Archive for: computer crime

Criminal law, case II Ka 269/11

November 14th, 2011, Tomasz Rychlicki

Maria S. was charged by the Prosecutor based on the provisions of Article 278 § 2 of the Polish Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with subsequent amendments.

Article 278. § 1. Whoever, with the purpose of appropriating, wilfully takes someone else’s movable property shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 2. The same punishment shall be imposed on anyone, who without the permission of the authorised person, acquires someone else’s computer software, with the purpose of gaining material benefit.

Such situation happened because, during the investigation, the Police found on her laptop two shareware programs Win ZIP 8.1 and Win Rar 3.0. This software was valued 113,89 PLN each, and the period of time to buy a license already expired. Maria S. explained that she wasn’t aware that she had illegal software installed. She argued that both programs were installed by computer service technicians during the repair of her laptop. This statement was confirmed by a witness expert testimony. The expert said that both programs were installed at the same time, when the operating system was also configured. The expert noted that this is typical practice of computer services personnel who install software needed to install other programs, and do not remove it after the completion of repairing. At the time of installation of both programs, they were legal.

The Regional Court in Biłgoraj acquitted Maria S. of all charges. The Court found that she did not act in order to gain material benefits and she had no full awareness that her behavior lead to the obtainment of computer programs without the consent of the person entitled. The Prosecutor appealed. He argued that Maria S. was guilty because she wasn’t careful enough, and she did not buy both licenses immediately.

The District Court in Zamość in its judgment case file II Ka 269/11 upheld the verdict. The Court ruled that issues of normal or increased diligence or care that should appear in case of expired trial or shareware software, do not belong to the category of the constituent elements of the alleged offense.

Personal interest, case IV CSK 665/10

November 7th, 2011, Tomasz Rychlicki

Writing under a pseudonym, Dariusz B. posted a comment on the website “Gazeta online Elbląg 24″. In his post Dariusz B. wrote to the Mayor of the Elbląg town, that he has photographs of people who sit in the city council, and he described the content of these pictures as a “sex scandal”. He noted that the Mayor’s spokesman ignored this case, so he wanted to know what should he do next with such photographs. Other anonymous Internet users posted comments under the post that has been written by Dariusz B. One of them has disclosed who is the author of the post, and also expressed a negative opinion about the post, by calling it a blackmail. This person also suggested that Dariusz B. has used the media for his own purposes in order to manipulate press journalists. The intentions of Dariusz B. and his honesty, were also undermined. The post of Dariusz B. was described as a blatant violation of the law for which he should bear criminal responsibility. “Gazeta online Elbląg 24″ is a service available for free. It is operated by the Municipality of the Elblag town. The comment in which personal data of Dariusz B. was disclosed was written from a computer that had the IP address belonging to the organizational unit of the Elblag town. The unit operates wireless Wi-Fi, whose range includes several publicly accessible areas of the building and parking lot adjacent to it. It was not possible to identify the person who posted this comment. The Police, at the request of Dariusz B. commenced an investigation and failed to establish who was the author of the comment, even when the Municipality of Elblag has disclosed all data, including IP addresses. Dariusz B. sued the Municipality of Elbląg for the infringement of his personal interests. The District Court and the Appellate Court dismissed the suit. Dariusz B. filed a cassation complaint.

The Supreme Court in its judgment of 8 July 2011 case file IV CSK 665/10, published in electronic database LEX, under the no. 898708, held that critical comments of the content of post and the very fact of its posting, or disclosure of the name and surname of Dariusz B., was not a violation of his personal interest. However, it was a violation of personal interests (dignity and reputation) when such action has been called illegal activity, fraudulent and manipulative, a blackmail and provocation, which undoubtedly discredited Dariusz B. in public opinion, especially as a social activist, who was active at another online forum. Such statement, not supported by the facts, was unlawful. In the case of an infringement of one’s personal interests, the court may award pecuniary compensation to a person whose personal interests have been infringed, an approriate amount as pecuniary compensation for the wrong suffered or may, on his demand, adjudge an appropriate amount of money to be paid for a social purpose chosen by him, irrespective of other means necessary to remedy the effects of the infringement. Not only the person who directly caused the damage shall be liable, but also any person who has induced or helped another person to cause the damage, including those who consciously took benefit from a damage caused to another person. However, the Court ruled that there was no normal causal link between the actions of the Municipality of Elblag, and the damage suffered by Dariusz B., and such a link occurs only when the action is directed to accomplish the tortious activity.

By opearating a website “Gazeta online Elbląg 24″ and a discussion forum, the Municipality of Elbląg was deemed as the Internet services provider. However, such ISPs, are responsible for the violation of personal rights performed by others only when they knew that the post violates these interests and they did not immediately prevent the access to the post. Therefore, the ISP is not obliged to control the content of posts written by users on a free discussion forum website. Taking into account the nature and purpose of services based on making available free of charge of a discussion website, and considering also that there were no general rules for the management of such services and systems, the Court held that there were no grounds to impose a general obligation on the ISP to provide tools to identify users of such a website. The Court ruled that the anonymity of persons using the publicly available online news website, is a generally accepted principle and essence of this type of service. It provides freedom of expression, which is the goal of such websites. Consequently, the Court held that the ISP that created and provides free access to the website with a discussion forum, has no obligation to ensure the ability to identify the users who maded posts on this website.

Criminal law, case III K 76/08

October 28th, 2011, Tomasz Rychlicki

In 2007, Marek Witoszek wrote SEO software that allowed him to change the visibility ranking of a website of the Polish president Lech Kaczyński in search engines, when one of the Polish offensive words was typed in. He was prosecuted and charged based on the provisions of the Article 135 § 2 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with subsequent amendments.

Article 135. § 1. Whoever commits an active assault on the President of the Republic of Poland
shall be subject to the penalty of the deprivation of liberty for a term of between 3 months and 5 years.

§ 2. Whoever insults the President of the Republic of Poland in public
shall be subject to the penalty of the deprivation of liberty for up to 3 years.

The trial has been suspended for two years, because the judgment of the Constitutional Tribunal was expected to answer the question, whether one can be punished for insulting the president as an institution, not as a person. The Constitutional Tribunal in its judgment of 6 July 2011 case file P 12/09 held that Article 135 § 2 of the CRC is consistent with Article 54(1) of the Polish Constitution in connection with Article 31(3) of the Constitution and Article 10 of the Convention for the Protection of Human Rights and Fundamental Freedoms signed in Rome on 4 November 1950, as amended. Mr Witoszek pleaded guilty and has requested a voluntary submission to punishment.

The District Court in Bielsko-Biała in its judgment of 25 October 2011 case file III K 76/08 sentenced Mr Witoszek for three months of imprisonment, and conditionally suspended the execution of a penalty for three years.

Personal interest, case II SA/Wa 364/11

October 13th, 2011, Tomasz Rychlicki

On January 2010, entries signed by the nick “arfulik” appeared on few Polish websites, the author wrote critically about the company Bavaria Consulting and a person who is a member of the board. It seemed that this unknown author conducted a competitive activity. Bavaria and Krystiana D. decided to sue for the infringement of personal interest. They needed personal data of a person who wrote questioned comments. Telekomunikacja Polska (TP), one of the largest ISPs, refused to provide such information, referring to the telecommunications confidentiality included in the Article 159 of the Polish Act of 16 July 2000, Telecommunications Law – TLA – (in Polish: Prawo telekomunikacyjne), published in Journal of Laws (Dziennik Ustaw) No 171, item 1800 with subsequent amendments. Allegedly slandered filed a complaint to the Inspector General for Personal Data Protection (GIODO). The GIODO ordered the disclosure the personal data but he overturned this decision after TP filed a request for reconsideration. The GIODO decided that such information is subject to the telecommunications confidentiality and found no reason to disclose it. The offended persons lodged a complaint against this decision.

The Voivodeship Administrative Court in its judgment of 7 October 2011 case file II SA/Wa 364/11 dismissed it, and ruled that the intention of bringing action against the author of a forum post or comment is not a sufficient condition to disclose personal data. One has to file a suit for protection of personal interest. Only then, a court in order to avoid procedural deficiency, will summon the telecommunications operator to disclose personal data of the author of the questioned post.

See also “Polish regulations on personal data protection” and “Polish case law on personal data protection“.

Tax law, case I SA/Łd 762/10

September 24th, 2011, Tomasz Rychlicki

The Voivodeship Administrative Court in Łódź in its judgment of 23 September 2010 case file I SA/Łd 762/10 held that a person whose account on an auction website was illegally hacked and used for sale of goods by someone else, is not obliged account to tax for such activity.

Criminal law, case II Kp 366/10

March 11th, 2011, Tomasz Rychlicki

The Polish prosecutor decided to discontinue the proceedings against a man who allegedly changed the password to an e-mail account of another person. The IP address of a computer that was used to commit this act served as the only evidence. The Prosecutor stated that a lot of people had access to this computer, so it was difficult or almost impossible to determine the offender. The aggrieved person has made a complaint to the Regional Court in Otwock. The court in its decision case file II Kp 366/10 anulled the order of the prosecution and ruled that the Prosecutor should prepare additional evidence such as interrogation and confessions of witnesses.

Computer crime, case II K 127/10

October 21st, 2010, Tomasz Rychlicki

A young man was charged with the removal of computer data in the form of virtual objects belonging to a specific game avatar. He acted to the detriment of another person, without authorization, with an Internet account in the Massively Multiplayer Online Role-Playing Game – Metin2. According to the indictment he obtained access (login, password) to someone else’s account using a keylogger software. The charges were based on provisions of Article 287 § 1 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with subsequent amendments.

Article 287. § 1. Whoever, in order to gain material benefits, affects automatic processing or transmitting information, or changes or deletes record or introduces a new record on an electronic information carrier, without being authorised to do so,
shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.
§ 2. In the event that the act is of a lesser significance, the perpetrator shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
§ 3. If the fraud has been committed to the detriment of a next of kin, the prosecution shall occur on a motion of the injured person.

The Regional Court in Sławno in its judgment of 19 August 2010, case file II K 127/10 found him guilty of committing the offense, and sentenced to 1 year of imprisonment, suspended for a three-year period of probation. The court also ordered him to pay a fine up to 20 daily rates (10 PLN for a rate, a total of 200 PLN) and placed under supervision by a probation guardian.

Computer crime, case XII K 32/10

October 20th, 2010, Tomasz Rychlicki

A locally practicing lawyer (advocate) from Kielce used the nickname “bondd007” and posted on an online forum, among others such comments that the Director of the Tax Office in Kielce “probably likes” when the manager of one of the departments “puts an ice cream” – the expression in Polish slang that means oral sex.

The Regional Court in Kielce in its judgment of March 2010 case file XII K 32/10, found the lawyer guilty of defamation. The Court held that such words insulted the manager, slander her to sexual contact with the principal in the workplace and thus exposed her to a loss of trust necessary for the position occupied. The District Court in Kielce in its judgment of 19 October 2010 upheld the judgment.

Computer crime, case IV Ka 266/11

September 20th, 2010, Tomasz Rychlicki

Mr Łukasz Kasprowicz publishes frequently different news and information about the municipal office at Mosina on his website (blog) available at mosina.blox.pl. Zofia Springer the Mayor of Mosina filed for a private charge against Mr Kasprowicz on the basis of Article 212 § 2 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with subsequent amendments.

Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

§ 2. If the perpetrator commits the act specified in § 1 through the mass media shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

§ 3. When sentencing for an offence specified in §1 or 2, the court may adjudge a supplementary payment in favour of the injured person or of the Polish Red Cross, or of another social purpose designated by the injured person a supplementary payment (nawiązka).

§ 4. The prosecution of the offence specified in § 1 or 2 shall occur upon a private charge.

The mayor felt insulted by some of the stories published by the blogger and concluded that the routine writing about her and the office is undermining its reputation. The Observatory of Media Freedom in Poland run by the Helsinki Foundation for Human Rights was present during the hearing as a person of trust, based on Article 361 § 3 of the the Criminal Proceedings Code – CRPC – (in Polish: Kodeks Postępowania Karnego) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 89, item 555, with subsequent amendments. During the hearing on 9 May 2010, Łukasz Kasprowicz was referred by the Court for a psychiatric examination (in search for the opinion of an expert psychiatrist), and the counsel for the defence was appointed by the Court.

The Regional Court in Poznań Stare Miasto in its judgment of 25 January 2011 case file VIII K 745/09/8 sentenced Łukasz Kasprowicz for three hundred hours of community service and prohibited Mr Kasprowicz from performing professional activities as a journalist for one year, which also means the annual ban on publishing articles on the Internet. Mr Kasprowicz appealed. The District Court in Poznań in its judgment of 8 June 2011 case file IV Ka 266/11 overturned the questioned judgment. The Court acquitted Mr Kasprowicz of 13 charges, and in the other two the Court decided to discontinue the case/proceedings due to the relatively low social harm of the actions. Zofia Springer filed a cassation complaint to the Supreme Court of the Republic of Poland.

Computer crimes, case I KZP 7/10

July 9th, 2010, Tomasz Rychlicki

The Supreme Court in its order of 29 June 2010 case file I KZP 7/10 held that, the prescription of defamation crime is counted from the date of publication of the offensive content. This crime is defined in article 212 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
§ 2. If the perpetrator commits the act specified in § 1 through the mass media
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.
§ 3. When sentencing for an offence specified in §1 or 2, the court may adjudge a supplementary payment in favour of the injured person or of the Polish Red Cross, or of another social purpose designated by the injured person a supplementary payment (nawiązka).
§ 4. The prosecution of the offence specified in § 1 or 2 shall occur upon a private charge.

This issue was referred to the Supreme Court by the District Court, who had inquired whether the defamation is a crime of continuous nature, which means that in case of defamatory entry placed on the Internet, it is committed as long as entry is available on the website. Interestingly, the SC refused to answer this question but the Court deliberated very wide on this issue in the justification of the order. The Supreme Court ruled that on-line defamation is not a continuous crime, which would involve creating and maintaining the status recognized by law as unlawful. The Court was aware of the fact the interests of the victim are violated as long as the defamatory content is publicly available on a website. However, per analogy to the printed press, where the victim’s interests are harmed as long as there are archived copies of newspapers containing offensive words.

The Supreme Court held that the offense involving the placement of a defamatory content in the Internet as referred to in article 212 § 2 of the CC is committed at the moment to making an entry and not while removing it. This means that the perpetrator cannot be prosecuted with the private charge after a year from the time when the victim learned about the offender, but no later than the expiry of three years from the time it was committed.

Computer crime, case V K 1595/08

February 9th, 2010, Tomasz Rychlicki

Arnold Buzdygan brought a private accusation before the Regional Court for Wrocław Śródmieście V Criminal Division against Olgierd Rudak. The indictment was based on articles 212 § 2 and 216 § 2 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
§ 2. If the perpetrator commits the act specified in § 1 through the mass media
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

Article 216
§ 1. Whoever insults another person in his presence, or though in his absence but in public, or with the intention that the insult shall reach such a person,
shall be subject to a fine or the penalty of restriction of liberty .
§ 2. Whoever insults another person using the mass media, shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

The court in Wroclaw was obliged ex officio under article 35 § 1 of the Criminal Proceedings Code – CRPC – (in Polish: Kodeks Postępowania Karnego) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 89, item 555, with later amendments, to examine its jurisdiction and if found otherwise, to refer the case to the court with the proper one. The Court in Wrocław held that pursuant to article 31 § 1 of the CRPC, the jurisdiction is where the offense was committed (the teritorial jurisdiction).

Buzdygan claimed that the offense was commited in the article entitled “Trolls scour in the Net” which was published in the Polish magazine Przekrój of 11 November 2007, in addition the allegedly defamatory content was broadcasted by TV stations such as TVN, Polsat and TVP, in their news and in the Internet. Judge Jolanta Pol-Kulig had to decide on the location of the Internet.

[b]oth the editorial office of Przekrój and the abovementioned TV stations and the Internet are located in Warsaw, one should consider that the commitment of a crime to the detriment of the private prosecutor was performed in that place.

The court in an order of 31 December 2008, case file V K 1595/08, referred the case to the Regional Court for Warszawa Śródmieście II Criminal Division. Interestingly, the court in Wrocław did not consider that the alleged offense was not committed.

See also “Personal rights, case I ACa 949/09“.

Copyright law, the allowed personal use

November 16th, 2009, Tomasz Rychlicki

Downloading MP3s (or movies, pictures, press articles) is not illegal under the Polish law. According to article 23 of the Polish Act on Authors Rights and Neighbouring Rights – ARNR – (in Polish: ustawa o prawie autorskim i prawach pokrewnych) of 4 February 1994, published in Journal of Laws (Dziennik Ustaw) No 24, item 83, consolidated text of 16 May 2006, Journal of Laws (Dziennik Ustaw) No 90, item 631, with subsequent amendments.

Section 3
Lawful Use of Protected Works
Art. 23.-1. It shall be permissible, without the consent of the creator, to make use free of charge, of a work that has already been disclosed. However, this provision shall not authorize the construction of a building based on an architectural work or a work of urban architecture made by another person.
2. Personal use shall extend to use within a circle of persons who are personally related, in particular by blood or marriage, or who entertain social relations.

That was also explicitly said in Rzeczpospolita’s article entitled (this is my loosely translation of course) “Downloading MP3′s files is not a crime“.

No one in Poland will go to prison for downloading music or movies from the Internet. But you can get there for file sharing.

Computer software is protected on different rules. There are proper provisions included in the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with subsequent amendments.

Chapter XXXV
Offences against Property
Article 278. § 1. Whoever, with the purpose of appropriating, wilfully takes someone else’s movable property shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 2. The same punishment shall be imposed on anyone, who without the permission of the authorised person, acquires someone else’s computer software, with the purpose of gaining material benefit.

§ 3. In the event that the act is of a lesser significance, the perpetrator shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

§ 4. If the theft has been committed to the detriment of a next of kin, the prosecution shall occur upon a motion from the injured person.

§ 5. The provisions of § 1, 3 and 4 shall be applied accordingly to stealing energy or a card enabling the collection of money from a bank automatic cash dispenser [automatic teller machine]

There is also Chapter 14 entitled Criminal Liability in the Polish Act on Authors Rights and Neighbouring Rights – ARNR – (in Polish: ustawa o prawie autorskim i prawach pokrewnych) of 4 February 1994, published in Journal of Laws (Dziennik Ustaw) No 24, item 83, consolidated text of 16 May 2006, Journal of Laws (Dziennik Ustaw) No 90, item 631 with subsequent amendments.

C-275/06, Promusicae

January 29th, 2008, Tomasz Rychlicki

Directive 2000/31/EC of the European Parliament and of the Council of 8 June 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (‘Directive on electronic commerce’), Directive 2001/29/EC of the European Parliament and of the Council of 22 May 2001 on the harmonisation of certain aspects of copyright and related rights in the information society, Directive 2004/48/EC of the European Parliament and of the Council of 29 April 2004 on the enforcement of intellectual property rights, and Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) do not require the Member States to lay down, in a situation such as that in the main proceedings, an obligation to communicate personal data in order to ensure effective protection of copyright in the context of civil proceedings. However, Community law requires that, when transposing those directives, the Member States take care to rely on an interpretation of them which allows a fair balance to be struck between the various fundamental rights protected by the Community legal order. Further, when implementing the measures transposing those directives, the authorities and courts of the Member States must not only interpret their national law in a manner consistent with those directives but also make sure that they do not rely on an interpretation of them which would be in conflict with those fundamental rights or with the other general principles of Community law, such as the principle of proportionality.

Details about this case in the judgment C-275/06, Promusicae.