H.B. 104 Spyware Control Act Revisions

Floor Sponsor:

Sen. Bramble, Curtis S.
  • Drafting Attorney: Christopher R. Parker



  • Related Documents

    • Information
      • Last Action: 17 Mar 2005, Governor Signed
      • Last Location: Lieutenant Governor's office for filing
      • Effective Date: 2 May 2005
      • Session Law Chapter: 168


    H.B. 104


    Download Zipped Enrolled WordPerfect HB0104.ZIP
    [Introduced][Status][Bill Documents][Fiscal Note] [Bills Directory]

    H.B. 104 Enrolled

                     

    SPYWARE CONTROL ACT REVISIONS

                     
    2005 GENERAL SESSION

                     
    STATE OF UTAH

                     
    Chief Sponsor: Stephen H. Urquhart

                     
    Senate Sponsor: Curtis S. Bramble

                     
                      LONG TITLE
                      General Description:
                          This bill amends the Spyware Control Act.
                      Highlighted Provisions:
                          This bill:
                          .    defines terms;
                          .    prohibits certain uses of pop-up advertisements;
                          .    prohibits the purchase of pop-up advertisements that violate the chapter if the
                      purchaser has actual notice of the violation;
                          .    provides for the permissive removal of certain software; and
                          .    defines the scope of actions and penalties authorized by the chapter.
                      Monies Appropriated in this Bill:
                          None
                      Other Special Clauses:
                          None
                      Utah Code Sections Affected:
                      AMENDS:
                          13-40-102, as enacted by Chapter 363, Laws of Utah 2004
                          13-40-201, as enacted by Chapter 363, Laws of Utah 2004
                          13-40-301, as enacted by Chapter 363, Laws of Utah 2004
                          13-40-302, as enacted by Chapter 363, Laws of Utah 2004
                      ENACTS:
                          13-40-202, Utah Code Annotated 1953


                     
                      Be it enacted by the Legislature of the state of Utah:
                          Section 1. Section 13-40-102 is amended to read:
                           13-40-102. Definitions.
                          As used in this chapter:
                          [(1) "Context based triggering mechanism" means a software based trigger or program
                      residing on a consumer's computer that displays an advertisement according to:]
                          [(a) the current Internet website accessed by a user; or]
                          [(b) the contents or characteristics of the current Internet website accessed by a user.]
                          (1) "Cookie" means a text file:
                          (a) that is placed on a computer by:
                          (i) an interactive computer service;
                          (ii) an Internet website; or
                          (iii) a third party acting on behalf of:
                          (A) an interactive computer service; or
                          (B) an Internet website; and
                          (b) the function of which is to record information that can be read or recognized when
                      the user of the computer later accesses a particular:
                          (i) Internet website;
                          (ii) online location; or
                          (iii) online service.
                          (2) "Division" means the Division of Consumer Protection in the Department of
                      Commerce.
                          (3) "Interactive computer service" means any information service, system, or access
                      software provider that provides or enables computer access by multiple users to a computer
                      server, including:
                          (a) an Internet or online service provider; or
                          (b) a service or system providing access to the Internet, including a system operated by a


                      library or educational institution.
                          [(3)] (4) "Internet" is as defined in the Internet Tax Freedom Act, Pub. L. No. 105-277.
                          [(4) Except as provided in Subsection (5), "spyware" means software residing on a
                      computer that:]
                          [(a) monitors the computer's usage;]
                          [(b) (i) sends information about the computer's usage to a remote computer or server; or]
                          [(ii) displays or causes to be displayed an advertisement in response to the computer's
                      usage if the advertisement:]
                          [(A) does not clearly identify the full legal name of the entity responsible for delivering
                      the advertisement;]
                          [(B) uses a federally registered trademark as a trigger for the display of the advertisement
                      by a person other than:]
                          [(I) the trademark owner;]
                          [(II) an authorized agent or licensee of the trademark owner; or]
                          [(III) a recognized Internet search engine;]
                          [(C) uses a triggering mechanism to display the advertisement according to the Internet
                      websites accessed by a user; or]
                          [(D) uses a context based triggering mechanism to display the advertisement that
                      partially or wholly covers or obscures paid advertising or other content on an Internet website in
                      a way that interferes with a user's ability to view the Internet website; and]
                          [(c) does not:]
                          [(i) obtain the consent of the user, at the time of, or after installation of the software but
                      before the software does any of the actions described in Subsection (4)(b):]
                          [(A) to a license agreement:]
                          [(I) presented in full; and]
                          [(II) written in plain language;]
                          [(B) to a notice of the collection of each specific type of information to be transmitted as
                      a result of the software installation;]


                          [(C) to a clear and representative full-size example of each type of advertisement that
                      may be delivered;]
                          [(D) to a truthful statement of the frequency with which each type of advertisement may
                      be delivered; and]
                          [(E) for each type of advertisement delivered by the software, a clear description of a
                      method by which a user may distinguish the advertisement by its appearance from an
                      advertisement generated by other software services; and]
                          [(ii) provide a method:]
                          [(A) by which a user may quickly and easily disable and remove the software from the
                      user's computer;]
                          [(B) that does not have other effects on the non-affiliated parts of the user's computer;
                      and]
                          [(C) that uses obvious, standard, usual, and ordinary methods for removal of computer
                      software.]
                          [(5) Notwithstanding Subsection (4), "spyware" does not include:]
                          [(a) software designed and installed solely to diagnose or resolve technical difficulties;]
                          [(b) software or data that solely report to an Internet website information previously
                      stored by the Internet website on the user's computer, including:]
                          [(i) cookies;]
                          [(ii) HTML code; or]
                          [(iii) Java Scripts; or]
                          [(c) an operating system.]
                          [(6) "Usage" means:]
                          [(a) the Internet websites accessed by a user;]
                          [(b) the contents or characteristics of the Internet websites accessed by a user;]
                          [(c) a user's personal information, including:]
                          [(i) a first and last name of a user, whether:]
                          [(A) given at birth or adoption;]


                          [(B) assumed; or]
                          [(C) legally changed;]
                          [(ii) any of the following with respect to a user's home or other physical address:]
                          [(A) the street name;]
                          [(B) the name of the city or town; or]
                          [(C) the zip code;]
                          [(iii) an electronic mail address;]
                          [(iv) a telephone number;]
                          [(v) a Social Security number;]
                          [(vi) any personal identification number;]
                          [(vii) a credit card number;]
                          [(viii) any access code associated with a credit card;]
                          [(ix) a date of birth, birth certificate number, or place of birth; or]
                          [(x) a password or access code; or]
                          [(d) a user's submission to forms or Internet websites.]
                          (5) "Internet or online service provider" means an interactive computer service that
                      provides software or other material that enables a person to:
                          (a) transmit, receive, display, forward, cache, search, subset, organize, reorganize, or
                      translate content;
                          (b) select or analyze content; or
                          (c) allow or disallow content.
                          (6) "Mark" means a registered trademark, registered service mark, or registered domain
                      name in an Internet website address that is owned, licensed, or lawfully used by a person doing
                      business in this state.
                          (7) (a) Except as provided in Subsection (7)(b), "spyware" means software on the
                      computer of a user who resides in this state that:
                          (i) collects information about an Internet website at the time the Internet website is being
                      viewed in this state, unless the Internet website is the Internet website of the person who provides


                      the software; and
                          (ii) uses the information described in Subsection (7)(a)(i) contemporaneously to display
                      pop-up advertising on the computer.
                          (b) "Spyware" does not include:
                          (i) an Internet website;
                          (ii) a service operated by an Internet or online service provider accessed by a user;
                          (iii) software designed and installed primarily to:
                          (A) prevent, diagnose, or resolve technical difficulties;
                          (B) detect or prevent fraudulent activities; or
                          (C) protect the security of the user's computer from unauthorized access or alteration;
                          (iv) software or data that reports information to an Internet website previously stored by
                      the Internet website on the user's computer, including cookies;
                          (v) software that provides the user with the capability to search the Internet; or
                          (vi) software installed with the consent of a user whose primary purpose is to prevent
                      access to certain Internet content.
                          (8) "Pop-up advertising" means material:
                          (a) offering for sale or advertising the availability or quality of a commercial property,
                      good, or service; and
                          (b) that is displayed:
                          (i) separate from an Internet website;
                          (ii) as a result of a user accessing an Internet website;
                          (iii) in a manner that covers paid advertising or other content on an Internet website in a
                      way that interferes with the user's ability to view the advertising or other content that the user
                      attempted to originally access; and
                          (iv) without the authority of the operator of the Internet website.
                          [(7)] (9) "User" means[:] the owner or authorized user of a computer.
                          [(a) a computer owner; or]
                          [(b) a person who accesses an Internet website.]


                          Section 2. Section 13-40-201 is amended to read:
                           13-40-201. Prohibited conduct.
                          (1) A person may not[:] display a pop-up advertisement by means of spyware if the
                      pop-up advertisement:
                          [(a) install spyware on another person's computer;]
                          [(b) cause spyware to be installed on another person's computer; or]
                          [(c) use a context based triggering mechanism to display an advertisement that partially
                      or wholly covers or obscures paid advertising or other content on an Internet website in a way
                      that interferes with a user's ability to view the Internet website.]
                          [(2) It is not a defense to a violation of this section that a user may remove or hide an
                      advertisement.]
                          (a) (i) is displayed in response to a specific mark; or
                          (ii) is displayed in response to a specific Internet website address;
                          (b) constitutes infringement of a registered trademark under federal or state law; and
                          (c) is purchased or acquired by a person other than:
                          (i) the mark owner;
                          (ii) a licensee of the mark;
                          (iii) an authorized agent of the owner of the mark;
                          (iv) an authorized user of the mark;
                          (v) a person advertising the lawful sale, lease, or transfer of products bearing the mark
                      through a secondary marketplace for the sale of goods or services; or
                          (vi) a person engaged in a fair or otherwise permissible use of a trademark or service
                      mark under applicable trademark law.
                          (2) (a) A person using spyware to display a pop-up advertisement under Subsection (1) is
                      not guilty of violating this chapter if:
                          (i) the person requests information about the user's state of residence before sending the
                      spyware or displaying a pop-up advertisement to the user after May 2, 2005; and
                          (ii) the user indicates a residence outside this state.


                          (b) A person purchasing or acquiring advertising under Subsection 13-40-301 (5) is not
                      guilty of violating this chapter if the person reasonably determines that the person delivering a
                      pop-up advertisement by use of spyware under Subsection (1) has complied with Subsection
                      (2)(a).
                          (c) A person requesting information about a user's state of residence under Subsection
                      (2)(a) may not prompt, ask, or otherwise encourage a user to indicate a residence outside this
                      state.
                          (d) No action may be brought under this chapter, for the use of a mark or Internet website
                      address that constitutes a fair or otherwise permissible use of the mark or Internet website
                      address under federal or state law.
                          Section 3. Section 13-40-202 is enacted to read:
                          13-40-202. Permissive removal of potentially harmful software.
                          If a provider of computer software or an interactive computer service provides prior
                      notice to a user with whom the provider has an established business relationship, that provider is
                      not liable under the law of this state, or a political subdivision of this state, for identifying,
                      removing, or disabling, preventing installation of a program on the user's computer that is used
                      to, or that the provider reasonably or in good faith believes will likely be used to:
                          (1) violate a provision of this chapter; or
                          (2) to engage in surreptitious collection of information concerning the user's use of the
                      computer without the consent of the owner of the computer, except that no notice is required for:
                          (a) preventing the installation of a program; or
                          (b) in the case of an enterprise network, removing, disabling, or preventing the
                      installation of a program on the computer of an employee.
                          Section 4. Section 13-40-301 is amended to read:
                           13-40-301. Private action.
                          (1) An action for a violation of this chapter may be brought[: (a)] against a person who[:]
                      violates Section 13-40-201 by:
                          [(i) violates this chapter; or]


                          [(ii) causes a violation of this chapter; and]
                          [(b) by any of the following who are adversely affected by a violation of this chapter:]
                          [(i) an Internet website owner or registrant;]
                          [(ii) a trademark or copyright owner; or]
                          [(iii) an authorized advertiser on an Internet website.]
                          (a) the attorney general; or
                          (b) a mark owner who:
                          (i) does business in this state; and
                          (ii) is directly and adversely affected by a violation of this chapter.
                          (2) In an action under Subsection (1), a person may:
                          (a) obtain an injunction against committing any further violation of this chapter; and
                          (b) subject to Subsection (3), recover the greater of:
                          (i) actual damages; or
                          (ii) [$10,000] up to $500 for each separate [violation of this chapter] occurrence resulting
                      in the display of an advertisement prohibited by Section 13-40-201 .
                          (3) In an action under Subsection (1), a court may:
                          (a) increase the damages up to three times the damages allowed by Subsection (2)(b) if
                      the court finds that the defendant willfully or knowingly violated this chapter; and
                          (b) award costs and reasonable attorney fees to a prevailing party.
                          (4) For purposes of this section, a separate violation occurs for each individual
                      occurrence that results in the display of an advertisement described in Subsection
                      13-40-102 [(4)(b)(ii)](8).
                          (5) Except as provided in Subsection 13-40-201 (2)(b), an action for a violation of this
                      chapter may be brought against a person who purchases or acquires advertising described in
                      Subsection 13-40-201 (1) if:
                          (a) the person against whom the action is brought receives actual notice from a mark
                      owner of an alleged violation of Section 13-40-201 ;
                          (b) the notice required under Subsection (5)(a) contains a detailed explanation of the


                      alleged violation; and
                          (c) the person against whom the action is brought fails to take reasonable steps to stop
                      the violation of Subsection 13-40-201 (1) described in the notice provided under Subsection
                      (5)(a).
                          (6) (a) At the time of commencement of an action for a violation of Subsection
                      13-40-201 (1), the person filing the action shall serve a copy of any summons and complaint upon
                      any person against whom an action is brought under Subsection (5).
                          (b) A person against whom an action may be brought under Subsection (5) may intervene
                      in an action for a violation of Subsection 13-40-201 (1) in accordance with Rule 24(c) of the Utah
                      Rules of Civil Procedure or Rule 24(c) of the Federal Rules of Civil Procedure.
                          Section 5. Section 13-40-302 is amended to read:
                           13-40-302. Limitations on actions.
                          (1) A person may not bring an action for a violation of this chapter against [an Internet
                      service provider for the routine transmission of] a person other than:
                          [(a) security information; or]
                          [(b) information that contains an advertisement violating this chapter.]
                          (a) a person who displays a pop-up advertisement by means of spyware in violation of
                      Subsection 13-40-301 (5); or
                          (b) a person who purchases or acquires an advertisement in violation of Subsection
                      13-40-201 (2).
                          (2) A person may not bring a class action under this chapter.
                          (3) This chapter does not preclude any person accused of violating this chapter from
                      asserting any fair use or other defense that is available to persons alleged to have engaged in
                      trademark infringement.


    [Bill Documents][Bills Directory]

    Bill Status / Votes
    • Senate Actions • House Actions • Fiscal Actions • Other Actions
    DateActionLocationVote
    1/28/2005 Bill Numbered but not Distributed Legislative Research and General Counsel
    1/28/2005 Numbered Bill Publicly Distributed Legislative Research and General Counsel
    1/30/2005 House/ received bill from Legislative Research House Docket Clerk
    1/31/2005 House/ 1st reading (Introduced) House Rules Committee
    2/3/2005 House/ to standing committee House Public Utilities, Energy, and Technology Committee
    2/4/2005 House/ received bill from Legislative Printing House Public Utilities, Energy, and Technology Committee
    2/7/2005 House Comm - Favorable Recommendation House Public Utilities, Energy, and Technology Committee10 0 2
    2/8/2005 House/ committee report favorable House Public Utilities, Energy, and Technology Committee
    2/8/2005 House/ 2nd reading House 3rd Reading Calendar for House bills
    2/17/2005 House/ 3rd reading House 3rd Reading Calendar for House bills
    2/17/2005 House/ passed 3rd reading Senate Secretary71 0 4
    2/17/2005 House/ to Senate Senate Secretary
    2/17/2005 Senate/ received from House Waiting for Introduction in the Senate
    2/17/2005 Senate/ 1st reading (Introduced) Senate Rules Committee
    2/18/2005 Senate/ to standing committee Senate Business and Labor Committee
    2/24/2005 Senate Comm - Returned to Rules Senate Business and Labor Committee
    2/24/2005 Senate/ comm rpt/ sent to Rules Senate Rules Committee
    2/28/2005 Senate/ Rules to calendar Senate 2nd Reading Calendar
    3/2/2005 Senate/ 2nd & 3rd readings/ suspension Senate 2nd Reading Calendar
    3/2/2005 Senate/ circled Senate 2nd Reading Calendar
    3/2/2005 Senate/ uncircled Senate 2nd Reading Calendar
    3/2/2005 Senate/ substituted Senate 2nd Reading Calendar
    3/2/2005 Senate/ circled Senate 2nd Reading Calendar
    3/2/2005 Senate/ uncircled Senate 2nd Reading Calendar
    3/2/2005 Senate/ passed 2nd & 3rd readings/ suspension Clerk of the House24 2 3
    3/2/2005 Senate/ to House Clerk of the House
    3/2/2005 House/ received from Senate Clerk of the House
    3/2/2005 House/ concurs with Senate amendment Senate President66 1 8
    3/2/2005 House/ to Senate Senate President
    3/2/2005 Senate/ signed by President/ returned to House House Speaker
    3/2/2005 House/ signed by Speaker/ sent for enrolling Legislative Research and General Counsel / Enrolling
    3/7/2005 Bill Received from House for Enrolling Legislative Research and General Counsel / Enrolling
    3/9/2005 Draft of Enrolled Bill Prepared Legislative Research and General Counsel / Enrolling
    3/10/2005 Enrolled Bill Returned to House or Senate Clerk of the House
    3/10/2005 House/ enrolled bill to Printing Clerk of the House
    3/11/2005 House/ to Governor Executive Branch - Governor
    3/17/2005 Governor Signed Lieutenant Governor's office for filing