Enforcing Rights Online: Copyright Infringement & “Norwich Orders”
.
By Richard Stobbe
When a copyright owner seeks to enforce against online copyright infringement, it often faces a problem: who is engaging in the infringing activity?  If the old adage holds true – on the internet, nobody knows you’re a dog – then the corollary is that there must be a lot of canines engaged in online copyright infringement.
Of course a copyright owner can only enforce its rights against online infringement if it knows the identity of the infringer.  The Canadian solution, which is enshrined in the Copyright Act,  is the so-called “notice-and-notice” regime, which allows a copyright holder to send a notice to the ISP (internet service provider), and the ISP is obliged by the Copyright Act to send that notice to the alleged infringer, who still remains anonymous.  The notice of infringement is passed along… but the infringing content remains online.  Since the “notice-and-notice” regime is not much of an enforcement tool, the path eventually leads copyright holders to seek a court order (called a Norwich order) to disclose the identity of those alleged infringers.  (See our previous articles about Norwich Orders for background.)
In Rogers Communications Inc. v. Voltage Pictures, LLC, 2018 SCC 38, a film production company (Voltage) alleged copyright infringement by certain anonymous internet users. Allegedly, films were being shared using peer-to-peer file sharing networks. Yes, apparently peer-to-peer file sharing networks are still a thing. Voltage sued one anonymous alleged infringer and brought a motion for a Norwich order to compel the ISP (Rogers) to disclose the identity of the infringer.
Now we get to a practical problem: who pays for the disclosure of these records?
Pointing to sections 41.25 and 41.26 of the Copyright Act, Voltage argued that the disclosure order be made without anything payable to Rogers. In essence, Voltage argued that the “notice and notice†regime does two things: it creates a statutory obligation to forward the notice of claimed infringement to the anonymous infringer. The Act also prohibit ISPs from charging a fee for complying with these “notice-and-notice” obligations. In response, Rogers argued that there is a distinction between sending the notice to the anonymous infringer (for which it cannot charge a fee) and disclosing the identity of that (alleged) infringer pursuant to a Norwich order. The Act does not specify that ISPs are prohibited from charging a fee for this step.
The Supreme Court of Canada (SCC) agreed that there is a distinction to be made: on the one hand, an ISP has obligations under the Copyright Act to ensure the accuracy of its records for the purposes of the notice and notice regime, and on the other hand, an ISP may be obliged, under a Norwich order to actually identify a person from its records. In a nutshell, the court reasoned that ISPs must retain records under the Act, in a form and manner that permits an ISP to identify the name and address of the person to whom notice is forwarded for the “notice-and-notice” purposes. But the Act does not require that these records be kept in a form and manner which would permit a copyright owner or a court to identify that person.  The copyright owner would only be entitled to receive that kind of information from an ISP under the terms of a Norwich order. The Norwich order is a process that falls outside the ISP’s obligations under the notice and notice regime. In the end, an ISP can recover its costs of compliance with a Norwich order, but ISPs cannot be compensated for every cost that it incurs in complying with such an order:
“Recoverable costs must be reasonable and must arise from compliance with the Norwich order. Where costs should have been borne by an ISP in performing its statutory obligations under the notice and notice regime, these costs cannot be characterized as either reasonable or as arising from compliance with a Norwich order, and cannot be recovered.”
According to Rogers, there are eight steps in its process to disclose the identity of one of its subscribers in response to a Norwich order.  The SCC made reference to this eight-step process, but wasn’t in a position to decide which of these steps overlap with Rogers’ obligations under the Act (for which Rogers was not entitled to reimbursement) and the steps which are “reasonable costs of compliance” (for which Rogers was entitled to reimbursement). The question was returned to the lower court for determination.
For copyright owners, its clear that ISPs will not shoulder the entire cost of disclosing the identity of subscribers at the Norwich stage. How much of that cost will have to borne by copyright holders is, unfortunately, still not very clear.  For ISPs, this decision is a mixed bag – Rogers makes a solid argument that the costs of compliance with Norwich orders are relatively high, compared with the automated notice-and-notice procedures. While it will benefit ISPs to be able to charge some of these fees to the copyright owner, we don’t have clear guidance on the specifics.  The matter will have to be determined on a case-by-case basis, depending on the ISP and their own internal procedures.
Looking for advice on Norwich orders and enforcement against online copyright infringement? Look for experienced counsel to guide you through this process.
Calgary – 7:00 MST
No comments