The Economics of Law School

My friend and Ohio State law prof Steve Davidoff has a great post on the economics of law school at the New York Times’ Dealbook. One of the most important points he makes is that some proposals to improve law school – such as increasing experiential learning, like clinics – would make it significantly more expensive. A key read.

Startups and Healthcare

My friend and former Lotus manager Joe Perry has ventured into the blogosphere, with a post about startup companies, healthcare, and the Boston area – all three things of interest to me. I’m looking forward to finding out more about using mobile tech to combat counterfeit drugs…

Having Solved Piracy, Time for Child Porn!

When I teach Internet Law, I joke that banning child pornography is straightforward since there isn’t a pro-kid porn lobby (unlike, say, banning copyright infringement or adult pornography). I stand corrected: Rick Falvinge, founder of Sweden’s Pirate Party, has taken up the pro-legalization cause. (Interesting choice as a policy focus, but to each their own.)

Falkvinge’s reasoning is lengthy and somewhat belabored (translation undoubtedly plays a role), but since he uses censorship as a justification for his position, and because child porn seems like a natural target for a ban, I thought I’d point up the errors in his argument.

Falkvinge advances four reasons for his pro-legalization stance: bans do not help in catching child molesters; they lead to censorship without accountability; they interfere with journalism; and they undermine free speech norms in a way that leads to collateral censorship.

Falkvinge’s first argument seems theoretically interesting as an empirical matter, but he quickly goes off the deep end. First, he claims that with Google Glasses, if you’re walking through a park recording what you see, and you happen to witness a child being raped, you’re now in possession of child pornography. I know nothing about Swedish law, but Falkvinge claims that in the U.S., you’d be at risk of prosecution. This shows Falkvinge should stick to illegal downloading, because that’s simply wrong. Federal statutes require possession with intent to distribute (18 U.S.C. 1466A); possession of material that has been transported by means of the mails or interstate communication facilities (18 U.S.C. 2252); or some combination of the two (18 U.S.C. 2252A).

State laws vary. Arizona has some of the strictest in the country. Even here, the mens rea requirement does a lot of the necessary work. (Falkvinge wrongly claims these are strict liability laws. As 1Ls know, if there is a mens rea element to the offense, it’s not strict liability.) Arizona Rev. Stat. 13-3553 imposes liability for knowing possession of a visual depiction “in which a minor is engaged in exploitive exhibition or sexual conduct.” (13-3551 defines “exploitive exhibition” and “sexual conduct.”) The key is “knowing.” Most people, seeing the scene Falkvinge describes, are going to find / phone the police first, and think about their Google Glasses second. That means that, even if they possess child pornography, it’s not “knowing” even under the strict Arizona statute. Now, if you go home and keep the images / film, you’re at risk – but that’s a good thing. We don’t want people possessing child porn that they stumble upon – we want them to turn it over to the police.

Child porn laws run some risk of being overbroad in practice. Congressional representative and idiot Doug Lamborn of Colorado had Capitol police question environmental activist Maria Gunnoe over a photo of a five-year-old bathing in polluted water from a mining operation. This is politicization of child abuse by a sockpuppet for the mining industry, and it’s a problem. But Gunnoe wasn’t charged. Law operates in part based on sensible practices by prosecutors, and based on the check of a jury on non-sensible prosecutors. If you realize you have evidence of child rape on your Google Glasses and need an espresso to calm down before you go to the police, you’re not at risk in a practical sense.

Falkvinge also claims we’re OK with videos of people getting killed by screwdriver, but not by child porn. I am not sure why this doesn’t point to a need for more censorship, not less. And, there may still be room for banning this type of video even after U.S. v. Stevens, if the legislation were sufficiently narrow.

So, second reason: censorship. This seemed interesting, but here Falkvinge focuses on teenagers who like to engage in activities like sexting and seeing their chronological peers naked in digital form. Sexting is a genuine problem. The best proposal I’ve read is to mimic the “Romeo and Juliet” exceptions some states implement in statutory rape laws. (Example: Texas Penal Code 22.011(e).) So, overbreadth is problematic here, too, but we don’t want to be too worried about it. If Juliet has a nude photo of her boyfriend Romeo, most prosecutors won’t go after her – but, if she sends the photo to Tybalt, they should. So Falkvinge identifies a problem, but it’s not nearly as grave as he argues. Moreover, we know how to fix it.

The third reason (which seems to combine Falkvinge’s last two arguments – the organization is his, not mine) is that child pornography threatens to overwhelm free speech. This is just classic slippery slope hyperbole. The U.S. has pretty robust free speech (as our current Presidential campaign, or the debate over gay marriage, demonstrate). So does the U.K. – and that country censors child porn via Internet filtering, not just law.

My sense is that Falkvinge doesn’t think any speech should be illegal. That’s an understandable view, but it is an exceedingly minority one. Hate speech, copyright infringement, blasphemy, flag burning, pornography – most people have something they want off limits.

Moreover, there are some compelling arguments for a ban on child pornography that Falkvinge simply ignores. First, the possession and distribution of child porn works an ongoing injury to the exploited child. While bans will not be perfect, they reduce the amount of child abuse material in circulation, and presumably give some pause to potential possessors / distributors. Second, possession charges can be used to go after those who create and distribute the material. Plea bargaining is a powerful tool. Third, society can express its strong disapprobation of this content by banning it – and, in the U.S., such a ban is consonant with the constitution. Fourth, Congress found (during hearings on the law banning virtual child porn) that child pornography may move some people from passive consumers to active abusers of children. Possession might prevent that transition. Finally, we can minimize overbreadth and slippery slope problems through careful legislative drafting and checks on prosecutorial excess. The Supreme Court invalidated a ban on virtual child pornography, and organizations such as the ACLU have represented teenage sexters.

My sense is that Falkvinge is something of a lunatic fringe, and his arguments on child porn bear out that impression. But he’s using concerns about censorship as a cover for a far more problematic agenda, and the Pirate Party is sometimes the darling of the cyber-left. Even copyright infringers should be wary of a politician whose platform seeks to legalize child porn on the strength of such threadbare arguments.

Research Project on State Information Laws

My friend Sasha Romanosky, a research fellow at the Information Law Institute at NYU and the co-author of a great paper on data breach notification laws, is looking for your help with a research project:

Greetings,

I am involved in a research project that examines state laws affecting the flow of personal information. This information could relate to patients, employees, financial or retail customers, or even just individuals. By ”flow” we mean laws that could restrict or permit the collection, use, storage, sale, sharing, disclosure, or even destruction of information.

For example, some state laws require that companies notify you when your personal information has been hacked, while other state laws require notice if the company plans to sell your information. In addition, laws in other states restrict the sale of personal health information; enable law enforcement to track cell phone usage without a warrant; or prohibit the collection of a customer’s zip code during a credit card purchase.

Given the huge variation among states in their information laws, we would like to ask readers of this Info/Law blog to help us collect examples of such laws. You are welcome to either post a response to this blog entry or reply to me directly: sromanos at cmu dot edu.

Thank you!

Q&A on Internet Law at Lifehacker

I’m answering questions about Internet Law for the next hour or so at Lifehacker. Fire away!

Censorship v3.1

I have a new essay up on SSRN, titled Censorship v3.1. It’s under consideration by the peer-reviewed journal IEEE Internet Computing. Here’s the abstract:

Internet censorship has evolved. In Version 1.0, censorship was impossible; in Version 2.0, it was a characteristic of repressive regimes; and in Version 3.0, it spread to democracies who desired to use technology to restrain unwanted information. Its latest iteration, Version 3.1, involves near-ubiquitous censorship by democratic and authoritarian countries alike. This Article argues that the new censorship model involves four changes: a shift in implementation to private parties; a hybrid approach mixing promotion of favored viewpoints with suppression of disfavored ones; a blend of formal mandates with informal pressures; and a framing of censorship using uncontroversial labels. It suggests a set of responses to censorship that cabin its abuses and push it towards more legitimate methods: focusing on governmental restrictions, insisting on labeling censorship as such, supporting distributed Internet governance, demanding a default right of access to information, and addressing corporate involvement. 

I’d welcome comments and feedback. (The final version can’t have footnotes, so I’m going to leave this version up on SSRN.)

How to Write a Book Review and Refute Textualism, All At Once

My blogging has been slow lately, but I’d be remiss not to point readers to Judge Richard Posner’s review of Antonin Scalia and Bryan Garner’s new book, Reading Law: The Interpretation of Legal Texts. It is a terrific piece of writing and it is an utter evisceration of the book. In the review, Posner does three things well. He shows the inconsistencies and, possibly, even intellectual dishonesty of the book. He convincingly attacks textualism, perhaps the dominant interpretive mode of conservative legal thought. And he shows the ways in which Justice Scalia’s jurisprudence demonstrates the same flaws as his book.

A few weeks ago, there was a minor kerfuffle when Posner criticized Scalia’s opinion in Arizona v. U.S. in Slate. Scalia responded by pulling rank: I’m a Supreme Court justice and you’re an appellate judge, so don’t tug on Superman’s cape. That works in law – the Court gets the final word. But in academe, the playing field is more level. And in this case, Scalia brought a knife to a gunfight. This should become required reading in statutory interpretation classes.

The Obama Administration and Six Strikes

Soon, major ISPs will be rolling out a “copyright education” program intended to deter infringement. The program, colloquially called “six strikes,” was negotiated between ISPs and the content industries – most notably the RIAA and MPAA. In addition, however, the Obama administration was heavily involved in the negotiations – primarily, it appears, on the side of the content industries.

Researcher Chris Soghoian and I want to find out how involved the Obama administration was. So, Chris filed a Freedom of Information Act request with the Office of Management and Budget (within which the new Intellectual Property Enforcement Coordinator, or IP czar, is located). He got back some documents, but OMB withheld some – notably, drafts of the agreement that had been provided by the RIAA, and also discussions about the negotiations within OMB. In short, OMB kept the good stuff.

So we sued. The case is before Judge Amy Berman Jackson in federal court in the District of Columbia. The parties have submitted motions for summary judgment, and the matter is now before Judge Jackson.

This case has critical implications for IP policymaking, for governmental transparency, and for the role of government in private negotiations. The documents paint a fascinating picture of collaboration, pressure, and capture. (An e-mail from the IPEC’s office makes a point of marking an MPAA official’s birthday; an NBC Universal executive e-mails IPEC Victoria Espinel at her private Gmail address.) I’m linking to the documents here in case anyone is curious:

FOIA

Statute

Soghoian’s FOIA Request

OMB Response

Soghoian’s Appeal

OMB Response to Appeal

Round One

Complaint

OMB Answer

Round Two

OMB Summary Judgment Motion

Espinel Declaration

Sheckler Declaration

Vaughn Index

Redacted Documents

Soghoian’s Summary Judgment Motion

Round Three

OMB Reply Brief

Supplemental Declaration of Victoria Sheckler (RIAA)

Soghoian’s Reply Brief

E-mail from Cary Sherman to Victoria Espinel

Round Four

OMB Response on Discovery

We filed a motion to submit a reply to the OMB’s discovery response, which was denied by the district court. But, I’m including it here to help you understand our position.

Parsing the Commerce Clause

NFIB v. Sebelius, the 2012 Supreme Court decision rejecting nearly all of the constitutional challenges to the Affordable Care Act, has (at least) two bits of interest to infolaw folks. First, the majority opinion finds that the ACA‘s individual mandate cannot be sustained under the Commerce Clause. Congress regulates all manner of infolaw issues under the Commerce Clause, perhaps most notably trademarks. Second, the Court strikes down the Medicaid expansion provision, finding essentially that it is an unconstitutional condition on Congress’s spending largesse. This is fascinating for those of us interested in how Congress uses its spending powers to shape speech. I’m going to tackle what I see as a puzzle in the majority’s Commerce Clause analysis, with the usual disclaimer: I’m not expert in the structural aspects of the Constitution.

What is the new Commerce Clause rule / test / model? Read more…

Death by HIPAA

Vioxx, the non-steroidal anti-inflammatory drug once prescribed for arthritis, was on the market for over five years before it was withdrawn from the market in 2004. Though a group of small-scale studies had found a correlation between Vioxx and increased risk of heart attack, the FDA did not have convincing evidence until it completed its own analysis of 1.4 million Kaiser Permanente HMO members.  By the time Vioxx was pulled, it had caused between 88,000 and 139,000 unnecessary heart attacks, and 27,000-55,000 avoidable deaths.

The Vioxx debacle is a haunting illustration of the importance of large-scale data research. Dr. Richard Platt, one of the FDA’s drug risk researchers, described a series of “what if” scenarios in 2007 FDA testimony. (Barbara Evans describes the study here.) If researchers had had access to 7 million longitudinal patient record, a statistically significant relationship between Vioxx and heart attack would have been revealed in under three years. If researchers had had access to 100 million longitudinal patient records, the relationship would have been discovered in just three months. Of course, if public health researchers did post-market studies that looked for everything all the time, many of the results that look significant would be the product of random noise. But even if it took six months or one year to become confident in the results from a nation-wide health research database, tens of thousands of deaths may have been averted.

These are the consequences of HIPAA’s overcautious privacy rules. HIPAA allows health providers and insurers to release patient health information for research use only if the researcher enters into contractual agreements with each individual data-holder or if the data complies with HIPAA’s deidentification standards. These research exceptions are much too narrow to harness the full potential of the data. The contractual exception (“limited use” datasets) is practical only for work on small or medium scales, and only when the data holder agrees to work with the researchers. The de-identification exception allows research data to be shared freely, but the data producer is required to remove a lot of information that may be critical to the research and to building longitudinal data files. The HIPAA privacy rules were designed to avoid the risk that health research data could be used to re-identify a patient, but reidentification is not as easy as we have been told. Read more…