mass book digitization in effect meant one enterprise’s digitization of massive numbers of works both in and out of copyright. Today, by contrast, most mass consumer printers include a scanning function, and even specialized book scanners now are readily and cheaply available, including build-it-yourself models.15 Digitization by the masses now is at hand. Combine that capability with crowd-sourcing,16 and potentially interlinked databases to rival Google’s seem in prospect. There are of course many copyright-free or authorized applications of crowdsourced digitization projects, but to the extent those databases contain in-copyright works without authorization, their assemblers and the webpages that carry them may need to devise adequate, and ongoing, security measures or risk liability for copyright infringement, notwithstanding the many transformative uses the databases enable.
Google Books might be read to authorize scanning and permanent storage of complete copies of any kinds of works in order to provide “information about” the works, so long as the user-visible outputs are non-infringing because they convey no expression (data mining), or too little information to substitute for the copied work (“snippets”), AND so long as the permanent copies are kept safe from more substantial user copying. The second condition may prove increasingly determinative as scanning and other digital storage projects proliferate.
* Many thanks to David Nimmer, whose insights into the role of security measures in the Second Circuit’s decision in Authors Guild v. Google Inc. sparked the ensuing speculations.
1. See, famously, Wendy J. Gordon, “Fair Use as Market Failure: A Structural and Economic Analysis of the Betamax Case and its Predecessors,” 82 Colum. L. Rev. 1600 (1982).
2. Rob Merges, “The End of Friction? Property Rights in the ‘Newtonian’ World of Online Commerce,” 12 Berkeley Tech. L.J. 115 (1997).
3. 487 F.2d 1345 (Ct. Claims, 1973), aff’d by an equally divided Court, 420 U.S. 376 (1975).
4. 60 F.3d 913 (2d Cir. 1994).
5. 769 F.3d 1232 (11th Cir. 2014).
6. 755 F.3d 87 (2d Cir. 2014).
7. 804 F.3d 202 (2d Cir. 2015).
9. 755 F.3d at 99. See also Cariou v. Prince, 714 F. 3d 694, 709 (2d Cir. 2013) (“[t]he more transformative the secondary use, the less likelihood that the secondary use substitutes for the original, even though the fair use, being transformative, might well harm, or even destroy, the market for the original”).
10. Kelly v. Arriba Soft Corp., 336 F.3d 811 (9th Cir. 2003).
11. Perfect 10, Inc. v. Amazon.com, Inc., 508 F.3d 1146 (9th Cir. 2007).
12. 448 F.3d 605 (2d Cir. 2006) (concerning reduced-sized images of Grateful Dead posters employed for informational purposes in a biography).
13. Thanks to David Nimmer for suggesting that these cases could be viewed as examples of security failure fair use analysis.
14. See, e.g., Cambridge University Press, supra; Perfect 10, Inc. v. Amazon.com, Inc., 508 F.3d 1146 (9th Cir. 2007) (characterizing plaintiff’s claimed emerging market for cellphone downloads as “speculative”).
16. See, e.g., Mathieu Andro. Crowdsourcing and Digitization. The Ebooks On Demand Conference 2014 (Innsbruck University, April 11th 2014), April 2014, Innsbruck, Austria, <hal-00978378>, available at https://hal.archives-ouvertes.fr/hal-00978378/document.

References: v. 
 v. 
 v. 
 v. 
 v. 
 v. 
 v. 
 v. 
 v. 
 v.