LIABILITY FOR CLOUD COMPUTING UNDER COPYRIGHT LAW BY MR. SORAWAT WONGKAWEEPAIROT A THESIS SUBMITTED IN PARTIAL FULFILLMENT OF THE REQUIREMENTS FOR THE DEGREE OF MASTER OF LAWS IN BUSINESS LAWS (ENGLISH PROGRAM) FACULTY OF LAW THAMMASAT UNIVERSITY 2011
ABSTRACT Cloud computing is a development of technology that closely relates to the development of the Internet. It is a metaphor of tremendous computing resources comprise of hardware and software that exist over the Internet. As a result, cloud computing implicates the sense of location independence. The users of cloud computing can access to the software or hardware wherever by using any computer that is connected to the Internet. Cloud computing consists of variety of services from a simple online application to the incredible online computing performance. According to the nature of the cloud computing service providers who allow their users to store their data on the cloud, it has brought the concern to the copyright realm, that is to say, the cloud computing services may be used by its service recipients as a tool to conduct copyright infringement. Unsurprisingly, cloud computing service providers may face secondary copyright infringement claim from the copyright owners. Thus appropriate provisions of law are required to deal with such issue to ensure the cloud computing service providers of their possible liability for copyright infringement, and to control them from contributing to the infringement activities on its system. In addition, in the case where cloud computing service providers fails to comply with the law, appropriate litigation procedure is required in order to facilitate the copyright owners to successfully recover from their loss. Said procedure includes the acquisition and admissibility of electronic evidence since everything e.g. the contract and data on the cloud are stored in electronic form. In the light of the location independence of cloud computing services, the copyright owners may be obstructed from filing a claim against the cloud computing service providers since such providers may not exist within the same jurisdiction as the copyright owners. As a result, although the copyright owners are entitled to bring lawsuits in their jurisdictions, they may still face problems in enforcing the court judgments in the other jurisdictions where cloud computing service providers are located. The study of the laws of foreign countries, namely the US and the UK, shows that both countries have appropriate and effective provisions of laws or regulations to deal with the issue of liability for copyright infringement of cloud computing service providers. At the same time, both countries also have appropriate provisions of laws to facilitate the copyright owners in proving infringement of cloud computing service providers. Though the court in both countries have advanced their jurisdictions to be able to establish jurisdiction over the cloud computing copyright infringement cases, the enforcement of their judgments are still considered problematic. i
As to Thailand, it is clear that its copyright law is yet undeveloped to appropriately deal with the liability for copyright infringement of cloud computing service providers. In addition, due to specific issue of evidence law, the copyright owners may face difficulties in proving infringement of the cloud computing services provider. Furthermore, although Thai court may be able to establish the jurisdiction over such cases, the copyright owners who received the judgments in their favors still face the difficulties in enforcing such judgments in the countries where cloud computing service providers exist. Therefore, it is essential that Thailand advance its laws in order to catch up with the current technological advancement of cloud computing. ii
ACKNOWLEDGEMENTS This thesis is part of Master of Laws in Business Laws (English Program), Faculty of Law, Thammasat University. The achievement of this thesis would not have been possible without the support of many people. First and foremost, I would like to express my warm and sincere thanks to Mr. Paiboon Amonpinyokeat, who introduced me to this very interesting thesis topic. He has enlightened me with the legal issues which may arise from this very new technology. I would like to express my deep gratitude to Professor Jumphot Saisoonthorn, my thesis advisor, whose encouragement, guidance and support from the initial to the final level enabled me to develop an understanding of the thesis. I owe my most sincere gratitude to Professor Anan Chantara-opakorn, Professor Jumphot Saisoonthorn, Professor Amnat Wongbandit and Professor Satyapon Sachdecha for devotion of their valuable time as my Thesis Committee and instructions of useful guidance and advice for the completion of my thesis. My warm thanks to all friends of mine who are always there for me to give me support, comfort, and encouragement through duration of this thesis. Lastly, I would like to express my love and gratitude to my beloved families for their understanding, support and endless love. The success of this thesis is devoted to them. Mr. Sorawat Wongkaweepairot Thammasat University Year 2011 iii
TABLE OF ABBREVIATIONS 17 U.S.C. Title 17 of the United States Code (the United States Copyright Act) Amazon EC2 Amazon Elastic Compute Cloud CDPA EDI IaaS IP address ISP OSP PaaS SaaS SLA TCP VAN WCT WIPO WPPT The Copyright, Designs and Patent Act Electronic Data Interchange Infrastructure as a Service Internet Protocol address Internet Service Provider Online Service Provider Platform as a Service Software as a Service Service Level Agreement Transmission Control Protocol Value-added Network WIPO Copyright Treaty World Intellectual Property Organization WIPO Performances and Phonograms Treaty iv
TABLE OF CONTENTS Page Abstract... i Acknowledgements... iii Table of Abbreviations... iv Chapter 1. Introduction... 1 1.1 Background and Problems... 1 1.2 Hypothesis... 2 1.3 Objectives of Study... 3 1.4 Scope of Study... 4 1.5 Methodology... 4 1.6 Expected Results... 4 2. Background of Cloud Computing and Legal Problems regarding Copyright Infringement... 5 2.1 Meaning and Scope of Cloud Computing... 5 2.1.1 Meaning of Cloud Computing... 5 2.1.1.1 Meaning... 5 2.1.1.2 Characteristics... 7 a. On-Demand Self Service... 7 b. Broad Network Access... 7 c. Resource Pooling... 8 d. Rapid Elasticity... 8 e. Measured Service... 8 2.1.1.3 Service Models... 9 a. Software as a Service (SaaS)... 9 b. Platform as a Service (PaaS)... 9 c. Infrastructure as a Service (IaaS)... 10 v
2.1.1.4 Deployment Models... 11 a. Private Cloud... 11 b. Community Cloud... 11 c. Public Cloud... 12 d. Hybrid Cloud... 12 2.1.2 Implications of Cloud Computing... 12 2.1.2.1 Security... 13 2.1.2.2 Availability and Reliability... 14 2.1.2.3 Privacy... 15 2.1.3 Benefits of Cloud Computing... 16 2.1.3.1 Benefits to the Business Sector... 16 2.1.3.2 Benefits to the General Users... 19 2.1.3.3 Benefits to the Education and Scientific Research... 20 2.1.3.4 Benefits to the Environment... 20 2.2 Nature of Cloud Computing regarding Copyright Infringement.. 21 2.2.1 Primary Copyright Infringement... 23 2.2.1.1 Users Concerns... 23 a. Uploading Infringing Contents... 23 b. Downloading Infringing Contents... 23 2.2.1.2 Cloud Computing Service Provider Concerns... 24 2.2.2 Secondary Copyright Infringement... 24 2.2.2.1 Contributory Infringement... 25 2.2.2.2 Vicarious Infringement... 26 2.2.2.3 Inducement Infringement... 27 2.3 Balance of Copyright Protection between Copyright Owners, Public, and Internet Service Providers... 28 2.4 Significance of Problems of Liability for Copyright Infringement of Cloud Computing Service Provider... 31 3. Copyright Infringement regarding Cloud Computing in Foreign Countries... 32 vi
3.1 Protection of Copyright... 32 3.1.1 Acquisition of Copyright... 32 3.1.1.1 Acquisition of Copyright under the US Law... 32 3.1.1.2 Acquisition of Copyright under the UK Law... 34 3.1.2 Protection of Copyrighted Works... 35 3.1.2.1 Protection of Copyrighted Works under the US Law... 36 3.1.2.2 Protection of Copyrighted Works under the UK Law... 37 3.2 Infringement of Copyright... 39 3.2.1 Infringement of Copyright under the US Law... 40 3.2.1.1 Primary Infringement under the US Law... 40 3.2.1.2 Secondary Infringement under the US Law... 47 3.2.2 Infringement of Copyright under the UK Law... 52 3.2.2.1 Primary Infringement under the UK Law... 52 3.2.2.2 Secondary Infringement under the UK Law... 56 3.3 Proof of Infringement... 59 3.3.1 Acquisition of Electronic Evidence... 59 3.3.1.1 Acquisition of Electronic Evidence under the US Law... 59 3.3.1.2 Acquisition of Electronic Evidence under the UK Law... 64 3.3.2 Admissibility of Electronic Evidence... 66 3.3.2.1 Admissibility of Electronic Evidence under the US Law... 67 3.3.2.2 Admissibility of Electronic Evidence under the UK Law... 71 3.4 Liability for Infringement... 74 3.4.1 General Principle of Liability for Infringement... 74 3.4.1.1 General Principle of Liability for Infringement under the US Law... 75 vii
3.4.1.2 General Principle of Liability for Infringement under the UK Law... 76 3.4.2 Exception of Liability for Infringement regarding Cloud Computing Service Provider... 77 3.4.2.1 Exception of Liability for Infringement regarding Cloud Computing Service Provider under the US Law... 78 3.4.2.2 Exception of Liability for Infringement regarding Cloud Computing Service Provider under the UK Law... 86 3.5 Jurisdiction of Copyright Infringement... 91 3.5.1 Jurisdiction of Copyright Infringement under the US Law... 91 3.5.2 Jurisdiction of Copyright Infringement under the UK Law... 92 3.6 Enforcement of Liability... 93 3.6.1 Enforcement of Liability under the US Law... 94 3.6.2 Enforcement of Liability under the UK Law... 95 4. Copyright Infringement regarding Cloud Computing in Thailand... 96 4.1 Protection of Copyright... 96 4.1.1 Acquisition of Copyright... 96 4.1.2 Protection of Copyrighted Works... 97 4.2 Infringement of Copyright... 98 4.2.1 Primary Infringement... 99 4.2.2 Secondary Infringement... 103 4.2.2.1 Secondary Infringement under Copyright Act B.E. 2537... 103 4.2.2.2 Secondary Infringement under Civil and Commercial Code... 105 4.3 Proof of Infringement... 108 4.3.1 Acquisition of Electronic Evidence... 109 viii
4.3.1.1 Acquisition of Electronic Evidence under Computer Related Crime Act B.E. 2550... 109 4.3.1.2 Acquisition of Electronic Evidence under Rules for Intellectual Property and International Trade Cases B.E. 2540... 114 4.3.2 Admissibility of Electronic Evidence... 116 4.4 Liability for Infringement... 123 4.4.1 General Principle of Liability for Infringement... 123 4.4.2 Exception of Liability for Infringement regarding Cloud Computing Service Provider... 124 4.5 Jurisdiction of Copyright Infringement... 128 4.6 Enforcement of Liability... 130 5. Conclusion and Recommendations... 133 5.1 Conclusion... 133 5.2 Recommendations... 134 Bibliography... 136 ix