The Phorm "Webwise" System
Ian Batten
ukcrypto at chiark.greenend.org.uk
Sat, 5 Apr 2008 08:19:24 +0100
>
> You've lost me there, I'm afraid. Who is it that you think is passing
> off or infringing your trade mark - the ISP or SomeoneElsesBooks.com?
> It doesn't seem to me that the ISP is either using your mark as a
> trade mark or passing off its products or services as yours. And
> whilst your loss may be SomeoneElsesBooks.com's gain, that doesn't
> mean it is doing anything that amounts to passing off or trade mark
> infringement, either.
It's a target rich environment. I suspect the ISP, but I'm not a
lawyer.
There are six parties involved:
* Phorm, as a broker
* The website upon whose pages Phorm adverts are placed, who are paid
by Phorm for that space.
* The ISP who provide the user's tracking data, who are paid by Phorm
for this information.
* The company whose products or services are advertised, who pay Phorm.
* The user.
* The website to which the user navigated.
Suppose I navigate to the website of Ganges Books, looking to buy a
book. Nile Books, meanwhile, have bought advertising space from Phorm
and are essentially looking for people who buy books.
I would argue that if Nile Books pay Phorm to place adverts, and the
overall effect is that when I navigate to Ganges Books I am served
adverts for Nile Books, or information is placed on my computer
masquerading as the work of Ganges Books, but whose later effect is to
serve me adverts for Nile Books, then the ISP's systems are passing
themselves off as Ganges Books for the commercial benefit of Nile
Books (ignore the brokers in this for a moment).
The ISP cannot possibly claim to be a mere conduit for all this
because, because they are taking money in order to have their machines
selectively masquerade as Ganges Books for the benefit of Nile Books,
and, following the money, Nile paid Phorm who paid the ISP.
Phorm are using the fact that the equipment within the ISP's network
is (nominally at leat) owned and operated by the ISP. If they for a
moment accepted that the equipment was actually Phorm's, and therefore
opaque to the ISP, their DPA position would become infinitely more
complex. That the anonymisation barrier is crossed before it leaves
the ISP's network is the core of both Phorm's and the ISPs' reasoning
for not being held to be processing personally identifiable
information improperly.
So I'd argue that the ISP are masquerading as companies with whom they
have absolutely no commercial relationship (and indeed, people who
have every reason to object, as no-one wants to deliver free analytics
for their competitors' benefit) for the benefit of others. It may be
that those others are also implicated, but (a) being paid to do things
that are illegal doesn't make you innocent and (b) from a
jurisdictional point of view, we know where the UK ISPs are and they
have lots of physical assets and UK revenue streams.
So the obvious move would be for a UK based competitor to one of
Phorm's advertising clients (not necessarily in the UK, as they
wouldn't need to be a party to the action) to bring suit against one
of the UK's ISP for passing off. ``Whenever my client's customers
navigate to my client's website, they are served adverts for a
competitor. This is done by systems owned by your client pretending
to be those owned by my client, without my client's consent and (for
bonus points) misappropriating my client's trademarks.''
ian