What exactly is banned if the US bans on several Chinese apps go into effect? President Trump issued several executive orders, banning certain Chinese-owned apps in 45 days if they are still owned by their original companies (as I understand it): EO 13942 (August 6, 2020) - TikTok EO 13943 (August 6, 2020) - WeChat EO 13971 (January 5, 2021) - Alipay, CamScanner, QQ Wallet, SHAREit, Tencent QQ, VMate, WeChat Pay, and WPS Office These executive orders were revoked by EO 14034. The Commerce Department published regulations on the bans: Prohibited transactions with TikTok, temporarily blocked by this injunction and this injunction (part 1 and 2) Prohibited transactions with WeChat (withdrawn, archived at Exhibit A here), temporarily blocked by an injunction. Both of these regulations were rescinded. Hypothetically, if one of these bans had gone into effect, what would have been the actual effect on an app user? Would app stores be required to remove the apps from the app store for users in the US? Would app stores run by US companies (e.g. Apple iOS app store, Google Play for Android) be required to remove the apps from the app store for users outside the US? Would it be illegal for a user in the US to download the app somehow from outside the app store? Would it be illegal for a user in the US to use the app if they have already downloaded it? Would it be illegal (under US law) for a US citizen outside the US to download and/or use the app? Would ISPs in the US be required to try to block network traffic of the app?
I will try to answer some of my questions based on recent developments and other information I've seen. Yes. 2. No. On page 23 of this Commerce Dept. memo on TikTok, it describes: This prohibition would remove the TikTok app from U.S.-based mobile app stores, preventing mobile users from being able to download the app to their devices or receive updates. As scoped, this prohibition would only apply to app stores accessible in the United States, thus users would still be able to download the app while outside the United States. On page 15 of this Commerce Dept. memo on WeChat, it describes: This prohibition would remove the WeChat app from U.S.-based mobile app stores, preventing mobile users from being able to download the app to their devices or receive updates. As scoped, this prohibition would only apply to app stores accessible in the United States, thus users would still be able to download the app while outside the United States. 3,4,5. No for WeChat. In letters sent to the opposite party in a lawsuit and filed with the court, the US government has provided assurances that WeChat users will not have any civil or criminal liability for downloading or using the app for personal or business communication. we can provide assurances that the Secretary does not intend to take actions that would target persons or groups whose only connection with WeChat is their use or downloading of the app to convey personal or business information between users, or otherwise define the relevant transactions in such a way that would impose criminal or civil liability on such users. In other words, while use of the app for such communications could be directly or indirectly impaired through measures targeted at other transactions, use and downloading of the app for this limited purpose will not be a defined transaction, and such users will not be targeted or subject to penalties. I'm not entirely sure for TikTok, but the same may be true for TikTok since the prohibited transactions for both are essentially the same. No. The regulations on prohibited transactions do not require the blocking of traffic from the apps. Simply carrying the traffic of the app is not one of the prohibited transactions, as long as the company does not have a contract for internet transit or peering with ByteDance/Tencent, nor are providing hosting or content delivery services to ByteDance/Tencent. On page 23 of the Commerce Dept. memo on TikTok linked above, it says: User data could still be served by data centers, [redacted] operating outside of the United States. On page 7 of this declaration by a Commerce Dept. official further explains that WeChat traffic will still flow through the US: Moreover, this prohibition would not affect Internet transit or peering services in the United States that are not “directly contracted or arranged” by Tencent, and thus would leave the overwhelming majority of Internet traffic, including WeChat data, untouched.
You're completely misreading the goals and purpose of the Export Controls Office - Overview. They regulate the transfer of US regulated information and technology, commodities, and software in the interest of national security and economic growth. Transfer and export are not the same as the use of technology that personal devices contain. The simplest thing to do is simply call the Export Controls Office, and they will explain the difference, and tell what you need to do and what is not required of you when traveling. Some countries do prevent the use of some personal tech or Apps, i.e. Russia and Signal, the encrypted phone app; but that has nothing to do with UC.
That a company (C) has a website that can be accessed from a given county does not mean that the company operates in that country. If C is located in country A, markets and advertises to country A, offers products designed to appeal in country A, has its site only in the primary language of country A, uses servers located in country A, and has all its assets and physical offices in country A, it is not operating in country X, even if a few people from X do business with C over its web site. Country X may have laws which claim to apply to C or its web site. It will find it hard to enforce those laws, particularly if owners and officers of X do not travel to X. It will find it hard to extradite anyone for violations of the laws of X unless those actions are also crimes under the laws of A. If X is a major, powerful country such as the US, the UK, or the EU it may be able to get A to enforce its court orders, or to use its influence over the banking system to impose penalties on C. If X is North Korea, or even Brazil, it is probably out of luck. Thus the management of C needs worry primarily about the laws of A, and to a lesser extent the laws of major countries that make some effort to enforce their laws outside their own borders, such as the GDPR, or certain US laws. It probably has little reason to worry about the laws of other countries. If A is itself a major country that can easily resist any pressue from X, C has even less reason to worry. If C does significant business in countries D and E, and particularly if it opens physical offices in D or keeps assets in E, it will have much more reason to worry about the laws of D and E. If it does advertising in the D &amp; E markets, this also gives C more reason to be concerned with their laws. There is always some risk of X finding a way to enforce its laws, but the risk is small.
It is hard to prove a negative, but no - there is not rule that an app cannot track a user while the app is in the background. Almost every GPS-function app on every smart phone does the very thing you are talking about.
Of course you have to follow the license. You seem to have a license that doesn't allow distribution and want to know if giving copies to the Dutch or Chinese branch of your company is distribution. First, you should not make that decision. Your company's lawyers should do that. Second, such distribution is with some licenses perfectly legal if you distribute the software with source code. That's a business decision which you or your manager or his/her manager... can make. Such questions (whether giving a copy to your Dutch branch is distribution) often don't have an answer that is yes or no but maybe - if you went to court, would a judge say that it is distribution? The answer is quite clearly "maybe". So unless you can find a safe way, there is a risk. Again, your lawyers will assess the risk.
I think haveibeenpwned would be legal in the EU because it carries out a task in the public interest (Art. 6(1)(e)), and it shares no more data then necessary, for example you can search for a password, but it would not show you the emailaddress which belongs to that password. It would also be legal for you to hold a copy of a leaked database, but only if you have a legitimate interest (Art. 6(1)(f)) to have it. Being a security company does not change that, but finding a legitimate interest might be easier. If you have a legitimate interest to hold a copy of a leaked database, it does not mean you can use it in any way you like. For example testing if the password still works, is very likely illegal everywhere in the EU. But I'm not familiar with the UK laws.
If your app is published under US law, then the DMCA would apply, just as if it was a web site. The DMCA doesn't say anything about what particular technology the distributor is using. TO be protected by by the DMCA's &quot;safe harbor&quot; provision, you will need to include a notice in your app that you accept takedowns, and provide an address or method by which they can be sent, and an agent who will receive them. (You can be your own agent if you choose.) When and if you recieve a take down notice, you must check if it is valid in form. According to this Wikipedia article, a takedown notice must include: (i) A physical or electronic signature of a person authorized to act on behalf of the owner of an exclusive right that is allegedly infringed. (ii) Identification of the copyrighted work claimed to have been infringed, or, if multiple copyrighted works at a single online site are covered by a single notification, a representative list of such works at that site. (iii) Identification of the material that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit the service provider to locate the material. (iv) Information reasonably sufficient to permit the service provider to contact the complaining party, such as an address, telephone number, and, if available, an electronic mail address at which the complaining party may be contacted. (v) A statement that the complaining party has a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law. (vi) A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed. (See the actual text of the relevant section of the law.) If you receive (through your designated agent) a valid takedown notice, you must promptly remove the content and notify the poster (or you can instruct to poster to remove it, but you must do so yourself if the poster does not). If the poster then files a valid counter notice (see the linked sources above) with your agent, you must notify the sender of the original notice, and if the sender does not notify you of a copyright suit filed within 10-14 days, you must restore the content. Provided that these rules are complied with, the host gets a 'safe harbor&quot; and cannot be sued for copyright infringement, nor for the act of taking down the content. I believe that the agent must be registered with the US copyright office. The courts have not ruled on just how quickly an ISP or other host must react to the takedown notice. It must be &quot;expeditious&quot;. Moreover, Under the DMCA (i) 1) (a) The host must have, post, and enforce a policy denying access to repeat infringers, or lose safe harbor protection. The text of the provision is: (i) Conditions for Eligibility. -(1)Accommodation of technology. —The limitations on liability established by this section shall apply to a service provider only if the service provider— --(A) has adopted and reasonably implemented, and informs subscribers and account holders of the service provider’s system or network of, a policy that provides for the termination in appropriate circumstances of subscribers and account holders of the service provider’s system or network who are repeat infringers;
The U.S. could pass a law directing Apple to create software for fair compensation. Similar statutes have been passed in wartime compelling companies to do all sorts of things and companies don't have all of the rights of individuals. If it can be done (not obvious in the case of existing products in the market place), it might be possible for the government to compel it to do so; if it can't be done, it can't be compelled and not all things are possible retroactively. There would also be a constitutional contracts clause issues with such a law impairing contracts between Apple and its customers when applied to existing phones retroactively. Whether it could require Apple to create a law enforcement back door depends upon whether 4th Amendment privacy rights trump the creation of a means to do so. There is an expectation of privacy in electronic records, but it is not absolute. But, there is no law on the books requiring this from Apple. It does not flow naturally from existing powers of law enforcement under existing statutes. It goes beyond what a subpoena would ordinarily require someone to do, and a subpoena is the main means by which governments compel people to provide information. In my opinion, a court faced with that question would rule that a statute requiring Apple to do this prospectively would be constitutional, but no such statute exists. However, this is currently an open legal question because there is no statute of the kind that have been litigated in a manner that produced a binding precedent.