In the Joint Commission Perspectives May 2016 edition, the Commission reversed its 2011 position prohibiting clinician texting of patient orders within accredited health care institutions, stating technological advancements now allow for secure transmission. The Joint Commission first issued its ban in 2011 by posting an often overlooked response to the frequently asked question regarding the by then ubiquitous communication tool: “[I]t is not acceptable for physicians or licensed independent practitioners to text orders for patients to the hospital or other healthcare setting. This method provides no ability to verify the identity of the person sending the text and there is no way to keep the original message as validation of what is entered into the medical record.” While the Commission did not have a specific policy against electronic communications, its FAQ response highlighted concerns surrounding texting’s privacy, security, reliability and record retention shortcomings. Following FAQ response’s posting, institutions accredited by the Commission were expected to comply with the texting ban on clinical orders. However, recent studies have shown that permitting the texting of orders within health systems could significantly increase hospital efficiencies and reduce the length of patient stays.
Ashley Madison Update: Hacked Data Is Off-Limits
On April 29, 2016, Judge Ross issued his ruling on Ashley Madison’s motion for a protective order, prohibiting Plaintiffs from using the leaked documents, reports quoting the leaked documents, and information “stolen from Avid” in drafting their consolidated class action complaint. The result was largely policy driven, with Judge Ross stating broadly, “the Court cannot and will not allow Plaintiffs to take advantage of the work of hackers to access documents outside the context of formal discovery. To do so would taint these proceedings and, if left unremedied, potentially undermine the integrity of the judicial process.” The Court also ruled that it had inherent authority to issue a protective order with respect to documents obtained outside the course of normal discovery, and distinguished cases cited by the Plaintiffs in opposition. Rejecting Plaintiffs’ First Amendment argument, Judge Ross notes, “[j]ournalists … are in a completely different position than parties involved in private litigation. No doubt exists that the news media enjoy the freedom of ‘the press;’ however, the conduct of attorneys is informed by their ethical responsibilities as officers of the Court.” The amici briefs submitted by other Ashley Madison users made an impact on the Court as the Court found that the leaked information could not truly be considered “readily available to the public” due to the efforts of the other users to protect their privacy following the leak, as asserted in their briefs. Ultimately, Judge Ross emphasized the need to “protect the integrity of the internet and make it a safer place for business, research and casual use.”
Earlier posts on the topic:
Ashley Madison and Coming to “Terms” with Data Protection
From Ashley Madison to the Panama Papers: Is Hacked Data Fair Game?
FTC Guidance: Update Privacy Disclosures to Keep Pace with Advances in Online Tracking
The Federal Trade Commission recognizes that many people benefit from companies’ online tracking by getting advertising that is more targeted to their preferences. However, as the technologies and techniques used by companies and advertisers to uniquely identify and track individuals’ online behavior advances, the FTC warns that companies’ privacy disclosures and practices must be updated. Failure to do so could be considered deceptive under the FTC Act.
News of Note for the Internet-Minded – 4/28/16
Do Kanye’s Words Speak Louder than Tidal’s TOS?
A Chicago law firm has challenged Jay-Z and Kanye West, filing a class action complaint for violations of the California Business & Professions Code, fraudulent inducement and unjust enrichment in the Northern District of California. The complaint alleges that Tidal, a music streaming service owned by Shawn “Jay Z” Carter and Kanye West, was in financial straits earlier this year but that help arrived when Kanye West used his valuable star power on Twitter to encourage his followers to subscribe to Tidal by tweeting that his highly anticipated new album The Life of Pablo would only be available on Tidal. Mr. West also tweeted that the “album will never never never be on Apple. And it will never be for sale… You can only get it on Tidal.” The complaint further alleges that subsequently “[n]ew subscriptions to the streaming platform skyrocketed, tripling its consumer base from 1 million to 3 million subscribers in just over a month.” All would have been well except that Mr. West made The Life of Pablo available through Apple Music, Spotify and his own online marketplace a month and a half after its initial release.
From Ashley Madison to the Panama Papers: Is Hacked Data Fair Game?
We’ve previously written about the distinctions between hacking credit and other financial data in comparison to hacking private information. (See Ashley Madison and Coming to “Terms” with Data Protection.) The issue of how much protection the latter receives when it relates to attorney-client communications is currently before the District Court of the Eastern District of Missouri in the multi-district litigation arising from the July 2015 Ashley Madison leaks. Plaintiffs—former users of the site who claim that Ashley Madison defrauded the public by creating fake female profiles to lure male users—hope to use leaked information in their consolidated complaint against the site, due to be filed June 3 of this year. The leaked information sought to be used includes references and citations to emails between Ashley Madison’s parent company, Avid Dating Life, and its outside counsel.
Cyber Loss May Yet Fall Under General Liability
Recently, the Fourth Circuit handed down one of the first appellate-level decisions involving insurance coverage for a cyber-related event. The ruling is likely to create ripples among both carriers and company insureds, as it establishes the possibility that, under a general liability policy, a carrier may still be on the hook to cover cyberattacks or data breaches that are the result of a company’s negligence (as opposed to those stemming from a criminal attack, in which the company is the victim). In their Client Alert on the Fourth Circuit’s ruling, colleagues James Bobotek, Peri Mahaley and Benjamin Tievsky break down the ruling and its takeaways.
The Department of Commerce Wants to Get a Handle on the Internet of Things
It’s apparent by now that along with an expected economic impact of billions or even trillions of dollars, the Internet of Things (IoT) also brings with it a host of security, health and policy concerns. (See our earlier post on managing the cybersecurity risks of the medical IoT for just one facet of these concerns.)
The U.S. government has noticed, and the National Telecommunications and Information Administration (NTIA), part of the Department of Commerce, is now seeking comments to guide its own rulemaking on the IoT. In a recent client alert, colleagues Aimee Ghosh, Sheila Harvey, and Glenn Reynolds break down what exactly the NTIA will be looking for in terms of feedback.
Rehearing Denial Leaves ITC’s Jurisdiction Tethered to the Material World
Last week, the en banc Federal Circuit declined to rehear its November 10, 2015, decision in ClearCorrect v. ITC, 2014-1527, leaving the U.S. International Trade Commission’s (ITC) Section 337 jurisdiction to “material things” that infringe U.S. intellectual property rights. This denial and the 2015 Federal Circuit decision have wide implications for a variety of industry sectors, especially those involved with the Internet of Things or any company that may transfer digital assets across the U.S. border. Regarding the case, this denial restricts the ITC from prohibiting ClearCorrect’s importation of digital files used to manufacture teeth aligners that allegedly infringed complainant Align Technology’s patents. (For more details on the November 10, 2015 decision, see our post, “Living in a Nonmaterial World: Determining IP Rights for Digital Data.”)
Google and Oracle Agree to Ban Internet Research on Jurors … this Time Around
In a March 25, 2016 Order, Judge William Alsup of the Northern District of California gave Google and Oracle the choice between agreeing to a ban on conducting Internet and social media research on jurors until the trial is concluded or agreeing to disclose details as to the scope of their intended online research. As we wrote previously, Oracle is suing Google for copyright infringement on its Java API code. Google told the Court it was willing to forego digital research on jurors so long as the ban applied equally to both parties. Oracle, however, was not willing to agree to the ban.