Jump to content

Doe subpoena: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Alesqaa (talk | contribs)
mNo edit summary
 
(19 intermediate revisions by 15 users not shown)
Line 1: Line 1:
{{Short description|Subpoena to seek the identity of an unknown defendant}}
A '''Doe subpoena''' is a [[subpoena]] that seeks the identity of an unknown [[defendant]] to a [[lawsuit]]. Most jurisdictions permit a [[plaintiff]] who does not yet know a defendant's identity to file suit against [[John Doe]] and then use the tools of the [[discovery (law)|discovery]] process to seek the defendant's true name.<ref>Aaron E. Kornblum, [http://www.ceas.cc/papers-2005/174.pdf ''Searching For John Doe: Finding Spammers and Phishers'' (pdf)], Second Conference on Email and Anti-Spam (2005). Retrieved on 2009-03-15.{{dead link|date=April 2011}}</ref> A Doe subpoena is often served on an [[online service provider]] or [[ISP]] for the purpose of identifying the author of an [[anonymous post]].
A '''Doe subpoena''' is a [[subpoena]] that seeks the identity of an unknown [[defendant]] to a [[lawsuit]]. Most jurisdictions permit a [[plaintiff]] who does not yet know a defendant's identity to file suit against a placeholder defendant, using the name [[John Doe]] or Jane Doe. A plaintiff may then use the tools of the [[discovery (law)|discovery]] process to seek the defendant's true name and amend the complaint to name the Doe defendant.<ref>Aaron E. Kornblum, [http://www.ceas.cc/papers-2005/174.pdf ''Searching For John Doe: Finding Spammers and Phishers'' (pdf)] {{webarchive |url=https://web.archive.org/web/20070412124823/http://www.ceas.cc/papers-2005/174.pdf |date=April 12, 2007 }}, Second Conference on Email and Anti-Spam (2005). Retrieved on 2009-03-15. </ref> <ref>{{Cite web |last=Arko |first=Alexandra L. |date=2024-05-30 |title=How a John Doe Lawsuit Can Help You Unmask the Source of Fake Reviews, Defamation, and Harassment |url=https://kjk.com/2024/05/30/how-a-john-doe-lawsuit-can-help-you-unmask-the-source-of-fake-reviews-defamation-and-harassment/ |access-date=2024-08-20 |website=KJK {{!}} Kohrman Jackson Krantz |language=en}}</ref> A Doe subpoena is often served on an [[online service provider]] or [[ISP]] for the purpose of identifying the author of an [[anonymous post]].


==Legal process==
==Legal process==
Unmasking an anonymous online poster is a two-step process. First, the plaintiff must issue a subpoena to the [[web hosting service|hosting website]] requesting the [[IP address]] of the poster. Most websites collect and temporarily store the IP addresses of visitors in a web [[server log]], although no U.S. law requires that they retain this information for any particular length of time.<ref>Bills proposed in both houses of [[United States Congress|Congress]] in February 2009 would require ISPs and [[wireless access point]]s to retain records of IP addresses for two years. This proposal, if enacted, would not affect the retention policies of web hosting services, however. ''See'' {{cite news | last = Albanesius | first = Chloe | title = Bill Would Require ISPs to Retain Data for Two Years | publisher = PCMag | date = 2009-02-20 | url = http://www.pcmag.com/article2/0,2817,2341476,00.asp | accessdate = 2009-03-16}}</ref>
Unmasking an anonymous online poster is a two-step process. First, the plaintiff must issue a subpoena to the [[web hosting service|hosting website]] requesting the [[IP address]] of the poster. Most websites collect and temporarily store the IP addresses of visitors in a web [[server log]], although no U.S. law requires that they retain this information for any particular length of time.<ref>Bills proposed in both houses of [[United States Congress|Congress]] in February 2009 would require ISPs and [[wireless access point]]s to retain records of IP addresses for two years. This proposal, if enacted, would not affect the retention policies of web hosting services, however. ''See'' {{cite news | last = Albanesius | first = Chloe | title = Bill Would Require ISPs to Retain Data for Two Years | publisher = PCMag | date = 2009-02-20 | url = https://www.pcmag.com/article2/0,2817,2341476,00.asp | accessdate = 2009-03-16}}</ref>


If the website provides the poster's IP address, the plaintiff must then subpoena the [[ISP]] that owns the address. This second subpoena requests the contact information associated with the account of the computer to which the IP address was assigned at the time the post was made.
If the website provides the poster's IP address, the plaintiff must then subpoena the [[ISP]] that owns the address. This second subpoena requests the contact information associated with the account of the computer to which the IP address was assigned at the time the post was made.


Courts do not require the target of a subpoena to provide [[notice]] to the person whose identity is sought.<ref>''Id.'' at 346.</ref> The hosting website is unlikely to notify the defendant, as it generally will not have access to contact information; subpoenas for IP addresses are therefore seldom subjected to legal challenge.<ref>''Id.'' at 328.</ref> The ISP, however, may be required by law to notify its subscriber before revealing any personally identifiable information in connection with a subpoena.<ref>''See'' [[#Statutory Limitations to Obtaining IP Addresses|Statutory Limitations to Obtaining IP Addresses]].</ref>
Courts do not require the target of a subpoena to provide [[notice]] to the person whose identity is sought.<ref>''Id.'' at 346.</ref> The hosting website is unlikely to notify the defendant, as it generally will not have access to contact information; subpoenas for IP addresses are therefore seldom subjected to legal challenge.<ref>''Id.'' at 328.</ref> The ISP, however, may be required by law to notify its subscriber before revealing any [[personally identifiable information]] in connection with a subpoena.<ref>''See'' [[#Statutory Limitations to Obtaining IP Addresses|Statutory Limitations to Obtaining IP Addresses]].</ref>


A defendant who does receive notice may file a motion to quash, which asks the court to block the subpoena and prevent the ISP from complying.<ref>''See'' [http://www.citmedialaw.org/legal-guide/potential-legal-challenges-anonymity Citizen Media Law Project's Guide to Potential Legal Challenges to Anonymity]. Retrieved on 2009-03-15.</ref> ISPs may also challenge Doe subpoenas on their customers' behalf, but they are not required to do so.<ref>Gleicher, ''supra'' note 1, at 345.</ref>
A defendant who does receive notice may file a motion to quash, which asks the court to block the subpoena and prevent the ISP from complying.<ref>''See'' [http://www.citmedialaw.org/legal-guide/potential-legal-challenges-anonymity Citizen Media Law Project's Guide to Potential Legal Challenges to Anonymity]. Retrieved on 2009-03-15.</ref> ISPs may also challenge Doe subpoenas on their customers' behalf, but they are not required to do so.<ref>Gleicher, ''supra'' note 1, at 345.</ref>
Line 16: Line 17:
This standard requires an ISP to divulge the identity of an anonymous poster if the plaintiff's case would be able to withstand a motion for [[summary judgment]]. This means that the plaintiff must "make a sufficient showing on [every] essential element of its case with respect to which it has the burden of proof."<ref>''[[Celotex Corp. v. Catrett]]'', [http://supreme.justia.com/us/477/317/case.html 477 U.S. 317, 323] (1986). Retrieved on 2009-03-15.</ref>
This standard requires an ISP to divulge the identity of an anonymous poster if the plaintiff's case would be able to withstand a motion for [[summary judgment]]. This means that the plaintiff must "make a sufficient showing on [every] essential element of its case with respect to which it has the burden of proof."<ref>''[[Celotex Corp. v. Catrett]]'', [http://supreme.justia.com/us/477/317/case.html 477 U.S. 317, 323] (1986). Retrieved on 2009-03-15.</ref>


The lead case applying the summary judgment standard is ''Doe v. Cahill'',<ref>[http://courts.delaware.gov/Opinions/%28azug0gfogzf1wl55keulbk55%29/Download.aspx?ID=67130 884 A.2d 451 (pdf)] (Del. 2005). Retrieved on 2009-03-15.</ref> in which a city council member sued an anonymous poster for two allegedly [[defamatory]] [[blog]] comments.<ref>''Id.'' at 454.</ref> The [[Delaware Supreme Court]] held that the plaintiff had failed to demonstrate that the comments were "capable of a defamatory meaning," an essential element of any defamation claim.<ref>''Id.'' at 466-67.</ref> As a result, the plaintiff was not entitled to discovery of the Doe defendant's identity.<ref>''Id.'' at 468.</ref>
The lead case applying the summary judgment standard is ''Doe v. Cahill'',<ref>[http://courts.delaware.gov/Opinions/%28azug0gfogzf1wl55keulbk55%29/Download.aspx?ID=67130 884 A.2d 451 (pdf)] (Del. 2005). Retrieved on 2009-03-15.</ref> in which a city council member sued an anonymous poster for two allegedly [[defamatory]] [[blog]] comments.<ref>''Id.'' at 454.</ref> The [[Delaware Supreme Court]] held that the plaintiff had failed to demonstrate that the comments were "capable of a defamatory meaning," an essential element of any defamation claim.<ref>''Id.'' at 466–67.</ref> As a result, the plaintiff was not entitled to discovery of the Doe defendant's identity.<ref>''Id.'' at 468.</ref>


Other courts have applied a "[[prima facie]] showing" test, which functions like the summary judgment test but avoids the "potentially confusing" attachment of a procedural label, since the standards governing such motions may differ depending on the [[jurisdiction]].<ref>''Krinsky v. Doe 6'', [http://www.courtinfo.ca.gov/opinions/archive/H030767.PDF 159 Cal. App. 4th 1154 (pdf)] (2008). Retrieved on 2009-03-15.</ref> In ''Krinsky v. Doe 6'', the [[California Court of Appeals]] applied the prima facie showing test in the [[libel]] context, holding that "[w]here it is clear to the court that discovery of the defendant's identity is necessary to pursue the plaintiff's claim, the court may refuse to quash a third-party subpoena if the plaintiff succeeds in setting forth evidence that a libelous statement has been made."<ref>''Id.'' at 1172.</ref>
Other courts have applied a "[[prima facie]] showing" test, which functions like the summary judgment test but avoids the "potentially confusing" attachment of a procedural label, since the standards governing such motions may differ depending on the [[jurisdiction]].<ref>''Krinsky v. Doe 6'', [https://web.archive.org/web/20090325151157/http://www.courtinfo.ca.gov/opinions/archive/H030767.PDF 159 Cal. App. 4th 1154 (pdf)] (2008). Retrieved on 2009-03-15.</ref> In ''Krinsky v. Doe 6'', the [[California Court of Appeals]] applied the prima facie showing test in the [[libel]] context, holding that "[w]here it is clear to the court that discovery of the defendant's identity is necessary to pursue the plaintiff's claim, the court may refuse to quash a third-party subpoena if the plaintiff succeeds in setting forth evidence that a libelous statement has been made."<ref>''Id.'' at 1172.</ref>


The prima facie standard was also favored by a [[United States District Court for the Southern District of New York|New York state district court]] in ''[[Sony Music Entertainment]] Inc. v. Does''.<ref>[http://www.nysd.uscourts.gov/courtweb/pdf/D02NYSC/04-05366.PDF 326 F. Supp. 2d 556 (pdf)] (S.D.N.Y. 2004). Retrieved on 2009-03-18.</ref> The court first found that the Doe defendants, who had used a [[peer-to-peer]] network to download [[copyrighted]] music files, warranted a lesser degree of [[First Amendment to the United States Constitution|First Amendment]] protection than speakers who engaged in "true expression" intended "to communicate a thought or convey an idea."<ref>''Id.'' at 564.</ref> It then held that disclosure of the Doe defendants' identities was warranted based on a consideration of: (1) the plaintiff's ability to establish a prima facie claim; (2) the specificity of the plaintiff's discovery request; (3) the availability of alternative means to obtain the subpoenaed information; (4) the central need for discovery to advance the plaintiff's claim; and (5) the defendants' expectation of [[privacy]].<ref>''Id.'' at 564-67.</ref>
The prima facie standard was also favored by a [[United States District Court for the Southern District of New York|New York state district court]] in ''[[Sony Music Entertainment]] Inc. v. Does''.<ref>[http://www.nysd.uscourts.gov/courtweb/pdf/D02NYSC/04-05366.PDF 326 F. Supp. 2d 556 (pdf)] (S.D.N.Y. 2004). Retrieved on 2009-03-18.</ref> The court first found that the Doe defendants, who had used a [[peer-to-peer]] network to download [[copyrighted]] music files, warranted a lesser degree of [[First Amendment to the United States Constitution|First Amendment]] protection than speakers who engaged in "true expression" intended "to communicate a thought or convey an idea."<ref>''Id.'' at 564.</ref> It then held that disclosure of the Doe defendants' identities was warranted based on a consideration of: (1) the plaintiff's ability to establish a prima facie claim; (2) the specificity of the plaintiff's discovery request; (3) the availability of alternative means to obtain the subpoenaed information; (4) the central need for discovery to advance the plaintiff's claim; and (5) the defendants' expectation of [[privacy]].<ref>''Id.'' at 564-67.</ref>
Line 25: Line 26:
This test provides a higher level of protection to anonymous online speakers, in that it requires a court to first apply the summary judgment standard of ''Doe v. Cahill'' and then, if the plaintiff is able to meet its burden, to balance the strength of the plaintiff's prima facie case against the poster's interest in remaining anonymous.
This test provides a higher level of protection to anonymous online speakers, in that it requires a court to first apply the summary judgment standard of ''Doe v. Cahill'' and then, if the plaintiff is able to meet its burden, to balance the strength of the plaintiff's prima facie case against the poster's interest in remaining anonymous.


A [[New Jersey Superior Court#Appellate Division|New Jersey appellate court]] applied this hybrid test in ''[[Dendrite International, Inc. v. Doe No. 3]]''.<ref>[http://pub.bna.com/eclr/277400t3.htm 775 A.2d 756] (N.J. App. Div. 2001). Retrieved on 2009-03-15.</ref> The court set forth five guidelines for judges to follow in deciding whether to compel disclosure of an anonymous poster's identity: (1) the plaintiff must make good faith efforts to notify the poster and give the poster a reasonable opportunity to respond; (2) the plaintiff must specifically identity the poster's allegedly actionable statements; (3) the complaint must set forth a prima facie [[cause of action]]; (4) the plaintiff must support each element of the claim with sufficient evidence; and (5) "the court must balance the defendant's First Amendment right of anonymous free speech against the strength of the prima facie case presented and the necessity for the disclosure of the anonymous defendant's identity to allow the plaintiff to properly proceed."<ref>''Id.'' at 760-61.</ref>
A [[New Jersey Superior Court#Appellate Division|New Jersey appellate court]] applied this hybrid test in ''[[Dendrite International, Inc. v. Doe No. 3]]''.<ref>[http://pub.bna.com/eclr/277400t3.htm 775 A.2d 756] (N.J. App. Div. 2001). Retrieved on 2009-03-15.</ref> The court set forth five guidelines for judges to follow in deciding whether to compel disclosure of an anonymous poster's identity: (1) the plaintiff must make good faith efforts to notify the poster and give the poster a reasonable opportunity to respond; (2) the plaintiff must specifically identify the poster's allegedly actionable statements; (3) the complaint must set forth a prima facie [[cause of action]]; (4) the plaintiff must support each element of the claim with sufficient evidence; and (5) "the court must balance the defendant's First Amendment right of anonymous free speech against the strength of the prima facie case presented and the necessity for the disclosure of the anonymous defendant's identity to allow the plaintiff to properly proceed."<ref>''Id.'' at 760-61.</ref>


The so-called [[Dendrite International, Inc. v. Doe No. 3 | ''Dendrite'' standard]] was adopted by the [[Arizona Supreme Court]] in ''[[Mobilisa, Inc. v. Doe]]'',<ref>[http://www.cofad1.state.az.us/opinionfiles/CV/CV060521.pdf 170 P.3d 712 (pdf)] (Ariz. 2007). Retrieved on 2009-03-15.</ref> and most recently, by [[Maryland Court of Appeals|Maryland's highest court]] in ''Independent Newspapers v. Brodie''.<ref>[http://mdcourts.gov/opinions/coa/2009/63a08.pdf Court of Appeals of Maryland, Feb. 27, 2009, No. 63 (pdf)]. Retrieved on 2009-03-15.</ref> After reviewing the treatment of anonymous online speech by other state and federal courts, the Maryland court concluded that "a test requiring notice and opportunity to be heard, coupled with a showing of a prima facie case and the application of a balancing test—such as the standard set forth in ''Dendrite''—most appropriately balances a speaker's constitutional right to anonymous Internet speech with a plaintiff's right to seek judicial redress from defamatory remarks."<ref>''Id.'' at 41 (internal citation omitted).</ref>
The so-called [[Dendrite International, Inc. v. Doe No. 3 | ''Dendrite'' standard]] was adopted by the [[Arizona Supreme Court]] in ''[[Mobilisa, Inc. v. Doe]]'',<ref>[http://www.cofad1.state.az.us/opinionfiles/CV/CV060521.pdf 170 P.3d 712 (pdf)] {{webarchive |url=https://web.archive.org/web/20090313220608/http://www.cofad1.state.az.us/opinionfiles/CV/CV060521.pdf |date=March 13, 2009 }} (Ariz. 2007). Retrieved on 2009-03-15.</ref> and most recently, by [[Maryland Court of Appeals|Maryland's highest court]] in ''Independent Newspapers v. Brodie''.<ref>[http://mdcourts.gov/opinions/coa/2009/63a08.pdf Court of Appeals of Maryland, Feb. 27, 2009, No. 63 (pdf)]. Retrieved on 2009-03-15.</ref> After reviewing the treatment of anonymous online speech by other state and federal courts, the Maryland court concluded that "a test requiring notice and opportunity to be heard, coupled with a showing of a prima facie case and the application of a balancing test—such as the standard set forth in ''Dendrite''—most appropriately balances a speaker's constitutional right to anonymous Internet speech with a plaintiff's right to seek judicial redress from defamatory remarks."<ref>''Id.'' at 41 (internal citation omitted).</ref>


===Motion to dismiss standard===
===Motion to dismiss standard===
Some early cases required plaintiffs to demonstrate that their cause of action could withstand a [[Motion (legal)#Motion to dismiss|motion to dismiss]]. This standard holds plaintiffs to a much lower evidentiary burden than the summary judgment standard, as it only requires the allegation of facts that, if true, would entitle the plaintiff to a [[legal remedy]].
Some early cases required plaintiffs to demonstrate that their cause of action could withstand a [[Motion (legal)#Motion to dismiss|motion to dismiss]]. This standard holds plaintiffs to a much lower evidentiary burden than the summary judgment standard, as it only requires the allegation of facts that, if true, would entitle the plaintiff to a [[legal remedy]].


A [[Northern district of california|California district court]] applied this standard in one of the first cases to consider the discovery of an anonymous online speaker's identity, ''Columbia Insurance Co. v. Seescandy.com''.<ref>[http://cyber.law.harvard.edu/property00/domain/Sees.html 185 F.R.D. 573] (N.D. Cal. 1999). Retrieved on 2009-03-15.</ref> The court analogized the motion to dismiss standard to the requirement in a criminal investigation that the government show [[probable cause]] before obtaining a [[warrant (law)|warrant]], in that both prerequisites were necessary to "prevent abuse."<ref>''Id.'' at 579.</ref> The court concluded that an anonymous poster could only be unmasked if the plaintiff made "some showing that an act giving rise to civil liability actually occurred and that the discovery [was] aimed at revealing specific identifying features of the person or entity who committed that act."<ref>''Id.'' at 580.</ref> Inconsistent with s motion to dismiss standard, the court also relied on evidence of actual confusion in finding a basis for allowing discovery to identify the anonymous speaker.<ref>''Id.'' at 580.</ref>
A [[Northern district of california|California district court]] applied this standard in one of the first cases to consider the discovery of an anonymous online speaker's identity, ''Columbia Insurance Co. v. Seescandy.com''.<ref>[http://cyber.law.harvard.edu/property00/domain/Sees.html 185 F.R.D. 573] (N.D. Cal. 1999). Retrieved on 2009-03-15.</ref> The court analogized the motion to dismiss standard to the requirement in a criminal investigation that the government show [[probable cause]] before obtaining a [[warrant (law)|warrant]], in that both prerequisites were necessary to "prevent abuse."<ref>''Id.'' at 579.</ref> The court concluded that an anonymous poster could only be unmasked if the plaintiff made "some showing that an act giving rise to civil liability actually occurred and that the discovery [was] aimed at revealing specific identifying features of the person or entity who committed that act."<ref>''Id.'' at 580.</ref> Inconsistent with a motion to dismiss standard, the court also relied on evidence of actual confusion in finding a basis for allowing discovery to identify the anonymous speaker.<ref>''Id.'' at 580.</ref>


===Good faith standard===
===Good faith standard===
Under a good faith standard, plaintiffs are simply required to show that their claim is made in [[good faith]] and not with the intent to harass the Doe defendant. In an early case, the [[Circuit Court]] of [[Virginia]] applied this standard in ''In re [[Subpoena duces tecum|Subpoena Duces Tecum]] to [[America Online]]'', holding that a court may compel an ISP to reveal a subscriber's identity if it finds "that the party requesting the subpoena has a legitimate, good faith basis to contend that it may be the victim of conduct actionable in the jurisdiction" and that "the identity information is centrally needed to advance that claim."<ref>[http://pub.bna.com/eclr/40570.htm 2000 WL 1210372, *8] (Vir. Cir. Ct. Jan. 31, 2000). Retrieved on 2009-03-15.</ref> In [[Doe v. 2themart.com Inc.]], the U.S. District Court for the Western District of Washington required showing of good faith, as well as the compelling need for the discovery of the identifying information.
Under a good faith standard, plaintiffs are simply required to show that their claim is made in [[good faith]] and not with the intent to harass the Doe defendant. In an early case, the [[Circuit Court]] of [[Virginia]] applied this standard in ''In re [[Subpoena duces tecum|Subpoena Duces Tecum]] to [[America Online]]'', holding that a court may compel an ISP to reveal a subscriber's identity if it finds "that the party requesting the subpoena has a legitimate, good faith basis to contend that it may be the victim of conduct actionable in the jurisdiction" and that "the identity information is centrally needed to advance that claim."<ref>[http://pub.bna.com/eclr/40570.htm 2000 WL 1210372, *8] (Vir. Cir. Ct. Jan. 31, 2000). Retrieved on 2009-03-15.</ref> In ''[[Doe v. 2themart.com Inc.]]'', the U.S. District Court for the Western District of Washington required showing of good faith, as well as the compelling need for the discovery of the identifying information.<ref>{{Cite web |title=Doe v. 2TheMart. Com Inc., 140 F. Supp. 2d 1088 (W.D. Wash. 2001) |url=https://law.justia.com/cases/federal/district-courts/FSupp2/140/1088/2389624/ |access-date=2024-01-08 |website=Justia Law |language=en}}</ref>


Courts and commentators have subsequently deemed this standard the "most deferential to plaintiffs," as "it offers no practical, reliable way to determine the plaintiff's good faith and leaves the speaker with little protection."<ref>''Krinsky'', 159 Cal. App. 4th at 1167; ''see also'' Ryan M. Martin, ''Freezing the Net: Rejecting a One-Size-Fits-All Standard for Unmasking Anonymous Internet Speakers in Defamation Lawsuits'', 75 U. Cin. L. Rev. 1217, 1228 (2007) (referring to the good faith standard as "extremely deferential to plaintiffs' allegations").</ref>
Courts and commentators have subsequently deemed this standard the "most deferential to plaintiffs," as "it offers no practical, reliable way to determine the plaintiff's good faith and leaves the speaker with little protection."<ref>''Krinsky'', 159 Cal. App. 4th at 1167; ''see also'' Ryan M. Martin, ''Freezing the Net: Rejecting a One-Size-Fits-All Standard for Unmasking Anonymous Internet Speakers in Defamation Lawsuits'', 75 U. Cin. L. Rev. 1217, 1228 (2007) (referring to the good faith standard as "extremely deferential to plaintiffs' allegations").</ref>
Line 43: Line 44:


===Cable TV Privacy Act of 1984===
===Cable TV Privacy Act of 1984===
Under the [[Cable TV Privacy Act]] of 1984,<ref>[[47 U.S.C.]] [http://www.law.cornell.edu/uscode/html/uscode47/usc_sec_47_00000551----000-.html § 551].</ref> a cable ISP may be required to notify its subscribers and obtain consent before disclosing any personally identifiable information, but the statute provides limited exceptions to the consent requirement, including disclosure made pursuant to a [[court order]].<ref>''See Cahill'', 884 A.2d at 455, n.4; ''but see In re United States'', [http://www.nysd.uscourts.gov/courtweb/pdf/D02NYSC/01-08945.PDF 157 F. Supp. 2d 286, 290-92 (pdf)] (S.D.N.Y. 2001) (holding that [[ECPA]], and not the Cable Act, applied to government access of internet subscriber records).</ref>
Under the [[Cable TV Privacy Act]] of 1984,<ref>[[47 U.S.C.]] [https://www.law.cornell.edu/uscode/text/47/551- § 551].</ref> a cable ISP may be required to notify its subscribers and obtain consent before disclosing any personally identifiable information, but the statute provides limited exceptions to the consent requirement, including disclosure made pursuant to a [[court order]].<ref>''See Cahill'', 884 A.2d at 455, n.4; ''but see In re United States'', [http://www.nysd.uscourts.gov/courtweb/pdf/D02NYSC/01-08945.PDF 157 F. Supp. 2d 286, 290-92 (pdf)] {{Webarchive|url=https://web.archive.org/web/20160127130437/http://www.nysd.uscourts.gov/courtweb/pdf/D02NYSC/01-08945.PDF |date=2016-01-27 }} (S.D.N.Y. 2001) (holding that [[ECPA]], and not the Cable Act, applied to government access of internet subscriber records).</ref>


===Electronic Communications Privacy Act===
===Electronic Communications Privacy Act===
The [[Electronic Communications Privacy Act]]<ref name="§ 2703d">[[18 U.S.C.]] [http://www.law.cornell.edu/uscode/18/2703.html § 2703(d)].</ref> restricts government and private access to computer records. Thus, in order to unmask the author of an anonymous post through the legal process, the individual seeking the information must comply with ECPA. There is no provision within ECPA, other than voluntary disclosure or with consent, that allows civil litigants to force an ISP or website to reveal the contents of a user's emails via a subpoena.<ref>''See'' ''O'Grady v. Super. Ct.'', [http://www.precydent.com/OriginalVersion/H028579.PDF?id=88603 139 Cal. App. 4th 1423 (pdf)] (2006) (holding that ECPA prohibited disclosure of emails in connection with a subpoena); [[Federal Trade Commission|''Fed. Trade Comm'n'']] ''v.'' [[Netscape|''Netscape Commc'ns Corp.'']], [http://pub.bna.com/lw/00026.htm 196 F.R.D. 559] (N.D. Cal. 2000) (denying FTC's motion to compel disclosure of customer information because of ECPA); 18 U.S.C. § 2703 (only government entities can force disclosure). ''But see Flagg v. [[City of Detroit]]'', [http://www.electronicdiscoveryblog.com/cases/flagg.pdf 252 F.R.D. 346 (pdf)] ([[United States District Court for the Eastern District of Michigan|E.D. Mich.]] 2008) (finding that a subpoena can be used to force a party to consent to disclosure).</ref> However, a private party in a lawsuit may force an ISP to disclose non-content records (e.g. the name of the owner of an account, a list of email addresses to whom emails were sent, access times, etc.) through a subpoena. In addition, the government can obtain the records needed to identify the person behind an IP address using a subpoena. In order to obtain more detailed transactional records, the government would be required to obtain a court order by setting forth "specific and articulable facts show that there are reasonable grounds to believe...the records...are relevant and material to an ongoing criminal investigation."<ref name="§ 2703d"/>
The [[Electronic Communications Privacy Act]]<ref name="§ 2703d">[[18 U.S.C.]] [https://www.law.cornell.edu/uscode/18/2703.html § 2703(d)].</ref> restricts government and private access to computer records. Thus, in order to unmask the author of an anonymous post through the legal process, the individual seeking the information must comply with ECPA. There is no provision within ECPA, other than voluntary disclosure or with consent, that allows civil litigants to force an ISP or website to reveal the contents of a user's emails via a subpoena.<ref>''See'' ''O'Grady v. Super. Ct.'', [http://www.precydent.com/OriginalVersion/H028579.PDF?id=88603 139 Cal. App. 4th 1423 (pdf)]{{dead link|date=March 2017|bot=medic}}{{cbignore|bot=medic}} (2006) (holding that ECPA prohibited disclosure of emails in connection with a subpoena); [[Federal Trade Commission|''Fed. Trade Comm'n'']] ''v.'' [[Netscape|''Netscape Commc'ns Corp.'']], [http://pub.bna.com/lw/00026.htm 196 F.R.D. 559] (N.D. Cal. 2000) (denying FTC's motion to compel disclosure of customer information because of ECPA); 18 U.S.C. § 2703 (only government entities can force disclosure). ''But see Flagg v. [[City of Detroit]]'', [http://www.electronicdiscoveryblog.com/cases/flagg.pdf 252 F.R.D. 346 (pdf)] {{webarchive |url=https://web.archive.org/web/20120222110617/http://www.electronicdiscoveryblog.com/cases/flagg.pdf |date=February 22, 2012 }} ([[United States District Court for the Eastern District of Michigan|E.D. Mich.]] 2008) (finding that a subpoena can be used to force a party to consent to disclosure).</ref> However, a private party in a lawsuit may force an ISP to disclose non-content records (e.g. the name of the owner of an account, a list of email addresses to whom emails were sent, access times, etc.) through a subpoena. In addition, the government can obtain the records needed to identify the person behind an IP address using a subpoena. In order to obtain more detailed transactional records, the government would be required to obtain a court order by setting forth "specific and articulable facts show that there are reasonable grounds to believe...the records...are relevant and material to an ongoing criminal investigation."<ref name="§ 2703d"/>


==See also==
==See also==

Latest revision as of 14:41, 20 August 2024

A Doe subpoena is a subpoena that seeks the identity of an unknown defendant to a lawsuit. Most jurisdictions permit a plaintiff who does not yet know a defendant's identity to file suit against a placeholder defendant, using the name John Doe or Jane Doe. A plaintiff may then use the tools of the discovery process to seek the defendant's true name and amend the complaint to name the Doe defendant.[1] [2] A Doe subpoena is often served on an online service provider or ISP for the purpose of identifying the author of an anonymous post.

[edit]

Unmasking an anonymous online poster is a two-step process. First, the plaintiff must issue a subpoena to the hosting website requesting the IP address of the poster. Most websites collect and temporarily store the IP addresses of visitors in a web server log, although no U.S. law requires that they retain this information for any particular length of time.[3]

If the website provides the poster's IP address, the plaintiff must then subpoena the ISP that owns the address. This second subpoena requests the contact information associated with the account of the computer to which the IP address was assigned at the time the post was made.

Courts do not require the target of a subpoena to provide notice to the person whose identity is sought.[4] The hosting website is unlikely to notify the defendant, as it generally will not have access to contact information; subpoenas for IP addresses are therefore seldom subjected to legal challenge.[5] The ISP, however, may be required by law to notify its subscriber before revealing any personally identifiable information in connection with a subpoena.[6]

A defendant who does receive notice may file a motion to quash, which asks the court to block the subpoena and prevent the ISP from complying.[7] ISPs may also challenge Doe subpoenas on their customers' behalf, but they are not required to do so.[8]

[edit]

No uniform standard exists in the United States for determining the circumstances under which an anonymous online speaker may be unmasked.[9] The federal and state courts that have considered the issue have applied a variety of tests.

Summary judgment standard

[edit]

This standard requires an ISP to divulge the identity of an anonymous poster if the plaintiff's case would be able to withstand a motion for summary judgment. This means that the plaintiff must "make a sufficient showing on [every] essential element of its case with respect to which it has the burden of proof."[10]

The lead case applying the summary judgment standard is Doe v. Cahill,[11] in which a city council member sued an anonymous poster for two allegedly defamatory blog comments.[12] The Delaware Supreme Court held that the plaintiff had failed to demonstrate that the comments were "capable of a defamatory meaning," an essential element of any defamation claim.[13] As a result, the plaintiff was not entitled to discovery of the Doe defendant's identity.[14]

Other courts have applied a "prima facie showing" test, which functions like the summary judgment test but avoids the "potentially confusing" attachment of a procedural label, since the standards governing such motions may differ depending on the jurisdiction.[15] In Krinsky v. Doe 6, the California Court of Appeals applied the prima facie showing test in the libel context, holding that "[w]here it is clear to the court that discovery of the defendant's identity is necessary to pursue the plaintiff's claim, the court may refuse to quash a third-party subpoena if the plaintiff succeeds in setting forth evidence that a libelous statement has been made."[16]

The prima facie standard was also favored by a New York state district court in Sony Music Entertainment Inc. v. Does.[17] The court first found that the Doe defendants, who had used a peer-to-peer network to download copyrighted music files, warranted a lesser degree of First Amendment protection than speakers who engaged in "true expression" intended "to communicate a thought or convey an idea."[18] It then held that disclosure of the Doe defendants' identities was warranted based on a consideration of: (1) the plaintiff's ability to establish a prima facie claim; (2) the specificity of the plaintiff's discovery request; (3) the availability of alternative means to obtain the subpoenaed information; (4) the central need for discovery to advance the plaintiff's claim; and (5) the defendants' expectation of privacy.[19]

Summary judgment standard followed by balancing

[edit]

This test provides a higher level of protection to anonymous online speakers, in that it requires a court to first apply the summary judgment standard of Doe v. Cahill and then, if the plaintiff is able to meet its burden, to balance the strength of the plaintiff's prima facie case against the poster's interest in remaining anonymous.

A New Jersey appellate court applied this hybrid test in Dendrite International, Inc. v. Doe No. 3.[20] The court set forth five guidelines for judges to follow in deciding whether to compel disclosure of an anonymous poster's identity: (1) the plaintiff must make good faith efforts to notify the poster and give the poster a reasonable opportunity to respond; (2) the plaintiff must specifically identify the poster's allegedly actionable statements; (3) the complaint must set forth a prima facie cause of action; (4) the plaintiff must support each element of the claim with sufficient evidence; and (5) "the court must balance the defendant's First Amendment right of anonymous free speech against the strength of the prima facie case presented and the necessity for the disclosure of the anonymous defendant's identity to allow the plaintiff to properly proceed."[21]

The so-called Dendrite standard was adopted by the Arizona Supreme Court in Mobilisa, Inc. v. Doe,[22] and most recently, by Maryland's highest court in Independent Newspapers v. Brodie.[23] After reviewing the treatment of anonymous online speech by other state and federal courts, the Maryland court concluded that "a test requiring notice and opportunity to be heard, coupled with a showing of a prima facie case and the application of a balancing test—such as the standard set forth in Dendrite—most appropriately balances a speaker's constitutional right to anonymous Internet speech with a plaintiff's right to seek judicial redress from defamatory remarks."[24]

Motion to dismiss standard

[edit]

Some early cases required plaintiffs to demonstrate that their cause of action could withstand a motion to dismiss. This standard holds plaintiffs to a much lower evidentiary burden than the summary judgment standard, as it only requires the allegation of facts that, if true, would entitle the plaintiff to a legal remedy.

A California district court applied this standard in one of the first cases to consider the discovery of an anonymous online speaker's identity, Columbia Insurance Co. v. Seescandy.com.[25] The court analogized the motion to dismiss standard to the requirement in a criminal investigation that the government show probable cause before obtaining a warrant, in that both prerequisites were necessary to "prevent abuse."[26] The court concluded that an anonymous poster could only be unmasked if the plaintiff made "some showing that an act giving rise to civil liability actually occurred and that the discovery [was] aimed at revealing specific identifying features of the person or entity who committed that act."[27] Inconsistent with a motion to dismiss standard, the court also relied on evidence of actual confusion in finding a basis for allowing discovery to identify the anonymous speaker.[28]

Good faith standard

[edit]

Under a good faith standard, plaintiffs are simply required to show that their claim is made in good faith and not with the intent to harass the Doe defendant. In an early case, the Circuit Court of Virginia applied this standard in In re Subpoena Duces Tecum to America Online, holding that a court may compel an ISP to reveal a subscriber's identity if it finds "that the party requesting the subpoena has a legitimate, good faith basis to contend that it may be the victim of conduct actionable in the jurisdiction" and that "the identity information is centrally needed to advance that claim."[29] In Doe v. 2themart.com Inc., the U.S. District Court for the Western District of Washington required showing of good faith, as well as the compelling need for the discovery of the identifying information.[30]

Courts and commentators have subsequently deemed this standard the "most deferential to plaintiffs," as "it offers no practical, reliable way to determine the plaintiff's good faith and leaves the speaker with little protection."[31]

Statutory limitations to obtaining IP addresses

[edit]

Federal privacy statutes may limit a plaintiff's ability to gain access to an ISP's subscriber records.

Cable TV Privacy Act of 1984

[edit]

Under the Cable TV Privacy Act of 1984,[32] a cable ISP may be required to notify its subscribers and obtain consent before disclosing any personally identifiable information, but the statute provides limited exceptions to the consent requirement, including disclosure made pursuant to a court order.[33]

Electronic Communications Privacy Act

[edit]

The Electronic Communications Privacy Act[34] restricts government and private access to computer records. Thus, in order to unmask the author of an anonymous post through the legal process, the individual seeking the information must comply with ECPA. There is no provision within ECPA, other than voluntary disclosure or with consent, that allows civil litigants to force an ISP or website to reveal the contents of a user's emails via a subpoena.[35] However, a private party in a lawsuit may force an ISP to disclose non-content records (e.g. the name of the owner of an account, a list of email addresses to whom emails were sent, access times, etc.) through a subpoena. In addition, the government can obtain the records needed to identify the person behind an IP address using a subpoena. In order to obtain more detailed transactional records, the government would be required to obtain a court order by setting forth "specific and articulable facts show that there are reasonable grounds to believe...the records...are relevant and material to an ongoing criminal investigation."[34]

See also

[edit]

References

[edit]
  1. ^ Aaron E. Kornblum, Searching For John Doe: Finding Spammers and Phishers (pdf) Archived April 12, 2007, at the Wayback Machine, Second Conference on Email and Anti-Spam (2005). Retrieved on 2009-03-15.
  2. ^ Arko, Alexandra L. (2024-05-30). "How a John Doe Lawsuit Can Help You Unmask the Source of Fake Reviews, Defamation, and Harassment". KJK | Kohrman Jackson Krantz. Retrieved 2024-08-20.
  3. ^ Bills proposed in both houses of Congress in February 2009 would require ISPs and wireless access points to retain records of IP addresses for two years. This proposal, if enacted, would not affect the retention policies of web hosting services, however. See Albanesius, Chloe (2009-02-20). "Bill Would Require ISPs to Retain Data for Two Years". PCMag. Retrieved 2009-03-16.
  4. ^ Id. at 346.
  5. ^ Id. at 328.
  6. ^ See Statutory Limitations to Obtaining IP Addresses.
  7. ^ See Citizen Media Law Project's Guide to Potential Legal Challenges to Anonymity. Retrieved on 2009-03-15.
  8. ^ Gleicher, supra note 1, at 345.
  9. ^ Who's Exposing John Doe Journal of Technology Law & Policy, Vol. 13, No. 1, 2008
  10. ^ Celotex Corp. v. Catrett, 477 U.S. 317, 323 (1986). Retrieved on 2009-03-15.
  11. ^ 884 A.2d 451 (pdf) (Del. 2005). Retrieved on 2009-03-15.
  12. ^ Id. at 454.
  13. ^ Id. at 466–67.
  14. ^ Id. at 468.
  15. ^ Krinsky v. Doe 6, 159 Cal. App. 4th 1154 (pdf) (2008). Retrieved on 2009-03-15.
  16. ^ Id. at 1172.
  17. ^ 326 F. Supp. 2d 556 (pdf) (S.D.N.Y. 2004). Retrieved on 2009-03-18.
  18. ^ Id. at 564.
  19. ^ Id. at 564-67.
  20. ^ 775 A.2d 756 (N.J. App. Div. 2001). Retrieved on 2009-03-15.
  21. ^ Id. at 760-61.
  22. ^ 170 P.3d 712 (pdf) Archived March 13, 2009, at the Wayback Machine (Ariz. 2007). Retrieved on 2009-03-15.
  23. ^ Court of Appeals of Maryland, Feb. 27, 2009, No. 63 (pdf). Retrieved on 2009-03-15.
  24. ^ Id. at 41 (internal citation omitted).
  25. ^ 185 F.R.D. 573 (N.D. Cal. 1999). Retrieved on 2009-03-15.
  26. ^ Id. at 579.
  27. ^ Id. at 580.
  28. ^ Id. at 580.
  29. ^ 2000 WL 1210372, *8 (Vir. Cir. Ct. Jan. 31, 2000). Retrieved on 2009-03-15.
  30. ^ "Doe v. 2TheMart. Com Inc., 140 F. Supp. 2d 1088 (W.D. Wash. 2001)". Justia Law. Retrieved 2024-01-08.
  31. ^ Krinsky, 159 Cal. App. 4th at 1167; see also Ryan M. Martin, Freezing the Net: Rejecting a One-Size-Fits-All Standard for Unmasking Anonymous Internet Speakers in Defamation Lawsuits, 75 U. Cin. L. Rev. 1217, 1228 (2007) (referring to the good faith standard as "extremely deferential to plaintiffs' allegations").
  32. ^ 47 U.S.C. § 551.
  33. ^ See Cahill, 884 A.2d at 455, n.4; but see In re United States, 157 F. Supp. 2d 286, 290-92 (pdf) Archived 2016-01-27 at the Wayback Machine (S.D.N.Y. 2001) (holding that ECPA, and not the Cable Act, applied to government access of internet subscriber records).
  34. ^ a b 18 U.S.C. § 2703(d).
  35. ^ See O'Grady v. Super. Ct., 139 Cal. App. 4th 1423 (pdf)[dead link] (2006) (holding that ECPA prohibited disclosure of emails in connection with a subpoena); Fed. Trade Comm'n v. Netscape Commc'ns Corp., 196 F.R.D. 559 (N.D. Cal. 2000) (denying FTC's motion to compel disclosure of customer information because of ECPA); 18 U.S.C. § 2703 (only government entities can force disclosure). But see Flagg v. City of Detroit, 252 F.R.D. 346 (pdf) Archived February 22, 2012, at the Wayback Machine (E.D. Mich. 2008) (finding that a subpoena can be used to force a party to consent to disclosure).
[edit]