TPP Negotiators Discuss IP and Cross Border Data, OMB/NIST Talk Standards Reform, FTC MySpace Settlement Keys on Syncing and Cyber Continues to Slip in Senate

TPP Negotiators Convene in Dallas
Negotiators for the nine countries committed to a Trans-Pacific Partnership trade agreement met in Dallas starting on May 8 for a new round of discussions aimed at opening trade and encouraging investment among the countries that border the Pacific Ocean. SIIA had a presence at the stakeholder event held by the US Trade Representative (USTR) on May 12, which allowed interested parties to interact directly with the negotiators working on their issues. SIIA is supported a TPP agreement that would contain strong copyright enforcement provisions, measures to protect trade secrets and prevent the disclosure of software source code, and provisions allowing the cross-border flow of information and prohibiting mandated localization of cloud computing servers. A significant development at the discussions was the suggestion from several countries that some of the provisions of the Anti-Counterfeiting Trade Agreement (ACTA) be substituted for the corresponding provisions in the US proposal on intellectual property. In addition, some countries raised privacy objections to the US proposal on cross-border data flows.

OMB Workshop on Voluntary Consensus Standards

Today, NIST hosted an OMB workshop on Federal Participation in the Development and Use of Voluntary Consensus Standards. The workshop explored agency experiences in the implementation of OMB Circular A-119, public and private sector discussion regarding challenges associated with referencing private sector standards in federal regulations and industry case studies from their perspective on federal use of private sector standards and conformity assessment mechanisms. The Workshop is another step in an ongoing exploration of the Government’s participation in standards development, including a recent Federal Register Notice requesting public comment on whether or not OMB should consider supplementing the existing OMB Circular A-119, a memo earlier this year and proposed policy recommendations in October 2011.

FTC Settlement with MySpace has Implications on Syncing
On May 8, the FTC released a settlement with MySpace that has implications for companies that synchronize (“sync”) or link data through unique identifiers. The FTC charged that MySpace broke its privacy promises to consumers by making it possible for an ad network to connect MySpace’s user identifier with the ad network’s own user identifier . As a result, the two data bases of user information could be merged into a single record. In his post on the topic, the FTC’s chief technology officer, Ed Felton, issued a general warning to firms in this area: “If your product syncs pseudonyms or identifiers with third parties, or makes such syncing possible, you might want to ask yourself which information flows, if any, are enabled by the syncing, and whether those information flows are consistent with your privacy obligations.”

Cyber Continues to Slip in Senate
Senate leaders recently confirmed that consideration of comprehensive cybersecurity legislation will not take place this month, but they’re still hopeful this will now happen in June. Additionally, a planned bipartisan discussion among key Senators that was originally scheduled for today has also been pushed back to next week. These most recent setbacks follow major substantive opposition revealed last week when a coalition of civil-liberties groups urged the Senate to reject the legislation because it would allow military spy agencies to gain access to people’s personal information.

ICANN Announces Date to Reopen Applications
The latest from ICANN is that they are targeting May 22 to reopen its application system for new Web gTLDs, with the anticipated new deadline for submitting applications to be May 30.

For SIIA policy updates including upcoming events, news and analysis, subscribe to SIIA’s weekly policy email newsletter, Digital Policy Roundup.


David LeDuc is Senior Director, Public Policy at SIIA. He focuses on e-commerce, privacy, cyber security, cloud computing, open standards, e-government and information policy.

SIIA Submits Testimony to Congressional Forum on Information Technology

Last Friday, Representatives Elijah Cummings (MD) and Gerry Connelly (VA) hosted a Congressional Forum on Information Technology at the Fairfax County, Virginia Government Center to review government’s efforts to leverage innovative technology to reduce cost and improve citizen services. The forum featured testimony from Federal CIO Steven Van Roekel, as well as industry representatives including SIIA Public Sector Innovation Group Board Member, David Mihalchik of Google. SIIA was pleased to have been asked by the Members to provide testimony for the record.

SIIA’s testimony focused on the important transformative benefits of cloud computing – economic growth, choice and lower cost — and encouraged Congress to consider these when looking at cloud computing. We also highlighted the key security benefits that can be realized by implementing cloud computing, discussed the importance of the 25 Point Plan to Reform Federal IT, and explored the inter-relationship between Cloud First, FedRAMP, the Shared Services Strategy and the Federal Data Center Consolidation Initiative.
Overall, the interaction between Reps. Cummings and Connelly and the forum witnesses was thoughtful and successfully highlighted the issues of importance to government and industry alike as the federal government moves ahead with cloud computing. It was particularly encouraging to see these key members of the House Oversight and Government Reform Committee engage on an issue of such great importance to SIIA members and the federal IT industry as a whole and we applaud them for their effort.

Read the full text of SIIA’s statement.


Michael Hettinger is VP for the Public Sector Innovation Group (PSIG) at SIIA. Follow his PSIG tweets at @SIIAPSIG.

This Week in IP Enforcement

Report: Online Counterfeit Sales To Overtake Street Vendors (National Journal)
More counterfeit goods will soon be sold online than on the street, according to the latest report by the U.S. Trade Representative.

Advertisers pledge not to support ‘rogue’ pirate sites (The Hill)
Two major advertising trade associations released a set of best practices on Thursday to ensure that companies do not place ads on websites dedicated to offering illegal copies of movies and music.

Google, authors go head to head over digital books (Reuters)
Google Inc, in a long-running legal dispute over its plans to create a digital library of books, argued in court on Thursday that associations of authors and photographers should not be allowed to sue the company as a group.

Tech Firms Crowd-Source to Fight Suits (Wall Street Journal)
Tech giants like Microsoft Corp. and Apple Inc., along with several start-ups, have tapped Article One Partners LLC to crowd-source evidence that a patent they are being sued for allegedly infringing isn’t novel. Proving so in court can invalidate a patent.

OSS adoption in emerging markets encouraging but doesn’t combat piracy (ZDNet Asia)
Open source software (OSS) has picked up in the region with different levels of adoption in different countries, however, it is not a silver bullet to combat piracy, say market watchers.

Privacy Debate Returns to Hill, Senate Cyber Bill Still in Flux, and ICANN announces Windfall of Applications and Fees

Privacy Debates Returns to Capitol Hill this Week
After a bit of a hiatus from the privacy debate, the Senate Commerce Committee is scheduled to revisit the issue this week with a high profile hearing on the need for privacy legislation to provide additional consumer protections, featuring witnesses from the Department of Commerce and Federal Trade Commission to talk about their recent privacy reports. With the clock ticking fast in an election year, and a Republican-led House that doesn’t share the White House and Senate leadership’s desire to pass a “Privacy Bill of Rights,” it doesn’t appear that the hearing will lead to legislation this year. However, the discussion should prove insightful as a comparison of the two similar, but not identical, perspectives on privacy within the Administration.

Senate Cyber Legislation Still Undergoing Changes, Possible Impasse Ahead
Keeping with the goal for the Senate to pass comprehensive cybersecurity legislation this month, Senate Leaders are still exploring tweaks to the Lieberman-Collins Cybersecurity Act (S. 2105) to gain more support. Two of the key issues preventing sufficient Republican support include the proposal’s tougher privacy protections and authorization for DHS to set mandatory security standards for critical infrastructure.

Should the Senate be able to pass this legislation, signs continue to point to a possible impasse: The White House and Senate Democratic leaders have reiterated that the House-passed legislation (CISPA) lacks adequate privacy protections and would fail to protect critical infrastructure, and House Republican leadership has vowed to block consideration of any legislation that creates new cybersecurity mandates. Of course, there is also strong support in the Senate for data breach legislation to be part of the package, and a host of other issues not central to the debate. Stay tuned.

ICANN Announces Windfall of Applications and Fees
ICANN announced last week that 2,091 new gTLD applications had been submitted or were “in process” when ICANN shut down the application system April 12 (the last day for submissions) due to security concerns. It stated it had received approximately $350 million in corresponding application fees. Given that ICANN has stated it will process only 500 applications at a time, it is now a certainty, rather than speculation, that many applications will NOT be evaluated in this first application round (and thus likely would not be evaluated for several years).

SIIA is working with other intellectual property stakeholders in urging ICANN to reconsider its technically complex “digital archery” method for prioritizing applications, and instead to batch them based upon self-election and, if necessary, category (such as community or non-Latin character applications first). ICANN’s TAS application system is still shut down due to the security glitch, and it appears that the new gTLD applications will not be published until well into the summer.

For SIIA policy updates including upcoming events, news and analysis, subscribe to SIIA’s weekly policy email newsletter, Digital Policy Roundup.


David LeDuc is Senior Director, Public Policy at SIIA. He focuses on e-commerce, privacy, cyber security, cloud computing, open standards, e-government and information policy.

This week in the Federal Cloud: April 30-May 4

There were a couple of expected but relatively big announcements around cloud in the federal government this week. First and foremost was the issuance of the Federal IT Shared Services Strategy on May 2nd by Federal CIO, Steve VanRoekel. The Shared Services Strategy, like the Shared-First Initiative before it, seeks to reduce the overall cost of government by eliminating duplicative IT and streamlining operations, while moving agencies to shared platforms for commodity IT (like email and storage), support IT (HR and financial management) and eventually mission IT (performance management). Under the plan, agencies have until August 31 to create their shared services roadmaps.

Also this week, we heard the first definitive date for the launching of the FedRAMP Initial Operational Capabilities (IOC), as it was publically announced that June 6th would be the date. This means, according to the FedRAMP timeline that we will see an operational program, with limited scope. We should also expect to see progress toward the official authorization/certification of CSPs, an updated Concept of Operations, and updated continuous monitoring guidance. It also means we will have to have approved third party assessors (3PAOs) in the very near term as they play an integral part in certifying CSPs. It was originally expected that we would have approved 3PAOs in April, but that date was later pushed to early May.

In other cloud news:


Michael Hettinger is VP for the Public Sector Innovation Group (PSIG) at SIIA. Follow his PSIG tweets at @SIIAPSIG.

This Week in IP Enforcement

The Pirate Bay Must Be Blocked By UK ISPs, Court Rules (BBC)
The High Court ruled that UK internet service providers must block file-sharing site The Pirate Bay and prevent their users from accessing the site.

U.S. Names China, Dozen Other Countries On Intellectual Property Watch List (Chicago Tribune)
The U.S. Trade Representative’s office again put China and Russia on its annual list of countries with the worst records of preventing the theft of copyrighted material and other intellectual property, while dropping Malaysia and Spain.

ICANN To Notify Domain Applicants Of Data Breaches (Reuters)
ICANN will notify domain name applicants next week whether their applications for new domain names could have been viewed by competitors as a result of a software bug.

How Hollywood Convinced California’s Senate To Pass A Bill Increasing Piracy Damages (The Hollywood Reporter)
An obscure case last year involving two men convicted for intending to sell thousands of counterfeit CDs and DVDs challenged the value of damages from piracy. California law on calculating restitution is now on the verge of changing what pirates owe.

IP Lawyers Praise Targeting Of Counterfeit Imports (The National Law Journal)
An interim rule of U.S. Customs and Border Protection (authorized by the National Defense Authorization Act of 2012) will allow the agency to share such information as product serial numbers, universal product codes, and stock keeping unit numbers with trademark owners so the rights owners can help the agency identify counterfeit goods.

Copyright Case In Oracle vs. Google Goes To Jury (Reuters)
Jurors began deliberating about whether Google violated Oracle’s copyright on parts of the Java programming language in a high stakes trial over smartphone technology in which Oracle is seeking roughly $1 billion from Google in copyright damages.


Keith Kupferschmid is General Counsel and SVP, Intellectual Property Policy & Enforcement at SIIA.

House Passes 4 key cyber bills, FTC Explores Mobile Payments and House Judiciary Panel Hears Intl. Patent Issues

House Passes Four Key Measures during “Cyber Week”
Last week, the House passed four key measures as part of “cyber week.” Most notably, the Cybersecurity Intelligence Sharing and Protection Act (CISPA, H.R. 3523) passed Thursday night by a vote of 248-168. Of the supporting 248, 42 Democrats were in favor and 28 Republicans against. This was a strong vote and a big victory for SIIA and many of our members that were leading supporters down the stretch. In response to the bill’s passage, SIIA released a statement of support.

The CISPA vote was followed by a unanimous voice vote on HR 4257, widely supported legislation to reform the Federal Information Security Management Act (FISMA), and the House concluded activities on Friday by passing the two cyber R&D measures: H.R. 2096 – Cybersecurity Enhancement Act, and H.R. 3834 – Advancing America’s Networking and IT R&D Act without significant opposition. Cybersecurity now shifts back to the Senate, where Maj. Leader Harry Reid (D-NV) would like to have the Lieberman-Collins comprehensive Cybersecurity Act (S. 2105) on the floor this month.

FTC is Latest to Explore Mobile Payment Issues
The FTC looked at mobile payments last Thursday, an event that capped several weeks of intense attention to this innovative new technology by policymakers. In March the Senate Banking Committee held hearings. And the Internet Caucus held a Congressional briefing, which SIIA’s Mark MacCarthy chaired. The major issues noted at the FTC’s workshop were privacy, security and consumer redress. While no new regulation or legislation was proposed, it was clear that policy makers expect mobile payment providers to provide adequate protections in these areas. Read more on SIIA’s Digital Discourse Blog.

House Judiciary Panel Hears Intl. Patent Issues
On April 26, the House Judiciary Subcommittee on Intellectual Property held a hearing on “International Patent Issues: Promoting a Level Playing Field for American Industry Abroad.” Witnesses from Pfizer, Qualcomm, American Continental Group, and Nebraska College of Law testified on their views of “threats” to procuring and exploiting patent rights internationally.

Among the key topics discussed were the upcoming Special 301 list from USTR, compulsory licenses in many mid- and low-income foreign countries, exclusions from patentability that may violate TRIPs (such as second uses, business methods, certain biological materials and uses, etc.), under-resourced patent offices, weak judicial enforcement, subsidies for local manufacturers (over non-local or “non manufacturing” entities), and the possible, perceived narrowing of patentable subject matter in the United States–which almost certainly would have international implications.

For SIIA policy updates including upcoming events, news and analysis, subscribe to SIIA’s weekly policy email newsletter, Digital Policy Roundup.


David LeDuc is Senior Director, Public Policy at SIIA. He focuses on e-commerce, privacy, cyber security, cloud computing, open standards, e-government and information policy.