Showing posts with label Cyberlaws. Show all posts
Showing posts with label Cyberlaws. Show all posts

Saturday, November 8, 2008

Malaysian Copyright Protection of Online Materials

I. Introduction

We have been living in the digital information age -- the age of the Internet, for some time now. For most people, the World Wide Web or simply the Web, is a norm in their daily lives at work, in business and in personal communications.

Most businesses or companies today already own a “Web presence" i.e. they have developed and published a Web site about their business or company. Such Web sites are regularly maintained or updated with the latest information, for e.g. a public listed company may publish their latest audited or unaudited financial results on their Web site such as Petroliam Nasional Bhd (PETRONAS).

As time passes, we tend to take all these online materials or information for granted. Well, it is there posted up for the public, for the world to see and read. So, what is wrong with copying the information wholesale or portions of it as it is?

All the online materials we see, read or come across are created with copyright laws in mind. Can any person just “copy and paste” from materials published online (or from printed media) belonging to other people without authorisation or the owners’ consent or even a citation or acknowledgement?

As an example, for a business or company or an individual who wishes to develop, publish and maintain a Web site, two major copyright issues exist:

  • To protect all the contents, materials (e.g. audio and video tracks, images and pictures) and links of its Web site from copyright infringement; and

  • To ensure that all or any of the contents, materials and links used or reference to in its Web pages are not infringing on another owner’s copyright

Copyright law is a branch of intellectual property law along with trademarks, patents and industrial designs. I will discuss the protection and rights provided for by copyright laws in general, with references to Malaysia’s copyright law -- the Copyright Act 1987 and the Copyright (Amendment) Act 1997, amendments made to update the Act in relation to online content and materials.

II. Copyright Laws and Copyright Protection

1.0 What is copyright protection?

Copyright laws provide protection to authors of “original works” against unauthorised use, duplication, reproduction, alteration, transmission, distribution and passing off as another’s original work.

If copyright is infringed, the copyright law provides for legal remedies and restitution against the copyright infringer or offender.

2.0 What can be copyright protected?

“Original works” in material form of qualified authors are copyright protected. This means that in order for a work to enjoy copyright protection, it needs to meet certain eligibility criteria:

  1. It is an original work -- The nature of originality in copyright laws does not mean that the work must be an expression of original ideas, but rather the expression of thought not copied from another source

  2. The work must be written down, recorded or otherwise reduced to material form

  3. The author is a qualified person -- Since laws involve jurisdictions, a “qualified person” can be generally defined as a person recognized by the copyright law jurisdiction. For e.g., in Malaysia’s copyright laws, a qualified person is defined as:
“(a) In relation to an individual, means a person who is a citizen of, or a permanent resident in, Malaysia; and

(b) In relation to a body corporate, means a body corporate established in Malaysia and constituted or vested with legal personality under the laws of Malaysia.”

[Source: Malaysia Copyright Act 1987, Section 3: Interpretation.]

Original works recognized by copyright laws for copyright protection includes:

  • Literary works

  • Musical works

  • Artistic works

  • Films

  • Sound recordings

  • Broadcasts

  • Published editions

  • Derivative works e.g. typographical translation, adaptation or arrangement of works eligible for copyright

  • Collection of works eligible for copyright, but must be selected and arranged in such a way that the resulting work becomes an original intellectual creation
3.0 Copyright protection for online materials

There is no real difference between traditional copyright and electronic copyright. The distinction lies in the way the electronic or online material has to be decoded or read and used by the user.

Works that are published or transmitted in electronic format or medium e.g. CD-ROMs, Web pages of Web sites or portals, online databases, computer programs or software, etc are copyright protected as their printed or traditional medium equivalents.

Online materials can generally be categorized into three major groups:

3.1 Electronic information

Electronic information is information that has been converted into electronic form for the purposes of transmission, decoding and manipulation, storage, publishing and displaying on or from digital media or in cyberspace, mainly via Web browsers and computer programs in tangible and specific form or function.

Therefore, the contents and multimedia materials we see and read on all Web pages, Web sites or portals are copyrightable materials. Reports, charts, graphs, and other data attached to electronic mails and easily sent across cyberspace from one party to another may be copyright materials, and copyright may be violated.

The computer industry’s most famous copyright infringement case is the Napster case of downloading and sharing copyright music files in digital form.

In RIAA v. Napster, Inc., it was held that Napster did not copy or distribute the digital music files, but the users who were allegedly committing the direct infringement by downloading, copying and sharing the digital music files. [Ryan, 2002, p. 495]

However, Napster was found guilty of both contributory and vicarious infringement. The plaintiffs claimed that Napster’s facilitation of the identifying and downloading of the files constituted contributory infringement.

The plaintiffs also claimed that Napster had the ability to control the activity by allowing or filtering out the files, and had also gained financially from advertising revenue based upon the number of “hits” or “visits”, which constituted vicarious infringement.

3.2 Computer programs and computer software

Copyright treats computer programs or software as a literary work. Actually a software product can be distinguished from the computer program since a software product may be made up of different copyright works.

For e.g., a software product usually consists of:

  • A designed packaging box

  • A printed user guide or manual

  • Diagrams, graphs, charts, artwork, screen displays, images in the user guide or manual

  • Sounds and sound recordings

  • Video and animation; and

  • The encrypted or compiled computer codes that makes up the computer program, stored in a CD-ROM or floppy disk

The creator of the computer program i.e. the programmer is recognized as the owner of the work unless the programmer is an employee and created the program as part of the job responsibility, in which case the copyright of the program automatically belongs to the employer, or the programmer has assigned the copyright to another party.

Copyright protection is extended to the computer codes written in a computer language as a literary work. Hence, copying in part or in whole is not permitted without the copyright owner’s consent. If another programmer is able to reverse engineer the computer codes of a computer program to study or examine the method of operation of the concept, and later independently write new computer codes to perform similar operations, then there is no copyright infringement.

This has led to several countries e.g. the United States and Japan, extending patent protection in addition to copyright protection for computer programs. Patent protection additionally provides the owner an exclusive right to make, use and sell the invention for a statutory period of time.

In Diamond v. Diehr, 450 U.S. 175, 185 (1981), the United States Supreme Court granted patent protection to the computer program that contained a mathematical algorithm as a step in process. It was held that the computer program was patentable because it was not merely a procedure for solving a mathematical formula. [Ferrera, 2004, p. 115]

3.3 Databases

A database is a collection of independent works, data or other materials that are arranged in a systematic or methodical way and individually accessible by electronic, digital or other means to provide meaningful or valuable information. For e.g. telephone and street directories, customer mailing lists, photographs, customer credit card information, bill of materials, inventory data.

Advances in information and communication technologies have increased the use and value of databases enormously and highlighted the need for high security and the importance of protecting databases from unauthorized access, usage, copying and manipulation or modification.

Copyright exist in databases as literary works by virtue of the selection and arrangement in the compilation of the data.

4.0 Exclusive rights of copyright owners

Copyright owners have the following exclusive rights over their copyrighted works. These exclusive rights enable the copyright owners to exercise legal authority to control the use of their copyrighted works by others.

4.1 Reproduction right

Is the right to copy, duplicate, transcribe or imitate the copyrighted work in fixed form. In MAI Systems Corp. v. Peak Computer, Inc., 1991 F.2d. 511 (9th Cir. 1993), it was held that computer software downloaded into a computer’s RAM memory by the defendant to be used to diagnose computer problems was sufficiently permanent and fixed to have infringed on copyright. [Ferrera, 2004, p. 91]

Unauthorised scanning of any copyrighted work into a digital file and then using it on a Web site constitutes copyright infringement.

Two other technology issues exist which relates to reproduction i.e. framing and caching. Framing, which allows a Web site visitor “to view the framed site while the site owner’s proprietary material is displayed next to linked third party material in the same window” may constitute copyright infringement.

Caching is the technology used to copy a part of or all of the contents of a Web page for indefinite storage to facilitate quick access to the Web page in future. This is known as “proxy caching”, and tantamount to copyright infringement because the copyright owner’s right to reproduce is exercised. Hence, the copyright owner’s consent is required.

4.2 Modification right or derivative works right

Is the right to modify copyrighted work to create new work. Most Web site designers or developers tend to study other Web site designs to evaluate and select the best or latest features to incorporate into their Web site. In so doing, the Web site designers may easily infringe copyright by producing a derivative work.

In Lewis Galoob Toys, Inc. v. Nintendo, Inc., 964 F.2d. 965 (9th Cir. 1962), it was held that the “Game Genie” device that altered Nintendo’s videogame cartridges by enhancing the audiovisual displays without incorporating the original work in any permanent form did not create a derivative work. [Ferrera, 2004, p. 93]

4.3 Distribution right

Is the right to distribute i.e. sell, rent or lease copies of the copyrighted work. For e.g. the unauthorized printing or photocopying of textbooks for sale to students at a lower price or given free to students is an act of copyright infringement because the distribution right of the copyright owner is exercised.

In Marobie-Fl. Inc. v. National Association of Fire Equipment Distributors, 983 F. Supp. 1167 (N.D. Ill.), the court held that it was an infringement of copyright because unauthorized copies of the plaintiff’s electronic clipart files were placed on the defendant’s Web site for downloading by any Internet user. [Ferrera, 2004, p. 92]

Another aspect of the distribution right related to online materials is the practice of linking to other Web sites. Generally, the linking to the home page of another’s Web site by way of the Universal Resource Locator (URL) address is not an act of unauthorized distribution or copying within copyright laws. However, it is in the best interests of all parties involved to verify the Terms of Use found in other Web sites that may contain a clause prohibiting linking without expressed consent.

4.4 Public performance and public display rights

Public performance (e.g. recite, play, act, dance) and public display (e.g. show, exhibit, transmit directly or by way of film, slides, photography, television, projection, electronic medium, etc) is defined by copyright law as the performance and/or display of copyrighted work in a place open to or accessible to the public or semi-public, for e.g. a shopping mall, a museum, an art gallery, the lobby of an office building.

The Internet or cyberspace is a public place as any person in the world with Internet access can visit cyberspace.

In Columbia Pictures, Ind. v. Aveco, Inc., 800 F.2d. 59 (3rd Cir. 1986), the court held that the copyright owner’s public performance and public display rights were violated when the defendant improperly authorized the public performance of movies by renting videotapes and allowed customers to see the tapes in viewing rooms opened to the public. [Ferrera, 2004, p. 94]

The court also arrived at a similar decision of copyright infringement in Michaels v. Internet Entertainment Group, Inc., 5 F. Supp. 2d. 823 (C.D. Cal. 1998) where “making videotape footage available over the Internet without authorization and posting unauthorized copies of electronic clip art on Web pages violate the copyright owner’s exclusive statutory right of public display”. [Ferrera, 2004, p. 94]

5.0 Copyright infringement and legal remedies

As explained in the previous section, if one or more exclusive rights of the copyright owner is exercised by another without the consent of the copyright owner, it is an infringement of copyright.

The Malaysia Copyright Act 1987 defines copyright infringement as:

“(1) Copyright is infringed by any person who does, or causes any other person to do, without the licence of the owner of the copyright, an act the doing of which is controlled by copyright under this Act.

(2) Copyright is infringed by any person who, without the consent or licence of the owner of the copyright, imports an article into Malaysia for the purpose of --

(a) selling, letting for hire, or by way of trade, offering or exposing for sale or hire, the article;

(b) distributing the article --

(i) for the purpose of trade; or

(ii) for any other purpose to an extent that it will affect prejudicially the owner of the copyright; or

(c) by way of trade, exhibiting the article in public,

where he knows or ought reasonably to know that the making of the article was carried out without the consent or licence of the owner of the copyright.

(3) Copyright is infringed by any person who circumvents or causes any other person to circumvent any effective technological measures that are used by authors in connection with the exercise of their rights under this Act and that restrict acts, in respect of their works, which are not authorized by the authors concerned or permitted by law.

(4) Copyright is infringed by any person who knowingly performs any of the following acts knowing or having reasonable grounds to know that it will induce, enable, facilitate or conceal an infringement of any right under this Act:

(a) the removal or alteration of any electronic rights management information without authority;

(b) the distribution, importation for distribution or communication to the public, without authority, of works or copies of works knowing that electronic rights management information has been removed or altered without authority.

(5) For the purpose of subsection (4) and section 41, "rights management information" means information which identifies the works, the author of the work, the owner of any right in the work, or information about the terms and conditions of use of the work, any numbers or codes that represent such information, when any of these items of information is attached to a copy of a work or appears in connection with the communication of a work to the public.”

[Source: Malaysia Copyright Act 1987, Section 36: Infringements.]

Furthermore, in copyright infringement, “either the whole or a substantial part of the copyrighted work must be copied for the copying to amount to infringement”.

The originality of the part or parts taken must be proven in order to establish that a substantial part or parts had been copied. In Spectravest, Inc. v. Aperknit Ltd. (1998) FSR 161, it was held that “to determine liability, one should identify the part taken and separate from the defendant’s work and find out that originality of the part taken. It should also be shown that the defendant’s object in taking and using the part concerned is the same as that of the plaintiff’s, and the part taken is used by the defendant in a way which interferes with the sales of the original or competes with it”. [Colston, 1999, p.227]

For online materials, copyright infringement may involve the Internet Service Provider (ISP) if the ISP had facilitated the infringement. An ISP may be held liable for direct, vicarious or contributory infringement.

If an ISP had exercised the reproduction rights of the copyright owner without consent, the ISP may be guilty of direct infringement. If an ISP had financially gained from the infringement by another party and had the right to control and supervise the infringement, the ISP may be guilty of vicarious infringement.

Finally, if an ISP is found to have knowledge of the infringing activity and intentionally participated in it, the ISP may be guilty of contributory infringement.

Legal remedy or relief against copyright infringement generally takes the form of fines or penalties and/or imprisonment upon conviction.

Section 41 of the Malaysia Copyright Act 1987 provides for fines ranging from Ringgit ten thousand to five hundred thousand, and/or imprisonment ranging from three to twenty years.




III. International Copyright Treaties

The relationship and effects between cyberspace and legal jurisdiction is not a straightforward subject. A Web site hosted in Kuala Lumpur, Malaysia can be accessed or visited by any person in the world who has Internet access. Then, do courts in other countries have jurisdiction over copyright matters of the Web site of the Malaysian company? What happens when country A’s copyright laws differ from country B’s, or country A has inadequate copyright laws?

In order to achieve and provide an international minimum accepted copyright protection and recognition, and for the advancement of uniform copyright laws, several international treaties dealing with copyright exists:

  • Berne Convention for the Protection of Literary and Artistic Works

  • General Agreement on Tariffs and Trade (GATT), which includes the agreement on Trade Related Aspects of Intellectual Property Rights (TRIPS)

  • Universal Copyright Convention

  • International Convention for the Protection of Performers, Producers of Phonograms and Broadcasting Organisations (Rome Convention)

  • Convention for the Protection of Producers of Phonograms Against Unauthorized Duplication of their Phonograms (Geneva Convention)

  • World Intellectual Property Organisation (WIPO) Copyright Treaty

  • WIPO Performances and Phonograms Treaty

[Source: www.WIPO.int/copyright, www.WTO.org, www.UNESCO.org]

Many countries, including Malaysia, are members to the above treaties, but not all countries have signed or ratified all the terms of the treaties for implementation in the respective countries’ copyright laws.

However, by being a member of international copyright treaties, a country must legislate to achieve a minimum standard of copyright protection. In most cases, a country must also give copyright protection to materials from other member countries.

IV. Conclusion

Copyright law has not been made ineffective with the evolution of technology. Although the pace of digital technologies; related convergence of text, audio, video, images and animation; and “push” in terms of their application gaining influence in cyberspace is taking place at an unprecedented speed, past notions about copyright have been modified and will continue to be modified to encompass the cyberspace and new technologies.

In addition to major legislative changes and international cooperation to provide protection for online materials, novel business models, new protection technologies and even education in copyright laws may help make legislation more effective.


References:

Baumer, David & Poindexter, J. C. (2002). Cyberlaw and E-Commerce. New York, NY: McGraw-Hill

Colston, Catherine. (1999). Principles of Intellectual Property Law. London: Cavendish Publishing Ltd

Ferrera, Gerald R., Lichtenstein, Stephen D., Reder, Margo E.K., Bird, Robert C. & Schiano, William T. (2004). Cyberlaw: Text and Cases. Mason, Ohio: Thomson South-Western

Laws of Malaysia, Act 332: Copyright Act 1987 (incorporating latest amendment – Act A1139/2002). Kuala Lumpur: Malaysian Law Publishers

Litman, J. (1996). “Copyright law and electronic access to information.” First Monday, Vol. 1 No. 4 www.firstmonday.org/issues/issue4/litman

Ryan, Timothy J. (2002). "Infringement.com: RIAA v. Napster and the War against Online Music Piracy." Arizona Law Review, Vol. 44 (2), p. 495 http://www.law.arizona.edu/Journals/ALR/ALR2002/vol442/Ryan_FINAL.pdf

Wienard, P. (1998). "Copyright in electronic information." www.farrer.co.uk/bulletins/ip/copyrigh.shtml

Saturday, September 6, 2008

Adequacy of Malaysia's Cyberlaws to Address Cybercrimes and Cybertorts

I. Introduction

Since the birth of the 21st century, cybercrime has increasingly become recognized as a problem that requires the attention of governments, law enforcement authorities and legal systems of leading Asia Pacific countries. The explosive growth of the Internet and adoption of digital technologies for electronic commerce, electronic data interchange and electronic communication needs in the Asia Pacific region has also brought about an increase in cybercrimes.

Advanced countries in the West with highly developed information and communication technology infrastructures are also forced to constantly review the adequacy of their legal systems to deal with cybercrime. Other countries in South East Asia, such as Singapore, Thailand, and Malaysia, developing their information and communication technology system from a less advanced base are similarly forced to review the adequacy of their existing legal systems.

Existing criminal law, supported with commercial and intellectual property protection law may already inhibit a range of cyberspace misconduct. However, gaps and inadequacies of existing traditional laws necessitate the consideration and introduction of more specific laws to address cybercrime.

II. What is Cybercrime?

In Grabosky & Smith (1998), the following categories of crime were found to be emerging in the digital age:

  • Illegal telecommunications interception (e.g. hacking, cracking, data manipulation)

  • Electronic vandalism

  • Electronic terrorism (e.g. viruses, denial-of-service attacks, spamming)

  • Theft of data and communications services

  • Telecommunications and associated intellectual property piracy

  • Electronic distribution of pornography

  • Electronic fraud (e.g. phishing)

  • Electronic funds transfer crime

  • Money laundering

Collectively, these crimes are referred to as “cybercrimes”.

How serious or damaging is cybercrime? Warren & Streeter (2005) reported that, “the Internet has become a non-stop source of crime stories. The Bank of America revealed it lost computer tapes containing financial data on 1.2 million federal workers, including US senators, and British police recently charged 28 people with involvement in a sophisticated identity fraud racket that swindled almost 2 million pounds from more than 100 private bank accounts.” “The US Federal Trade Commission revealed last year that 10 million US citizens had fallen victim to identity theft at a total cost of USD 50 billion, and that 2 million people were conned by phishing attacks.”

Phishing [Sullivan, 2004, p.24], first detected in 1996, has exploded in the last two years because it is easy to produce and easy to fall for. Fraudsters send fake or spoof e-mail to bank customers to obtain their logins and passwords or to trick them into visiting fake banking websites.

On the home front, cybercrime rate is on the rise [Rising cybercrime, 2004, p.2]. Chia Kwang Chye, former deputy minister of internal security said, “117 cases involving MYR451,000 in losses were taken to court, under the Communications and Multimedia Act 1998” for the period of January to September 2004, compared to 35 cases in 2003.

Chia also said that 857 cases were charged in court in 2003 under the Computer Crimes Act 1997, with loses totaling MYR2.9 million, while 355 cases were brought to court from January to September 2004.

In its first quarter 2004 report, the Malaysian Computer Emergency Response Team (MyCERT) said that, “Internet vandals went wild early this year defacing hundreds of Malaysian websites, with public sector sites the main victims.” [Sharif, 2004, p.3] The following charts A to E provide some statistics.










While some of these crimes can be prosecuted to a certain extend with the combination of existing criminal, commercial and intellectual property laws, the experience of many jurisdictions is that additional legislation is often required to address these Internet, computer systems and electronic communication related crimes.

III. What is Cybertort?

Before I embark on defining “cybertort”, let us first understand what is defined as a tort. “A tort is a wrong. It can be a spoken wrong or an act (action), or a nonaction (carelessness) that is wrong, with injury inflicted on a person or property.” [Baumer & Poindexter, 2002, p.119]

Thus, there is tortious liability when a tort is committed, and I can define tortious liability as, “Tortious liability arises from the breach of a duty primarily fixed by the law; this duty is towards persons generally and its breach is redressable by an action for unliquidated damages.” [Lee, 2001, p.189]

Torts include issues such as:

  • Trepass to a person

  • Trespass to land

  • Trespass to nuisance

  • Trespass to goods

  • Negligence

  • Defamation

The tort most relevant to cyberspace is defamation. Defamation may be defined as, “Oral or written statements that wrongfully harm a person’s reputation.” [Ferrera et al, 2004, p.345] Defamation committed orally is known as slander, and defamation committed in writing is known as libel.

Therefore, torts committed in cyberspace (or the Internet and/or the World Wide Web) are known as cybertorts. Defamation can easily be committed in the cyberspace via e-mails or electronic mails, articles or postings in Weblogs, messages and/or videos in social networking sites such as YouTube, Facebook, etc.

The legal remedy or suit against defamation requires several elements of proof such as:

  • A false statement of fact, not opinion, about the plaintiff

  • The publication of the false statement without a privilege to do so

  • Intentional or due to negligence

  • Damages – actual and/or presumed suffered by the plaintiff

IV. The Cyberlaws of Malaysia

With the arrival of the digital economy or knowledge economy as embraced by Malaysia, and the birth of the Multimedia Super Corridor (MSC), new laws introduced in 1997 covering computer crimes, digital signature, telemedicine, copyright were promoted by the MSC’s custodian – the Multimedia Development Corporation as a package of cyberlaws.

The cyberlaws are:

i) The Computer Crimes Act 1997

This Act provides law enforcers with a framework that defines illegal access, interception, and use of computers and information; standards for service providers; and outlines potential penalties for infractions.

ii) The Digital Signature Act 1997

Regulates the legal recognition and authentication of the originator of electronic document. This Act enables businesses and the community to use electronic signatures instead of their hand-written counterparts in legal and business transactions.

iii) The Telemedicine Act 1997

This Act empowers medical practitioners to provide medical services from remote locations using electronic medical data and prescription standards, in the knowledge that their treatment will be covered under insurance schemes. However, this Act is yet to be implemented.

iv) The Copyright (Amendment) Act 1997

This Act gives multimedia developers full intellectual property protection through the on-line registration of works, licensing, and royalty collection. Especially, the Act reinforces an author's work cannot be presented as the work of another, by adding a provision that the work must be identified as created by the author.


It was also decided that a regulatory body entrusted with the role to implement and promote the national objectives of the Malaysian Government for the communications and multimedia sector was needed. Hence, in 1998, another two acts were passed.

v) The Malaysian Communication and Multimedia Commission Act 1998

Provide for the establishment of the Malaysian Communications and Multimedia Commission (MCMC), a single regulatory body for an emerging and converging communications and multimedia industry. This Act gives the MCMC the power among other things, to supervise and regulate communications and multimedia activities in Malaysia and to enforce the relevant laws.

vi) The Communication and Multimedia Act 1998

The most significant legislation brought into force on April 1, 1999. This legislation provides the policy and regulatory framework for convergence of the telecommunications, broadcasting and computer industries. The Act is based on the basic principles of transparency and clarity; more competition and less regulation; bias towards generic rules; regulatory forbearances; emphasis on process rather than content; administrative and sector transparency; and industry self-regulation.


In addition, the government is also in the process of formulating another legislation presently called the Personal Data Protection Bill [Surin, 2003b, p.16-18]. This law will provide assurance of privacy of personal data. It will address the issues of collection, processing, maintenance and utilization of personal data.

The above cyberlaws serve two central purposes:

  • To bolster intellectual property rights; and

  • To create the right environment for the multimedia industry and for online transactions or electronic commerce to thrive in a continuously and increasingly competitive business environment

V. Adequacy of Legislation

In general, countries can be categorised according to whether they have:

  1. Basic criminal and commercial laws

  2. A developed system of intellectual property laws

  3. Legislation directed specifically at computers and electronic commerce

Malaysia may be observed to fall within one or more of these categories, mostly satisfying the second category and having made some progress towards the third. Whether the existing legal system in any country can adequately address cybercrime depends on the precise scope and interaction of its criminal, commercial, intellectual property and computer-related laws.

The rapid development of information and communication technology and emerging electronic commerce pose challenges for the existing laws of Malaysia. Some key challenges created by the Internet or cyberspace in the enactment of statutes and development of the common law includes the identification of legal entities in cyberspace, the need to protect privacy and the issue of digital signatures that require close regulation.

1.0 Absence of Territorial Borders in Cyberspace

The jurisdiction of courts is based on the concept of territoriality. While we may call “cyberspace” in the singular, it is however, not a singular or distinct “place” but made up of many virtual locations constituting several business models from the real world that are recreated in computer-mediated communication infrastructures. Cyberspace crosses geographical and jurisdictional boundaries as we know it due to the cost, ease and speed of electronic transmission on the Internet that is almost entirely independent of physical location.

A major challenge for the law is created by the cross-boundary nature of cyberspace or in other words, its borderless nature. In relation to law, Johnson and Post (1996) outlined some cross-border issues:

  • The power of local governments to assert control over online behaviour

  • The effects of online behaviour on individuals or things

  • The legitimacy of the efforts of a local sovereign to enforce rules applicable to global phenomena

  • The ability of physical location to give notification of which set of rules apply for any given situation. Regional or national regulation by market authorities and other self-regulatory organisations are clearly less than satisfactory for the internationally active cross-border Internet

Hence, new legislation able to address cyberspace issues such as accountability and governance; proper usage, orderly conduct, structure and development; and cybercrime became very important due to the undermining of the feasibility and legitimacy of applying laws based on geographic boundaries.

Malaysia’s cyberlaws, as outlined in the previous section, governs the behaviour, content, business transactions, privacy, defamation, contracts, and intellectual property rights in a cyberspace environment, committed within and outside of Malaysia.

The Communication and Multimedia Act 1998, Section 4: Territorial and extra-territorial application provides for:

(1) This Act and its subsidiary legislation apply both within and outside Malaysia.

(2) Notwithstanding subsection (1), this Act and its subsidiary legislation shall apply to any person beyond the geographical limits 6f Malaysia and her territorial waters if such person –
(a) is a licensee under this Act; or
(b) provides or will provide relevant facilities or services under this Act in a place within Malaysia.

The Computer Crimes Act 1997, Section 9: Territorial scope of offences under this Act provides for:

(1) The provisions of this Act shall, in relation to any person, whatever his nationality or citizenship, have effect outside as well as within Malaysia, and where an offence under this Act is committed by any person in any place outside Malaysia, he may be dealt with in respect of such offence as if it was committed at any place within Malaysia.

(2) For the purposes of subsection (1), this Act shall apply if, for the offence in question, the computer, program or data was in Malaysia or capable of being connected to or sent to or used by or with a computer in Malaysia at the material time.

2.0 Computer and Computer-related Offence Provisions

The following Tables A and B presents a comparative analysis of computer and computer-related offence provisions available in Malaysia.


Computer and data offences

From the above, arguably, Malaysia can be considered as having a quite respectable segregation or classification of computer offences.

Computer-related offences

Although fraud and forgery can be prosecuted under the commercial and criminal laws whether committed using a computer or by more traditional paper-based means, it is good for Malaysia to have specific fraud and forgery offences addressed in the main computer crime legislation.

Ancillary liability

While not in the main computer crime law, computer child pornography, and copyright and related-rights are addressed in the Communications and Multimedia Act 1998 and Copyright (Amendment) Act 1997 respectively, which are collectively a part of Malaysia’s cyberlaws.

Special enforcement units

Recognising the highly specialised knowledge and skills required for investigation and evidence gathering in relation to cybercrime, some countries have moved towards setting up specialised computer crime units within their law enforcement agencies, for e.g.

In this aspect, Malaysia does not yet have a specialist cybercrime law enforcement unit, thus cybercrimes are referred to the traditional Commercial Crimes department of the police force.

Forfeiture and/or Restitution

Apart from the imposition of terms of imprisonment and fines, cybercrime legislation can empower courts to order the forfeiture of equipment used and/or assets acquired, or to require restitution to victims. For e.g., in Taiwan there is a statutory maximum for damages that can be awarded to injured persons under the Computer Processing Personal Information Protection Law. In the Philippines, maximum penalties imposed for hacking or cracking under the Electronic Commerce Act are commensurate to the damage incurred.

In Malaysia, forfeiture and/or restitution is not clearly defined in the cyberlaws and usually falls back upon existing commercial and criminal laws.

Undercover Surveillance/Search and Seizure

Standard search and seizure powers for the investigation of criminal offences may not extend to the investigation of computer data or the interception and covert surveillance of electronic transmissions such as e-mail. Cybercrime legislation in Malaysia should provide for expanding the range of investigatory powers available to law enforcement.

International Agreements

There are currently no international agreements on the scale of United Nations conventions or treaties (e.g. for international trade, there is the World Trade Organisation) in relation to cybercrimes that Malaysia can actively participate in and/or contribute to. Such a platform can provide excellent benefits to Malaysia in formulating and advancing cyberlaws.

3.0 Prohibition on Provision of Offensive Content

Offensive content includes but not limited to pornography, indecent or unsuitable content for children, objectionable content, and defamatory articles and/or statements

The Communications and Multimedia Act 1998 provides legislation against offensive content and the Malaysian Communications and Multimedia Commission (MCMC) is thus empowered to act against offensive content by way of written requests to Internet Service Providers (ISPs) to take action against offensive content.

The following Tables C, D-1, D-2 and E summarises the relevant sections of the Act.





4.0 Intellectual Property Rights Offence Provisions

There is considerable overlap between cybercrime laws and intellectual property laws. For e.g., computer hardware may constitute a patentable invention, a registered design, or be protected under legislation relating to electronic circuit layouts. Computer software may similarly be protected under copyright law, and likewise with data and information transmitted or stored on files.

The following Table F shows the intellectual property rights offence provisions available in Malaysia.

Offence Classification

The classification of intellectual property laws into patents, trademarks, designs, copyright and computer circuit layouts is fairly standard, and it is somewhat worrisome that in Malaysia, most of the intellectual property rights legislation does not recognise infringement as a criminal offence other than those provided for under the Copyright Act 1987 and Copyright (Amendment) Act 1997.

Computer Software

Unauthorised duplication of computer software (except to make a back-up copy for personal use) is an infringement under Malaysia copyright laws. The Copyright Act 1987 was amended to give multimedia developers full intellectual property protection through the on-line registration of works, licensing, and royalty collection. The Amendment Act reinforces an author's work cannot be presented as the work of another, by adding a provision that the work must be identified as created by the author.

Optical Disc Piracy

Very few Asia-Pacific countries or jurisdictions have laws explicitly relating to optical disc piracy. A good example is Hong Kong’s Prevention of Copyright Piracy Ordinance, which prohibits the manufacture of optical discs without a valid licence, punishable by a fine of HK$500,000 and imprisonment for two years on a first conviction; and HK$1,000,000 and four years imprisonment on a subsequent conviction.

Malaysia’s Optical Discs Act 2000 came into force on September 15, 2000. Section 26 provides for:

Section 26. Penalty.
(1) Any person who commits an offence under Part III except under section 15 shall on conviction be liable –

(a) if such person is a body corporate, to a fine not exceeding five hundred thousand ringgit, and for a second or subsequent offence to a fine not exceeding one million ringgit; or

(b) if such person is not a body corporate, to a fine not exceeding two hundred and fifty thousand ringgit or to imprisonment for a term not exceeding three years or to both, and for a second or subsequent offence to a fine not exceeding five hundred thousand ringgit or to imprisonment for a term not exceeding six years or both.

(2) Where a person being a director, manager, secretary or other similar officer of a body corporate is guilty of an offence under subsection (1) by virtue of section 30, he shall on conviction be liable to the penalty provided for in paragraph (1) (b).

Circumvention of Technological Protection Measures

Offence provisions in relation to the circumvention of technological protection measures such as encryption devices, user identification and electronic rights management information regimes are already introduced in leading Asia-Pacific countries such as Singapore, Australia, Hong Kong, South Korea and Japan.

In this area, Malaysia is also not trailing. The Copyright (Amendment) Act 1997 provides for fines of up to MYR250,000 and/or imprisonment for up to three years for the first offence, or MYR500,000 and/or five years for subsequent offences.

International Agreements

International agreements for the protection of industrial and intellectual property date back over 100 years. Malaysia is a member or signatory of the following main instruments administered by the World Intellectual Property Organisation (WIPO), and the United Nations Educational, Scientific and Cultural Organisation (UNESCO).

  • Paris Convention for the Protection of Industrial Property 1883 (Malaysia’s membership: January 1989)
  • Berne Convention for the Protection of Literary and Artistic Works 1886 (Malaysia’s membership: October 1990)
  • Convention establishing the World Intellectual Property Organisation 1970 (Malaysia’s membership: January 1989)
  • Agreement on Trade-related Aspects of Intellectual Property Rights 1994 (Malaysia membership: January 1995)

Sources:
WIPO
http://www.wipo.int/treaties/en/
UNESCO http://www.unesco.org
WTO http://www.wto.org)

VI. Conclusion

Cybercrime legislation in Malaysia is still in the early stages of development, and exhibits overlap with general criminal, commercial and intellectual property laws. This is not surprising given the different historical, social and political contexts and needs within which these laws have evolved, and the differing levels of technological development compared to other countries.

However, it is a fact that cybercrime knows no national borders and, as a result, defences against the threats increasingly posed to computer and information infrastructures can only be as strong as the weaker links in the chain. Therefore, it is important for Malaysia to continually assess the adequacy of the cyberlaws and, where deficiencies can be identified, to reform those laws appropriately and quickly.

Therefore, it was a let down when Datuk Dr. Rais Yatim, former minister in the Prime Minister’s department, announced at the third MSC International Cyberlaws Conference held from March 2 to 3, 2004 that the three draft cyberlaws, namely the Personal Data Protection Act, Electronic Transactions Act and the Electronic Government Activities Act will be delayed [Khalid & Moreira, 2004, p.3].

“The first would regulate the collection, possession, processing and use of personal data, and ensure there are adequate measures for the security, privacy and handling of personal information. It aims to raise public confidence in conducting electronic transactions without their privacy being violated.”

“The Electronic Transactions Act is primarily targeted at boosting e-commerce by providing legal recognition of electronic transactions, including e-commerce transactions.”

“The Electronic Government Activities Act seeks to establish common protocols for electronic interaction between the Government and the public.”

Thus, these draft legislation are important additions to Malaysia’s cyberlaws and any further delays will eventually become detrimental for Malaysia to competitively position herself in an increasingly globalising economy. (The Malaysian government had released a draft version of the proposed Personal Data Protection Act for public comment in November 2000.)

Lawyer Wong Shiou Sien, a speaker at the conference, argued, “Despite being among the first countries in the world to introduce cyberlaws, Malaysia cannot afford to remain at a standstill. New developments in technology, products, and services related to wireless content will keep raising new legal and regulatory issues.” [Khalid & Moreira, 2004, p.2]

While there is no single model to be emulated in this process, guidance can be gained from legislation in force in countries or jurisdictions with longer experience of the threat, management and prosecution of cybercrimes, and the promotion of the effective and efficient use of cyberspace to increase the competitive advantage of our nation Malaysia.


References:

MyCERT statistics http://www.mycert.org.my/en/index.html

Computer Crimes Act 1997
Digital Signature Act 1997
Communication and Multimedia Act 1997
Malaysian Communication and Multimedia Commission Act 1997
Telemedicine Act 1997
Copyright Act 1987
Copyright (Amendment) Act 1997
Patents Act 1983
Trademarks Act 1976
Industrial Designs Act 1990
Optical Discs Act 2000
Layout-Designs of Integrated Circuits Act 2000

Baumer, David & Poindexter, J. C. (2002). Cyberlaw and E-Commerce. New York, NY: McGraw-Hill

Endeshaw, Assafa (2001). Internet and E-Commerce Law: With a Focus on Asia-Pacific. Singapore: Prentice-Hall

Ferrera, Gerald R., Lichtenstein, Stephen D., Reder, Margo E. K., Bird, Robert C. & Schiano, William T . (2004). Cyberlaw: Text and Cases. (2nd Edition). Mason, Ohio: Thomson South-Western

Grabosky, P. N. & Smith, R. G. (1998). Crime in the Digital Age: Controlling Telecommunications and Cyberspace Illegalities. New Brunswick, NJ: Transaction Publishers/Federation Press

Johnson D. R. & Post D. G. (1996). "Law and Borders: The Rise of Law in Cyberspace." Stanford Law Review, Vol. 48, p.1367

Khalid, H. Amir & Moreira, Charles F. (2004, March 9). "Malaysian cyberlaws need to keep up." Star InTech, p.2

Khalid, H. Amir & Moreira, Charles F. (2004, March 9). "New cyberlaws may be delayed." Star InTech, p.3

Khalid, H. Amir & Moreira, Charles F. (2004, March 9). "Cybercrime: Business and the law on different pages." Star InTech, p.4

Khalid, H. Amir & Moreira, Charles F. (2004, March 9). "IT-illiteracy and lawyers: Blame the Bar." Star InTech, p.4

Lee, Mei Pheng. (2001). General Principles of Malaysian Law. (4th Edition). Shah Alam, Selangor: Penerbit Fajar Bakti

Moreira, Charles F. (2004, March 4). "Get on with IT, lawyers urged." Star InTech, p.4, c.4

Ramachandran, Sonia. (2008, August 31). "The Net is not in a legal vacuum." New Sunday Times, p.18

Rising cybercrime rate in Malaysia. (2004, October 21). Star InTech, p.2, c.3

Sharif, Raslan. (2004, April 22). "Vandals giving government websites grief." Star InTech, p.3

Sullivan, Laura. (2004, March 2). "Phishing takes centrestage." Star InTech, p.24

Surin, A. J. (2003, April 22). "Harmonising cyberlaws in a borderless world." Star InTech, p.27-29

Surin, A. J. (2003, September 4). "Data protection and privacy." Star InTech, p.16-18

Surin, A. J. (2003, October 7). "To catch a cybercriminal." Star InTech, p.29-31

Surin, A. J. (2003, November 11). "Multilateral efforts to combat cybercrime." Star InTech, p.20-22

Surin, A. J. (2003, December 9). "The power to effect ICT change." Star InTech, p.20

Surin, A. J. (2004, January 6). "Act gives MCMC wide powers." Star InTech, p.19-21

Surin, A. J. (2006). Cyberlaw and its Implications. Petaling Jaya, Selangor: Pelanduk Publications

Warren, Peter & Streeter, Michael. (2005, April 19). "Cybercrime gaining momentum." Star InTech, p.23