Citing whole mailing list messages on the web When I cite a complete message from a mailing list, omitting all personal information, if any, that is relatively concise (“Hi”, definition of problem, question, “Thank You”), can I cite the message publicly on a website? The message is a question related to computing and I cite the it because I answer it in the page. The mailing list has publicly available archives. Do I need consent of the original author to cite the message? Can I infringe copyright by embedding the whole message text on the page? (Assuming that the person did not give me any kind of permission explicitly.)
First, copyright means that permission from the author is generally required. The courts find three sorts of such permission: direct author-to-recipient explicit licensing (typical in the case of a book author to publisher relation), indirect licensing arising from platform usage (in using Stackexchange, you probably unknowingly click-agreed to allow me and everybody else to copy and redistribute your creations), and implicit licensing – where permission to use is reasonably inferrable, though not explicitly stated. Since the latter doesn't involve written-out statements of the conditions under which you are licensed to copy text, the courts don't rely heavily on implicit licensing. But implicit licensing is what makes it possible to legally read a web page without first signing an agreement. If we assume in your scenario that the author is fully aware that their responses are automatically distributed to various servers, then even in lieu of a platform license, an implicit license can be found. Second, irrespective of the desideratum of having permission, one is in the US allowed to copy without permission, for certain purposes known as &quot;fair use&quot;. This is a complicated area of legal analysis, where one has to weigh factors such as whether the content is artistic vs. factual, whether your use simply re-propagates vs. makes a comment, whether the use is for profit vs. free and educational, and whether the use has a negative effect on the market for the original work.
There is no fixed amount or proportion of a copyrighted text which may be quoted without infringement. Whether quoting without permission is a fair use (which is what this question asks) depends on the totality of the circumstances, including the purpose of the use, the effect of the use on the market or potential market for the original, and the nature of the original work. In the Harper vs Nation case, quotes totaling roughly 300 words from the autobiography of former President George H. W. Bush (which was many hundreds of pages long) were held to be the "heart" of the work, and quoting them was found not to be fair use. There is no formula which can be rigidly or automatically applied to determine if a quote is a fair use. Note also that fair use is a strictly US legal concept, and a use which would be fair use under US law might well be copyright infringement under the laws of the EU, the UK, or other countries.
There is language, but not a mechanism, covering this. Section 3(a)(3) of version 4 licenses says If requested by the Licensor, You must remove any of the information required by Section 3(a)(1)(A) to the extent reasonably practicable. If you become aware of a person using your material and attributing you, and you want the attribution removed, you would accordingly notify them (somehow), and they are required to remove the offending material. The removable informations includes: i. identification of the creator(s) of the Licensed Material and any others designated to receive attribution, in any reasonable manner requested by the Licensor (including by pseudonym if designated); ii. a copyright notice; iii. a notice that refers to this Public License; iv. a notice that refers to the disclaimer of warranties; v. a URI or hyperlink to the Licensed Material to the extent reasonably practicable;
You are clearly seeking legal advice. Answers on this site come from anonymous people on the internet and are not legal advice. You should not act based on information from this site. I am unaware of any lawsuit where one would be sued for merely storing and reading HTML for personal use. Downloading a webpage is probably not a copyright violation. Most things you create, including HTML source code, are protected by copyright and copyright includes the exclusive right to choose who can read what you created. I couldn't find any actual reference to this but I would hazard a guess that displaying an HTML webpage online is implicitly allowing others to read that code. I believe this guess is correct because all modern web browsers have the capability to view source that nobody considers illegal and browsers also include the capability to save webpages to disk. These browsers are made by companies with large legal departments, I doubt Internet Explorer would include this function if using it was a copyright violation. Here begins speculation: However, your expanded question says that not only you wish to read the HTML code but you also wish to process it, extract information from it and use what you learn this way. This could, I think, be prevented by the copyright holder. Still, what you are describing is commonly done in the world. Services such as Google, Bing or the Wayback Machine go far beyond what you are doing. In theory, I can see this as being a copyright violation but again, the fact that these big companies - without any kind of contract with the website owners - keep doing it is big evidence in favor of legality of storing webpages. You should be careful about how you use the stored data, though. For example, computer programs often have a stipulation in EULA that prevents you from reverse engineering the code. I could see that the use of some websites could be protected in such manner. Further (not authoritative) internet pages on this topic: https://stackoverflow.com/q/22819287/1580088 https://answers.yahoo.com/question/index?qid=20120621055815AAvJPvN
Can a city request deletion of all personal data that uses a certain domain for logins? Well, they can, but they have no legal backing to make it happen. Their chances of succeeding are about as good as me requesting a Ferrari, a Yacht and a Mansion. I can make that request. People will laugh. I will not get it. I'm a little worried that I shouldn't allow certain domains to be used as logins in the first place, especially ones that might be school related You have no way to know who owns what email address. And it's none of your business. Your only interest should be in whether the address is owned by the person that is creating the account. You probably already do that by sending a confirmation link to the email address when people sign up. I'd like to have some idea for future reference if there's any case where the GDPR would require me to comply with such a request The only way you have to comply with such a request is if the owner can prove their identity. As far as I understood, the &quot;Finnish city&quot; was three degrees away from that. They could not provide any proof they are who they said they are, they could not provide a finite list of accounts they claimed to own and they could not even provide proof they own those accounts. They literally just wrote an email with zero legal meaning. I want to figure out the right way to reply to emails like this one The correct way to handle this is have a feature on your website where the account owner can delete their own account. GDPR compliant. Then you make a text template explaining how to use that feature and reply with that template to every request, no matter how stupid (like this case) they are. If they cannot identify themselves to you by proving they have access to their &quot;own&quot; email, they have no business wasting your time. Legally, they could provide you with a different method of identification. In case of a Finnish school, that would probably need to be power of attorney from all children's legal guardians and a specific way to identify the accounts that is consistent with the data given (for example if they entered their full name and address on your website). You would probably in your rights to demand a certified translation if it's all in Finnish. Apart from the fact that you as a private US citizen have no real means to check the validity of all that paperwork, personally, if I saw hundreds of pages of certified translated paperwork, I would probably just comply. Not sure it it were actually enough, but it certainly gets an A+ for effort to delete data from a private website. But a real lawyer might give better advice with a real case on their hands. Is deleting the data actually more of a legal liability than not deleting it in some cases? (People shouldn't be able to delete other people's accounts.) Indeed. You should not delete people's data because a random punk on the internet sent you an email. You need to identify who the request is from and if they are allowed to make such a request. Whether you have a legal duty to actually keep data, is up to you or your lawyer to find out. It depends on your data and laws. It is perfectly legal to make a website with a textfield that deletes any data you enter after a second. Destruction of data you own is only a problem if you break other laws with it. For example the IRS might not be amused if you destroyed invoices and other proof of taxable income. &quot;Some dude claimed I must in an email&quot; is not going to fly with them. That said, again, please, identify who you deal with, find out if their claim is valid. Don't do stuff because random internet punks write you an email. Because the next mail you get, will be from a Nigerian Prince. Please wisen up before opening that one. People on the internet, through stupidity or malice, might not have your best interests at heart. Don't believe random emails.
You can do whatever you like with posts made after you change the rules - you have to leave the previous stuff alone. The contributors' have accepted the terms of the licence: They own the copyright or have permission from the copyright holder to post it (the promise) They agree that it can be edited altered or removed CC-BY-SA allows people to copy the stuff off the website and republish it - this is way outside what the contributors agreed to. These people have given permission for their work to be altered but not copied.
It's not clear exactly what you're asking, when you say "the company I work for" – i.e. are you asking "can they fire me?" (almost certainly they can, even if their TOS thinking is legally misguided – unless in your country there are laws that prevent firing employees). To be certain, you need to hire an attorney who is sufficiently savvy about web page technology that they can accurately judge what you are doing, and whether you can fruitfully resist their demands. You seem to be skeptical of their position because you are "not affecting their servers in any way". The TOS is not about affecting their servers, it is about affecting their intellectual property. It appears that your code does a number of the prohibited actions such as and perhaps most importantly "modify". If you have distributed a program that allows users to modify company content on their own computers, then the user might be in violation of the TOS, but not you (since you're not running a server that redistributes). However, I am betting that in order to create and test the program you had to violate the TOS. Additionally, you could be vicariously liable for the infringements of others, especially if this program can only be used to infringe on copyright, and you know this fact. That is pretty much the end of the legal part. As for how you should respond, your attorney, and not Law SE, deals in recommendations.
You are only responsible for the data that you collect or process, or data that you direct others to collect or process on your behalf. You are not responsible for the actions of third parties that may carry out incidental collection or processing that you have no control over - this includes such things as your ISP, backbone providers etc, but if you direct a service provider (eg Cloudflare, Amazon AWS etc) to cache your content and process it on your behalf then you need to include that fact in your data processing policy and link to the providers own data processing policy.