Upcoming Webinar: Choosing The Right IP Protection: Patent, Trade Secret, or Both?

Intellectual property is often one of a business' greatest assets. Choosing the best legal tool to protect particular types of intellectual property is key. Patent and trade secret protection are primarily creatures of statute and are two forms of intellectual property recognized throughout the United States. Depending on the information that one seeks to protect, patent, trade secret, or both patent and trade secret protection may be appropriate.

Please join us in the webinar "Choosing The Right IP Protection: Patent, Trade Secret, or Both", where Seyfarth attorneys will address the following topics:

  • What is a patent and what information is patentable?
  • What is a trade secret and what information qualifies for trade secret protection?
  • What are the pros and cons of patent vs. trade secret protection?
  • What information/technology may be best protected through both trade secret and patent protection?
  • How does the new America Invent Act (Patent Reform Legislation) impact the decision to seek patent or trade secret protection?


Seyfarth attorneys, Brian Michaelis, Dan Schwartz and Jim McNairy will use hypothetical fact patterns to work through these topics and highlight the practical application of patent and trade secret law. CLE credit may be available.


For more details and registration, please click here. We look forward to your joining us on October 6th!
 

 

EX-EMPLOYEE VIOLATED DUTY OF LOYALTY, BREACHED NON-COMPETE, AND COMMITTED COMPUTER FRAUD ACT VIOLATION, BUT NEW EMPLOYER NOT LIABLE FOR MISAPPROPRIATION OF NON-TRADE SECRET "CONFIDENTIAL INFORMATION"

A dental products supply company, DHPI, won partial summary judgment from a Wisconsin federal court against its ex-employee, Ringo, for competing with DHPI both while still an employee and soon after resigning. The most interesting issues in the opinion, however, concern application of the Computer Fraud and Abuse Act to Ringo’s copying of DHPI’s computer hard drive, and DHPI’s unsuccessful claim against Ringo’s new employer for “misappropriation of confidential information.” Additionally, Ringo’s Illinois Wage Payment Act counterclaim failed because DHPI is a Wisconsin corporation with its principal place of business in that state. Dental Health Products, Inc. v. Ringo, Case No. 08-C-1039 (E.D.Wis., Aug. 24, 2011).

Ringo began working for DHPI in 2002 as a salesman and became Illinois branch manager in 2005. He was subject to a confidentiality and 90-day post-employment non-compete agreement. In 2007, while still employed by DHPI, Ringo began making sales through his own dental equipment sales company. He resigned from DHPI the following year and immediately went to work for his wife’s competing company. Not surprisingly, the court held that Ringo breached his duty of loyalty to DHPI and his non-compete agreement.

Before leaving DHPI, Ringo made a copy of his employer’s computer’s hard drive. In response to DHPI’s Computer Fraud and Abuse Act claim, he protested that he had permission to access the computer at the time he copied the hard drive. Further, he emphasized that he had not damaged the computer system, that he knew most of the information or could have developed it with little difficulty, and that he never viewed the copy. The court held that Ringo’s authorization to access DHPI’s computer ended when he decided to copy the hard drive and quit. 

The CFAA has a $5,000 minimum damages provision. DHPI claimed as damages the $16,000 it paid to a computer forensic expert to determine the extent of Ringo’s unauthorized conduct. The court concluded that DHPI’s expenditure “was a reasonable reaction to the knowledge that one of its key salesmen had left the company in order to compete with it and had made a copy of a company hard drive before doing so.”

Ringo counterclaimed under the Illinois Wage Payment and Collection Act for wrongful withholding of earned commissions, failure to compensate him for unused vacation time, and refusal to reimburse him for health insurance premiums he paid while a DHPI manager. The court held, quoting a 1996 Northern District of Illinois decision, that the Act only applies “to a group of employers and employees, all of whom are in Illinois.” Since DHPI was a Wisconsin corporation with its headquarters there, it was not liable.

Lastly, the court rejected DHPI’s misappropriation claim. The company conceded that its customer lists and basic financial information did not constitute trade secrets but insisted that the information was confidential and deserving of protection. The court held that there is no statutory or common law basis for a misappropriation claim other than for trade secrets.

This case teaches that the CFAA prohibits an employee’s illicit access to a company computer and permits reimbursement of expenditures incurred by the employer to determine the extent of its injury. Further, “misappropriation of confidential information” which is not a trade secret is not actionable. The DHPI decision adds to the body of authority limiting the geographic scope of the Illinois Wage Act. Finally, the opinion reminds us that blatant violations of the duty of loyalty and of a reasonable non-compete provision may be summarily punished. 

Trade Secrets Along the Time-Space (Internet) Continuum or "Lost in Translation"

By Jason Stiehl

Last month, Judge Walls of the U.S. District Court of New Jersey became yet another pioneer in the evolving world of trade secret protection and the Internet. In a well-reasoned and thorough analysis of case precedent, Judge Walls utilized two historic landmark public disclosure cases, DVD Copy Control Ass'n, Inc. v. Bunner, 116 Cal. App. 4th 241 (Cal. App. 6th Dist. 2004), and Data General Crop. v. Digital Computer Controls, Inc., 357 A.2d 105 (Del. Ch. 1975), as his guidepost in determining whether certain code language found within Syncsort's Reference manual and scripts remained trade secrets, despite posting of both parts, and, in some instances, all of the language on various websites.

The Guiding Hand of History

Data General and DVD Copy present a clear contrast of partial disclosure versus unlimited disclosure. In Data General, a pre-Internet disclosure case, a minicomputer manufacture made publicly available, through manuals, general technical information governing its products. The Court held that, unlike a logic diagram, the manuals did "not contain sufficient logic design [ ] to permit their being successfully used of the purpose of either duplicating such machine or in assembling a computer substantially identical to" the Data General's minicomputer. Data General, 357 A.2d at 110-11. In contrast, in DVD Copy, a foreign computer programmer, through his license agreement, began widespread distribution of the DIVX code associated with copyright protection on DVDs. Rather than suing this individual, the association tasked with protecting the copyright status on DVD's went after a host of United States' individuals who had posted portions of the code on their websites and blogs. Ultimately, by the time the matter came to preliminary injunction, the information had been distributed to over a million people, thus, according to the court, eviscerating the trade secret status of the code, holding that information "in the public domain cannot be removed… under the guise of trade secret protection." DVD Copy, 116 Cal. App. 4th at 255.

Bytes and Pieces

In Syncsort, the Plaintiff developed a language which allowed users to translate data from one form to another. Syncsort's competitor, Innovative Routines, Int'l ("IRI"), also maintained proprietary software which allowed for a similar translation. However, because the languages were unique, it was difficult and time-consuming for a Syncsort customer to simply switch to IRI's program. To solve this problem, IRI improperly, through a Syncsort distributor, came into possession of a Syncsort Reference Guide which contained over 400 pages of description and definition related to Syncsort's language. IRI then took this guide and developed a translator for Syncsort's translation device-- called ssu2scl-- which could translate Syncsort scripts to IRI's program language. IRI also requested, from Syncsort customers, examples of Syncsort scripts to run against the ssu2scl to determine the effectiveness of the translation device. The activities of both the distributor and the customers were controlled and governed by confidentiality and licensing agreements prohibiting such disclosures.

Once sued for its activities, IRI went about a hunt throughout the Internet to locate Syncsort's Reference Guide and scripts to demonstrate that, although they may have procured the information from an improper source, the information was publicly available, and therefore should not be afforded trade secret status. Mostly unsuccessful, IRI was initially able to locate only four partial sources and, ultimately, three full sources, where Syncsort's information was available. As to the partial sources, Judge Walls applied the logic of Data General and held that the information, in its fragmented and limited form, was not sufficient to recreate the Syncsort language. As to the full sources, Judge Walls looked to DVD Copy, and, in contrast, found that the full posts-- found on (1) a university password-protected site; (2) a Korean website taken down within days of notice; and (3) a Japanese website taken down within days of notice-- were "sufficiently obscure of transient or otherwise limited" so that it was not "generally known to the relevant people."

A "Manual" Going Forward?

Although it will be tempting for litigants to cite this case for a black-letter type pronunciations, this author would caution against such efforts. First, the facts of this case tilted well against the Defendant. For example, IRI had: (1) admittedly improperly sought out and received the information; (2) only conducted internet searches after being sued to determine whether the information was publicly available; and (3) known that the sources of the information were bound by restrictions governing the sharing of that information. Second, this case has a prolonged and protracted history, including a previous trial on the merits and full summary judgment briefing, allowing for a complete record to develop. Third, the breadth and depth of the release of information remains a case-by-case type determination without any precise formulation. For example, imagine if the Korean manual had been up for five years, or if it had been translated from Korean and posted on an US website. With that said, this case presents what will likely become the paradigm for Internet "release" cases in the future.

New York Federal Court Dismisses Computer Fraud and Abuse Act Claims For Defendant's Alleged Use Of "Supercookies" And "History Sniffing"

By Robert Milligan and Joshua Salinas

A New York federal district court recently dismissed Computer Fraud and Abuse Act (CFAA) claims asserted against defendant advertising company Interclick and some of its advertising clients. Plaintiff consumer Sonal Bose alleged that the defendant advertising company’s use of “supercookies” and “history sniffing” invaded her privacy, misappropriated her personal information, and interfered with her computer’s operations. The court dismissed the CFAA claims because Bose failed to show the statutorily required damage or loss.

Bose alleged that Interclick used browser cookies to advertise for various companies online. Cookies are small files placed in a computer user’s web browser to gather information about the user’s online habits and behaviors. Cookies are helpful for users who want to autopopulate data, such as usernames or passwords, when they return to a website. These cookies are also extremely beneficial for marketing companies who can track a users online habits and behaviors.   Thus, an advertising company such as Interclick can use this information to provide specifically tailored advertisements based on the user’s profile. If a user does not want to be tracked or have this information available, he or she can always delete the cookies from the web browser.

The problem Bose alleged in this case was that Interclick used “supercookies” aka “flash cookies.” These supercookies are not as delicious as they sound. When a user deletes his or her cookies, the supercookie “respawns” the deleted cookie without the user’s notice or consent. As in this case, Interclick allegedly continued to track Bose and collect her information, despite her attempt to delete the cookies and protect her privacy. Bose also alleged that Interclick used “history sniffing,” in which it allegedly looked at her computer’s browsing history to tailor its advertisements toward her.

Bose claimed that she suffered: (1) impaired computer services and resources, (2) loss due to collection of personal information, and (3) loss due to interruption of internet service. The defendants moved to dismiss on grounds that Bose failed to allege a cognizable injury to meet the $5,000 threshold statutorily required for CFAA civil claims. (18 U.S.C. § 1030 (c)(4)(A)(I)).

First, the court recognized that physical damage is not necessary for CFAA claims. As we have discussed in previous blogs, courts are expanding the CFAA’s definition of “losses” and have recognized computer forensic investigation costs and outside counsel fees as sufficient to meet the statutory threshold. However, the court here stated that Bose failed to quantify her damage and did not specifically show the impairment of her computer functions or any diminution of value.

Second, the court cited Doubleclick and stated that Bose’s allegations for invasion of privacy, trespass, and misappropriation of confidential data are not cognizable economic losses. (In re Doubleclick Inc. Privacy Litig., 154 F. Supp. 2d 497, 524, n. 33 (S.D.N.Y 2001)). The court found Bose claims similar to the California case La Court v. Specific Media, Inc. No. SACV 10-1256-GW(JCGx), 2011 WL 1661532 (C.D. Cal. Apr. 28, 2011), which also dismissed supercookie CFAA claims for failure to allege an economic injury. The court emphasized that “advertising on the internet is no different from advertising on television or in newspapers,” as marketers and retailers constantly collect consumer personal data and demographic information. In other words, no harm, no foul.

Finally, the court found that Bose failed to allege any specific damage or loss regarding the interruption of her internet service. Bose did not show that the cookies damaged, shutdown, or even slowed her computer.

This case is significant because it demonstrates that courts still require some quantifiable or cognizable loss for CFAA civil claims, despite the growing trend to allow claims absent any damage or interruption of service. Courts will not accept CFAA civil allegations merely based on the invasion of privacy. Indeed, privacy has at least a $5,000 price tag under the statute.

The use of supercookies will continue to rouse privacy advocates. In fact, this summer the European Union issued its “Cookie Directive” to address cookie privacy concerns.

The court dismissed the CFAA claims, but kept the claims against Interclick for alleged deceptive business practices. While supercookies may not be unlawful under the CFAA, how a company uses these tracking devices may still subject them to liability.

This area of law continues to be white hot as the plaintiffs' bar tries to leverage privacy and other claims against companies who collect computer users' data as class actions for large settlements.