Archive for: Polish Criminal Code

Personal data protection, case II SA/Wa 1085/04

February 11th, 2010, Tomasz Rychlicki

In July 2003, the Inspector General for Personal Data Protection (GIODO) received a complaint in which a natural person, known as W.K. (personal data of the parties are removed from Polish courts’ judgments), requested the GIODO to issue an order to the Polish Internet company to reveal personal data of persons, against which the applicant wanted to initiate legal proceedings. The complaint showed that the online forum operated by the Internet company hosted defamatory content posted by persons using only nicknames.

W.K. proved that he had requested the Company to disclose full IP addresses of computers from which persons using only nicknames have sent messages to the online forum. The applicant also pointed out that the Regional Prosecutor’s Office refused to determine the perpetrators of the alleged defamation. The refusal was also upheld by the District Prosecutor’s Office.

W.K. pointed out that he brought a private accusation based on article 212 § 1 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments, to the Regional Court in K., against the persons who used given nicknames. The Court has issued an order in which it considered the private accusation legally ineffective because it included error in the form – i.e., no indication of names of defendants and their addresses, and W.K. did not clear these errors.

The GIODO has found that the purpose for which W.K. has applied for, i.e. the access to personal data, to assert his rights before the court, is legally justified. The use of these data by the applicant in the proceedings could not be considered as a violation of the rights and freedoms of persons whos personal data was collected because after the initiation of criminal or civil proceedings, personal data would be in a disposition the court.

The Company filed a complaint to the Voivodeship Administrative Court (VAC) in Warsaw. The Court in a judgment of 9 February 2005, case file II SA/Wa 1085/04, annulled the contested decision. The VAC held that the complaint was based on article 23(1) pt. 5 of the Polish Act of 29 August 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of 29 October 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of 6 July 2002, No. 101, item 926, with later amendments.

1. The processing of data is permitted only if:
5) processing is necessary for the purpose of the legitimate interests pursued by the controllers or data recipients, provided that the processing does not violate the rights and freedoms of the data subject.

The court did not accept that the wording of this provision can be interpreted as a rule requiring a data controller to reveal personal data at the request of the person whose requested data does not concern. The basis for such claims available for third parties for purposes other than inclusion in the data collection, was provided in the article 29(1) and (2) of the PPD. This provision being in force until 1 May 2004, did not give rise to demand release of the data, if the controller/administrator of the data were private sector.

The Court also held that the imposition of the duty of the data controller can only be done when the information being available to the controller falls into the category of personal data as defined in article 6(1) of the PPD.

personal data shall mean any information relating to an identified or identifiable natural person.

The requested information related to IP addresses of computers from which the messages were posted by certain people using certain nicknames. The Company argued that it does not require users of its forum to identify themselves in order to post information, what causes that, the IT administration system of the portal website hosting different forums, registers only IP address of computers of persons using the system, and it does not produce other data for identifying the user of a forum. Only a request to the operator of the telecommunication network could lead to the identification of the computer which was connected to the server hosting the portal and its forums. The Court cited English and Polish comentators and found that information, that without extraordinary and disproportionate effort can be “linked” with a specific person, especially by using readily and widely available sources, also deserve credit for their category of personal data. The identifiable person is defined in article 6(2) of the Polish Act of August 29, 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of October 29, 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of July 6, 2002, No. 101, item 926, with later amendments.

2. An identifiable person is the one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his/her physical, physiological, mental, economic, cultural or social identity.
3. A piece of information shall not be regarded as identifying where the identification requires an unreasonable amount of time, cost and manpower.

See also my posts entitled “Polish regulations on personal data protection” and “Polish case law on personal data protection“.

Polish court rules on the location of the Internet

February 9th, 2010, Tomasz Rychlicki

Arnold Buzdygan brought a private accusation before the Regional Court for Wrocław Śródmieście V Criminal Division against Olgierd Rudak. The indictment was based on article 212 § 2 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
§ 2. If the perpetrator commits the act specified in § 1 through the mass media
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

and article 216 § 2 of the CRC

§ 1. Whoever insults another person in his presence, or though in his absence but in public, or with the intention that the insult shall reach such a person,
shall be subject to a fine or the penalty of restriction of liberty .
§ 2. Whoever insults another person using the mass media, shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

The court in Wroclaw was obliged ex officio under article 35 § 1 of the Criminal Proceedings Code – CRPC – (in Polish: Kodeks Postępowania Karnego) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 89, item 555, with later amendments, to examine its jurisdiction and if found otherwise, to refer the case to the court with the proper one. The Court in Wrocław held that pursuant to article 31 § 1 of the CRPC, the jurisdiction is where the offense was committed (the teritorial jurisdiction).

Buzdygan claimed that the offense was commited in the article entitled “Trolls scour in the Net” which was published in the Polish magazine Przekrój of 11 November 2007, in addition the allegedly defamatory content was broadcasted by TV stations such as TVN, Polsat and TVP, in their news and in the Internet. Judge Jolanta Pol-Kulig held that

both the editorial office of Przekrój and the abovementioned TV stations and the Internet are located in Warsaw, one should consider that the commitment of a crime to the detriment of the private prosecutor was performed in that place.

The court in an order of 31 December 2008, case file VK 1595/08, referred the case to the Regional Court for Warszawa Śródmieście II Criminal Division. Interestingly, the court in Wrocław did not consider that the alleged offense was not committed.

See also my post entitled “Who is an Internet troll?“.

Polish court ordered Google to reveal e-mail correspondence

December 14th, 2009, Tomasz Rychlicki

Do you remember Cohen v. Google, Inc., 2009 WL 2883410 (N.Y. Sup. Ct. Aug. 17, 2009)? If not, just see this short description available at citmedialaw.org website. And it looks like we will have a similar case in Poland. The Polish court wants Google to reveal its users data.

In the articled entitled “Google ma ujawnić e-maile“, the Polish newspaper Rzeczpospolita reports recent case of Jakub Świderski. Mr Świderski is a former councillor of Sopot town and a party of a criminal suit brought against him based on a private accusation/charge by Jacek Karnowski, the President of Sopot, (who has been served with seven corruption charges) and his former deputy Cezary Jakubowski. Karnowski and Jakubowski argue that they were insulted and offended by statements allegedly published by Świderski in the onepage magazine “Obserwator sopocki” (in English: “Sopot’s Observer”) that was distributed during local elections in 2006. They also claim that their “public confidence” was jeopardized by Świderski’ actions.

“Obserwator sopocki” was published only three times in 2006. Authors of published texts suggested illicit trade premises and municipal corruption. Karnowski said he had been particularly offended by a photograph depicting his caricature with the envelope in his hand suggesting that he is taking bribes.

Mr Karnowski argues that Świderski was the publisher of “Obserwator sopocki”. The problem is that it has to be proven. The newspaper was distributed on the streets, it was not registered as the press, and the authors wrote under pseudonyms/nicknames: takata1, rzeźniksopocki, wasp. Świderski did not admit that these were his nicknames. So far, the only evidence Karnowski had, was a statement issued by Świderski in which he said “To ja jestem głównym “Obserwatorem”" (in English: “I am the leading “Observer”").

The secret trial before the Regional Court Gdańsk-Południe, case file II K 320/07, was started three years ago. Świderski was charged based on privisions of article 212 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

§ 2. If the perpetrator commits the act specified in § 1 through the mass media shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

§ 3. When sentencing for an offence specified in §1 or 2, the court may adjudge a supplementary payment in favour of the injured person or of the Polish Red Cross, or of another social purpose designated by the injured person a supplementary payment (nawiązka).

§ 4. The prosecution of the offence specified in § 1 or 2 shall occur upon a private charge.

A few months ago Jakubowski and Karnowski requested the Court to issue an order for the disclosure of e-mail correspondence of Świderski. As Rzeczpospolita reports they asked the Court to exempt Google and Microsoft from the secrecy of correspondence, and to investigate by the Police of all IP addresses of persons, who corresponded with Świderski from July to November 2006. These are addresses registered at gmail.com and hotmail.pl.

Rzeczpospolita reports that Judge Ludwika Małkowska took into account the request of Karnowski to admit the evidence of “official secret information” and exempted Google Kraków (foreign controlled company whos parent company is Google). Judge Małkowska ordered Google Kraków to provide information on persons who registered e-mail addresses related to aforementioned nicknames, identities of all persons who have access to these accounts, from which IP addresses the correspondence was retrieved and what messages were sent to which of the e-mail addresses, together with their content. Judge Małkowska stated that in this case it is necessary to determine the person or persons responsible for the defamatory publications.

Say it loud and clear!

November 16th, 2009, Tomasz Rychlicki

Downloading MP3s (or movies, pictures, press articles) is not illegal under the Polish law. According to article 23 of the Polish Act on Authors Rights and Neighbouring Rights – ARNR – (in Polish: ustawa o prawie autorskim i prawach pokrewnych) of 4 February 1994, published in Journal of Laws (Dziennik Ustaw) No 24, item 83, consolidated text of 16 May 2006, Journal of Laws (Dziennik Ustaw) No 90, item 631, with later amendments.

Section 3
Lawful Use of Protected Works
Art. 23.-1. It shall be permissible, without the consent of the creator, to make use free of charge, of a work that has already been disclosed. However, this provision shall not authorize the construction of a building based on an architectural work or a work of urban architecture made by another person.
2. Personal use shall extend to use within a circle of persons who are personally related, in particular by blood or marriage, or who entertain social relations.

That was also explicitly said in Rzeczpospolita’s article entitled (this is my loosely translation of course) “Downloading MP3’s files is not a crime“.

No one in Poland will go to prison for downloading music or movies from the Internet. But you can get there for file sharing.

Computer software is protected on different rules. There are proper provisions included in the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Chapter XXXV
Offences against Property
Article 278. § 1. Whoever, with the purpose of appropriating, wilfully takes someone else’s movable property shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 2. The same punishment shall be imposed on anyone, who without the permission of the authorised person, acquires someone else’s computer software, with the purpose of gaining material benefit.

§ 3. In the event that the act is of a lesser significance, the perpetrator shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

§ 4. If the theft has been committed to the detriment of a next of kin, the prosecution shall occur upon a motion from the injured person.

§ 5. The provisions of § 1, 3 and 4 shall be applied accordingly to stealing energy or a card enabling the collection of money from a bank automatic cash dispenser [automatic teller machine]

There is also Chapter 14 entitled Criminal Liability in the Polish Act on Authors Rights and Neighbouring Rights – ARNR – (in Polish: ustawa o prawie autorskim i prawach pokrewnych) of 4 February 1994, published in Journal of Laws (Dziennik Ustaw) No 24, item 83, consolidated text of 16 May 2006, Journal of Laws (Dziennik Ustaw) No 90, item 631 with later amendments.

See also my previous post entitled ““Pirate” politician“.

Comparative law – literally, word for word

January 15th, 2009, Tomasz Rychlicki

Recent changes in the Polish Criminal Code regarding “computer crimes” that were introduced by the the Act to amend the Act – the Criminal Code and certain other acts of 24 October 2008, Journal of Laws (Dziennik Ustaw) No. 214, item 1344, which entered into force on 18 December 2008.

Chapter XXXIII. Offences against the protection of information

Article 265. § 1. Whoever discloses or, in violation of the law, uses information which constitutes a state secret

shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 2. If the information specified in § 1 has been disclosed to a person acting in the name of or for a foreign entity, the perpetrator

shall be subject to the penalty of deprivation of liberty for a term of between 6 months and 8 years.

§ 3. Whoever unintentionally discloses the information specified in § 1, with which he has become acquainted in the performance of his official function or authorisation delegated to him

shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

Article 266. § 1. Whoever, in violation of the law or obligation he has undertaken, discloses or uses information with which he has become acquainted with in connection with the function or work performed, or public, community, economic or scientific activity pursued

shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

§ 2. A public official who discloses to an unauthorised person information which is an official secret or information with which he has become acquainted in the performance of his official duties and whose disclosure can endanger a legally protected interest

shall be subject to the penalty of deprivation of liberty for up to 3 years.

§ 3. The prosecution of the offence specified in § 1 shall occur on a motion of the injured person.

Article 267. § 1. Whoever, without being authorised to do so, acquires information not destined for him, by opening a sealed letter, or connecting to a wire that transmits information or by breaching electronic or bypass, electronic, magnetic, information or other special protection for that information

shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

§ 2. The same punishment shall be imposed on anyone, who without being authorised to do so acquires access to whole or part of an information system.

§ 3. The same punishment shall be imposed on anyone, who, in order to acquire information to which he is not authorised to access, installs or uses tapping, visual detection or other special equipment.

§ 4. The same punishment shall be imposed on anyone, who imparts to another person the information obtained in the manner specified in § 1-3 discloses to another person.

§ 5. The prosecution of the offence specified in § 1–4 shall occur on a motion of the injured person.

Article 268. § 1. Whoever, not being himself authorised to do so, destroys, damages, deletes or alters a record of essential information or otherwise prevents or makes it significantly difficult for an authorised person to obtain knowledge of that information,

shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.

§ 2. If the act specified in § 1 concerns the record on an electronic information carrier, the perpetrator shall be subject to the penalty of deprivation of liberty for up to 3 years.

§ 3. Whoever, by committing an act specified in § 1 or 2, causes a significant loss of property

shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 4. The prosecution of the offence specified in § 1-3 shall occur on a motion of the injured person.

Art. 268a. § 1. Whoever, without being authorised to do so, destroys, damages, removes, changes lub makes an access to data difficult or in a significant way disrupts or prevents from the automatic process, gathering or transmission of such data,

shall be subject to the penalty of deprivation of liberty for up to 3 years.

§ 3. Whoever, by committing an act specified in § 1, causes a significant loss of property

shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 3. The prosecution of the offence specified in § 1 or 2 shall occur on a motion of the injured person.

Article 269. § 1. Whoever destroys, deletes or changes a record on an electronic information carrier, having a particular significance for national defence, transport safety, operation of the government or other state authority or localgovernment, or interferes with or prevents automatic collection and transmission of such information

shall be subject to the penalty of deprivation of liberty for a term of between 6 months and 8 years.

§ 2. The same penaly should apply to a person who commits offences mentioned in § 1, by destroying or replacing the information carrier or by destroying or damaging a device serving for automatic processing, gathering or transfering of information data.

Art. 269a. Whoever, without being authorised to do so, by transmission, destroy, removing, damaging or changing information data, in significant manner disrupts the work of a computer system or a teleinformatic network,

shall be subject to the penalty of deprivation of liberty for a term of between 3 months up to 5 years

Art. 269b. § 1. Whoever, produces, acquires, sells off or makes available to other persons devices or computer software adapted to perform a crime mentioned in art. 165 § 1 pt 4, art. 267 § 2, art. 268a § 1 or § 2 in connection with § 1, art. 269 § 2 or art. 269a, and computer passwords, access codes or other data that allow for the access to information stored in a computer system or teleinformatic network,

shall be subject to the penalty of deprivation of liberty for up to 3 years.

§ 2 In case of a conviction for an offense referred to in § 1, the court rules the forfeiture of items, and may decide their forfeiture if they were not the property of the perpetrator.

Here is also one ODT, 14KB, file with both versions. Please send your comments regarding the translation.

A sequel to a story on websites that should be registered as press

January 14th, 2009, Tomasz Rychlicki

I wrote an article entitled “Polish Courts Say Websites Should Be Registered As Press” together with my good friend Piotr Waglowski. It was recently published in the Computer and Telecommunications Law Review, C.T.L.R. 2009, 15(1), 9-14.

There is also a sequel to Leszek Szymczak’s story. On 16 December 2008, the Regional Court in Słupsk issued a judgment, case file II K 367/08, in which Leszek Szymczak was acquitted from charges of “publishing press material featuring criminal content that publicly incited its readers to commit offences”. As you may read from our article, this case concerned posts that were published at the online forum of http://gazetabytowska.pl website (also accessible at http://gby.pl), which – according to the Public Prosecutor’s Office – included incitement to commit crime. Charges were based on article 49a of the Polish Act of 26 January 1984 on Press law – APL – (in Polish: ustawa Prawo prasowe), Journal of Laws (Dziennik Ustaw) No 5, item 24, with later amendmets.

An editor who unintentionally published press material that featured criminal content mentioned in article 37a hereof, shall be subject to a fine penalty or the restriction of liberty.

In connection with article 255 of the Criminal Code of 6 June 1997, Journal of Laws (Dziennik Ustaw) No. 88, item 553, with later amendments.

1. A person who publicly calls for committing an offence of a fiscal crime shall be subject to a fine penalty, the restriction of liberty or imprisonment for up to two years.
2. A person who publicly calls for committing a crime shall be subject to the restriction of liberty for up to three years.
3. A person who publicly praises the commitment of a crime shall be subject to a fine penalty amounting to up to 180 daily rates, the restriction of liberty or imprisonment for up to one year.

The court ruled that according to the Polish Press Law, Leszek Szymczak is the publisher and the editor, however the entries that were posted by visitors of his website did not constitute a press material.

See also my post entitled “Criminal minded“.

Polish Courts Say Websites Should Be Registered As Press

January 14th, 2009, Tomasz Rychlicki

This article was originally published in the Computer and Telecommunications Law Review, C.T.L.R. 2009, 15(1), 9-14.

Facts and legal dispute
A Polish TV channel, TVN, in its show entitled UWAGA broadcast footage that criticised the work of a debt collector, Wojciech D., who held office in a Pomeranian town of Bytów. Internauts were prompt to comment on his work. This boiled down mostly to offensive statements, some of which are provided below:

I suggest we lynch the guy, if legal methods failed. It seems that we’ll have to fight impudence with impudence! Citizens!!! This goes out to you.

How about we settled it ourselves, people? We could take him to the woods, take away his clothes and throw him out onto the streets, that would be fun!!!

I was lucky enough not to have anything to do with this guy. I am surprised with those, who had so much trouble with him, though. If he sold my apartment or broke my mum’s hand I would spare some change and call the boys from the hood. They would have known what to do with him ;)

Hang the collector by the balls in the centre of the town, shove a pound or two of drawing pins and broken glass into his ass, but on the other hand he might enjoy that … and let him see what suffering is … the struggle continues….

Fill him with carbide and add some water. Oh, that would be so nice for him, damn bureaucrat. When he fills up with gasses, light him up. A nice effect, only shreds would remain. Still, it’s just wishful thinking, he can be seen no-where around the town. We can’t get him.

The comments were published mainly on the GazetaBytowska. pl (Bytów Newspaper) website, also accessible at gby.pl. The authorities (police and prosecutor) addressed Leszek Szymczak, the administrator of the website, and asked him to hand over particulars of the commentators. The authorities intended to charge those persons with punishable threats addressed at the collector. Leszek Szymczak did not, however, provide the data. The police called the comments “press material” and the Public Prosecutor’s Office in Bytów recognised that the administrator of the website was responsible for the comments published on the gby.pl forum. The Public Prosecutor’s Office also maintained that a website is a daily newspaper, by virtue of which under the press law it needed to be registered. Following the line of reasoning of the prosecutor, Leszek Szymczak ran the gby.pl website (i.e. he published a daily newspaper) without proper registration. The prosecution charged Mr Szymczak with the first accusation. Under article 45 of the Polish Act of 26 January 1984 on Press law2 – APL – (in Polish: ustawa Prawo prasowe), Journal of Laws (Dziennik Ustaw) No 5, item 24, with later amendmets

Anybody who publishes a daily newspaper or a periodical without registration or with registration suspended is subject to a fine penalty or the restriction of liberty

in connection with article 7(2) pt. 2 of the APL

A daily is a general-information periodical print or a message transmitted via sound or sound and image published more frequently than once a week.

The manner of registration of dailies and periodicals is provided in article 20 of the PLA.

1. Publishing a daily newspaper or a periodical necessitates registration with a voivodeship court having jurisdiction in the seat of the publisher, hereinafter referred to as ‘the registrar body’. In such cases the regulations of the Code of Civil Procedure on nonlitigious proceedings, together with amendments resulting herefrom, shall apply.

2. A registration application mentioned in section 1 hereof shall include:
1) the title of a daily newspaper or a periodical together with the seat and an exact address of the editorial office,
2) particulars of the editor-in-chief,
3) specification, seat and exact address of the publisher,
4) the daily newspaper’s or the periodical’s frequency of publishing.

3. A registrar court shall substantiate the decision to register a daily newspaper of a periodical only upon a motion.

4. A daily newspaper or a periodical can be published if a registrar body failed to decide upon the application for the registration within 30 days from the day of the submission of the application.

5. Should the information mentioned in section 2 hereof be altered, the registration body shall be immediately noticed.

The prosecution also alleged that Leszek Szymczak published press material featuring criminal content that publicly incited its readers to commit offences. For that reason the prosecution pressed the second charge. Under article 49a of the PLA

an editor who unintentionally published press material that featured criminal content mentioned in article 37a hereof, shall be subject to a fine penalty or the restriction of liberty.

Under article 255 of f the Criminal Code3 – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments

1. A person who publicly calls for committing an offence of a fiscal crime shall be subject to a fine penalty, the restriction of liberty or imprisonment for up to two years.

2. A person who publicly calls for committing a crime shall be subject to the restriction of liberty for up to three years.

3. A person who publicly praises the commitment of a crime shall be subject to a fine penalty amounting to up to 180 daily rates, the restriction of liberty or imprisonment for up to one year.

Article 37a of the APL reads

If a person is sentenced for a crime committed by publishing a press material, the court may adjudicate an additional penalty constituting in the forfeiture of the press material.

The prosecution maintained that Leszek Szymczak committed the crime of the nonfeasance of duties. The prosecution did not, however, establish what actually was meant by lynching, or at whom the comments were directed (the collector’s name was not even once mentioned on the gby.pl website).
It is noteworthy that Leszek Szymczak had registered a daily newspaper entitled Gazeta Bytowska when it was published in print4. In the period pointed at in the indictment, that is from April 13, 2004 to January 9, 2006, the court did not pass a decision that would make the registration invalid.

The Regional Court in its sentence passed on 7 March 2007 (with Judge Tadeusz Stodola presiding) held that the first charge was legitimate, but owing to the minor social harm it remitted proceedings in the case. As for the second charge, the court held that posts of an internet forum indeed constitute press material and as such should be revised by editors and if they encounter inappropriate material, they should delete it. The court failed, however, to point to a specific law regulation that would necessitate Leszek Szymczak to delete any posts from his forum. Also this charge was dismissed. The court focused on the interpretation of the notion of “press material” and in this venture interpreted it correctly. The rub, though, remains in the fact that in this case the utmost importance should have been attached to the interpretation of the notions of a “daily newspaper” and a “periodical” since only those two kinds of press need to be registered with a court. Both parties appealed Leszek Szymczak appealed to overrule the judgment and dismiss the charge punishable under article 45 of the APL. He substantiated his appeal with, first of all, article 17(1)2 of the Criminal Proceedings Code owing to the fact that under the law in effect publishers did not have to register websites in the register of daily newspapers and periodicals. Secondly, he also claimed that the regulations that impose such an obligation are too unclear to be a source of criminal liability according to the principle nulla poena sine lege certa et stricta (no punishment unless there is certain and strict law). Leszek Szymczak also appealed to change the sentence by acquitting the defendant from the offence provided in article 49a of the PLA owing to the fact that the defendant did not know about the illegal nature of the information (posts were uploaded/written by internauts) that the prosecution drew upon in the offence description. Because of that, his argument continued, the defendant could not be criminally liable, that is under article 14 (1) of the Polish Act of 18 July 2002 on Providing Services by Electronic Means5 – PSEM – (in Polish: ustwa o świadczeniu usłóg droga elektroniczną), Journal of Laws (Dziennik Ustaw) No. 144, item. 1204, as amended and article 14 of the Directive 2000/31/EC6. Leszek Szymczak also appealed to completely overrule the abovementioned sentence and send the case back to the court of first instance for reconsideration.

The prosecution appealed against the judgment on the grounds of a mistake in factual findings that formed the basis for the judgment. It argued that the court was wrong to assess the social harm of the offence described in article 45 of the APL as minor (publishing an internet daily newspaper gby.pl without proper registration) and to discontinue proceedings with respect to this charge. Still further, a correct analysis of the subjective and objective features of the offence, particularly the legal interests undermined by the offence and the conduct of the defendant, all lead to other conclusions, the prosecution reasoned.

The prosecution also maintained that the court made another mistake in the factual findings forming the basis for the decision. The court allegedly was wrong to assess the social harm of the offence described in article 49a of the APL as minor (unintentional publishing of press material with criminal content) and to discontinue proceedings with respect to this charge. A correct analysis of both subjective and objective features of the offence, including legal interests undermined by the offence and negative consequences experienced by the aggrieved party, especially in the party’s life and professional situation, the gravity and manner of the violation of obligations resting with the defendant, including the considerable time period of publication of the criminal content on the gazetabytowska.pl website and the conduct of the defendant after having acquainted himself with the content, all lead to the conclusion that social harm of the acts performed by the defendant cannot be described as minor, the reasoning continued.

The District Court in Slupsk asked the Prosecutor’s Office to delegate to the court the case of posts published on the website. The court observed that when the Prosecutor’s Office asked the administrator of the website to hand over information about the posts of possibly criminal nature, he indeed handed it over. Afterwards the Office discontinued the proceedings–having found no features of a prohibited act–but then pressed charges and indicted the editor.

The District Court in its judgment of 7 February 2008 held that managing an internet website necessitates registration. In consequence, running a website without registration violates the law. The court held that the reasoning of the Regional Court was correct and, similarly to the Regional Court, it discontinued the proceedings (at the same time ascertaining that the act had caused minor social harm). If it was not for that decision of the court, taking the face value of those sentences, anybody could be put on trial for running a website without registration. In this part the case ends with a discontinuance of the case for a year. The District Court in its decision on appeal made some controversial statements. In particular, the court decided that publishing information on the internet with the use of sound and image depends on the publisher, so any soundless publication still complies with the definition of a daily newspaper/a periodical.

As concerns the second charge, the District Court overruled the former sentence and delegated the case for another hearing to the Regional Court. Following gby.pl, the court stated that a web portal, as a press title, needs to be registered: the District Court also suggested that

in a subsequent examination of the indictment, the Court should entertain upon sending case files back for pretrial proceedings due to its considerable shortcomings.

This might mean (the Regional Court still has to determine it) that the posted messages (posts) published on the forum might not have constituted an offence.

Discussion
If we go as far as to admit that in the light of the definition provided in article 7(2) pt. 1 of the APL a website (such as gby.pl) is indeed “press”, considerable doubts still remain whether such a website is a “daily newspaper” or a “periodical”. Both definitions refer to the notion of “print” but also go further to encompass more media by providing that is might convey “sound or sound an image information”. Owing to the general lack of sound in internet websites, it is hard to deny that this regulation does not describe such a publishing medium. Article 7(2)(2) of the APL provides

1) press shall be defined as periodical publications that do not form a single and complete whole, are published at least once a year and bear a constant title or a name, a number and a date, in particular: daily newspapers and periodicals, news agencies bulletins, constant telex messages, bulletins, radio and television broadcasts, film chronicles; press shall also be understood as any and all existing and emerging in the course of technological advancement means of mass media, including broadcasting stations and television and radio broadcasting systems installed in facilities that distribute periodically publications via print, image, sound or any other broadcasting means; the press shall also encompass teams of people and individuals that deal with journalism,

2) a daily newspaper shall be a general-information periodical print or a sound or sound and vision message published more frequently than once a week,

3) a periodical shall be a periodical print published at least once a year but not more frequently than once a week; this regulation shall apply also to messages broadcast by means of sound or sound and vision and any other means than those described in section 2.

Similar Polish case law
Let us turn to Polish judicature concerning similar cases. The Appellate Court in Rzeszów ruled that an internet website cannot be recognised as a “daily newspaper” or a “periodical” as understood by the APL7. In another case, the Appellate Court in Warsaw recognised a teletext service not as a daily newspaper but as a text message as understood by article 4(9) of the Polish Act on Broadcasting8 – LOB – (in Polish: Ustawa o radiofonii i telewizji) of 29 December 1992, Journal of Law (Dziennik Ustaw) of 1993, No 7 item 34, consolidated text of 19 Novemver 2004, Journal of Laws (Dziennik Ustaw) No 253 item 2531, with later amendments. The press law provides the definition of “press material”. Article 7(2)4 of the Act reads

press material shall be any informative, journalistic, documental or other text or image already published or provided to the publisher and intended for publication in press, irrespective of the means of transmission, type, form, destination or authorship of the material.

The decision of the Supreme Court the criminal Chamber of 28 September 20009 in the case of “traditional media” reads as follows

reader’s letters constitute press material as understood by article 7 (2) 4 of the Press Law of 26 January 1984 (Dz. U. 1984 No. 5 pt. 24 as amended) under the condition that the letters have been sent to the editorial office with the intention to be published. The editor-in-chief is responsible for their publication. A reader’s letter can be, therefore, published after the information contained in the letter has been cautiously and diligently verified as provided for by article 12 (1) of the Press Law. Publishing a reader’s letter does not constitute quotation of another individual’s statement. In view of that the editor-in-chief is still responsible for its publication.

The Supreme Court’s (Customs Chamber’s) decision of December 7, 199310 reads as follows:

Article 24 (1) together with article 23 of the Criminal Code and article 37 of the Press Law of 26 January 2984 provide the basis for a non-property claim of the violation of personal interests in a press material. The claim may be filed against a publisher.

The authors also need to mention that the Republic of Poland is a civil law country and there are no binding precedents. Also, the Supreme Court’s resolution is only binding for the court that referred with a specific question but in practice Polish courts often apply rules that were interpreted by the Supreme Court.

Different European jurisdictions
The decision11 of the Appellate Court in Berlin (Landgericht) of May 31, 2007 is an apt example of a similar case in German jurisdiction. The case revolved around the responsibility of a moderator of a website for posts made by third persons and the theory of the so-called “impartial internaut”. The court held that a moderator of an online portal is burdened with no general obligation to review (oversee) posts uploaded by third parties. The case involved a dispute between the administrator of the meinprof.de portal, a website used to evaluate professors of colleges and universities, and one of the evaluated professors who was dubbed on meinprof.de a “psycho” and “the bottom one”. Even though the moderator, having received a notice, did remove the posts, the professor filed a complaint with the court. The court held, however, that in this case the posts boiled down merely to airing one’s opinion. The justification of the ruling reads as follows

Under the press law, any publisher Verbreiter can be seen as an offender (Prinz/Peters, Medienrecht, 1999, Rn, 35). The publisher is anybody who, as in this case, contributes to the distribution of a statement. (BGH NJW 1986, 2503 (2504)–Ostkontakte).

Any third parties that (having been viewed objectively) by their actions support (financially) illegal actions that infringe legally protected interests cannot be liable for the infringement in civil cases. The condition for actual liability as an offender is the default of the obligation of review and control. The specific circumstances of a given case should decide if and to what extent the control is or might be compulsory. The decision should also depend on the determination of the function and tasks of the person charged with infringement and that person’s responsibility. The defendant, being an administrator of a platform for exchanging views, did not infringe the obligation of such review/control. Individuals who administrate online portals do not have to control all their content. Owing to the immense amount of content, such control would be unfeasible12.

Even the condition that in the rules of the website the defendant did reserve the right to delete illegal posts does not lead, contrarily to the assertions of the plaintiff, to the recognition of a general obligation to control content. Content control is obligatory only when a person, the personal interests of whom have been violated, brings an accusation in the form of a written notice. The notice should contain a detailed description of the violated personal interests with respect to a specific part of the content. In such a case the administrator of a portal does not have to conduct extensive searches at high personal and technological expense. The administrator will only have to check if the post that the accusation concerns can be described (from the perspective of an objective internaut) as conforming with the law. The defendant, dissimilarly to the administrator of a portal in the case decided upon by the BGH that the plaintiff evoked, did not violate the obligation of control. The administrator of the portal, upon the reception of a message from the plaintiff that centred upon the slanderous post, immediately deleted the post from the forum13.

No crime where there are doubts
In the Polish law, the regulations of the Act on Providing Services by Electronic Means, for example article 14(1), provide that

A person who gives access to the contents of a network IT system to a customer, where the customer stores data, is not aware of the illegal features of the data or activity connected with the data and upon receiving an official notification or credible information about the illegal features of the data or activity connected with it, immediately bars access to the data, shall not be responsible for the data.

Chapter 3 of the PSEM, entitled “Exemption of responsibility of the service provider for providing E-services”, includes, as the title itself suggests, a number of other exemptions. The chapter concludes with a regulation in article 15 that reads

Any company that renders services described in article 12-14 shall not be required to verify the data described in article 12-14 that is transmitted, stored or made available by that company.

Having reviewed the above regulations, it seems there are two that actually collide with each other–one from the PL and the other from the PSEM. The modus operandi should be drawn entirely from provisions of the law. Having determined it, only now can we turn to the analysis of regulations such as, for example, article 25(4) of the APL, which reads

The editor-in-chief shall bear the responsibility for the content of the material prepared by the editorial team and the organizational and financial issues of the company within the frames set up in the articles of association or relevant regulations. The editor-in-chief is also responsible for safeguarding linguistic correctness of press materials and counteracting their vulgarization.

Another article of the APL, already mentioned above, article 54b (included in Chapter 8, “Proceedings in press cases”) reads

Provisions on legal responsibility and proceedings in press cases shall be applied to the infringement of law connected with the transmission of human thought via means designed to distribute information, irrespectively of the technology of transmission, especially nonperiodical publications and other print, vision and sound products, other that press.

All criminal cases should be decided on in the scope of the principle nullum crimen sine lege (no crime without a law). The aforementioned cases are indeed riddled with doubts. The authors can hardly adhere to the claim that this clause might mean legal liability for the lack of registration of press other than a “daily newspaper” or a “periodical”, also because of the fact that the regulation covers mass media other than the press. In the authors’ opinion, the gby.pl website can be recognised as “press” but is neither a “daily newspaper” nor a “periodical”.

The legal basis is article 414 of the Criminal Proceedings Code

1. After the court proceedings have been instigated, if circumstances precluding prosecution or information substantiating conditional discontinuance of the proceedings are recognized, the court may decide to discontinue the proceedings or discontinue the proceedings conditionally. However, if circumstances provided in article 17(1) 1 and 2 are recognized, the court may issue an acquitting judgement, unless the offender at the time of the offence was non compos mentis

and article 66 (with subsequent ones) of the Criminal Code

The court may conditionally discontinue penal proceedings if the guilt and social harm of the illegal act are nor considerable, circumstances of the act are doubtless and the attitude of the offender that has not been punished for an intentional crime, the offender’s personal conditions and former lifestyle substantiate the speculation that the offender will obey the rule of law and especially that will not commit another crime…

Conclusion
Since the gby.pl is neither a daily newspaper nor a periodical, by discontinuing the proceedings in the case the courts apparently did not recognise that “the act was not committed or there was a lack of information sufficiently substantiating the suspicion of its committal” or that “the act did not bear the features of an illegal act or the law provided that the offender did not commit a crime”.

The Polish Act on Providing Services by Electronic Means was to implement into the Polish legislation the European Parliament and Council Directive 2000/31 of June 8, 2000 on certain legal aspects of information society services, in particular electronic commerce, in the internal market (Directive on electronic commerce) and the European Parliament and Council Directive 2002/58 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications)14. The way Poland incorporated those two Directives into a single domestic legal act stirred considerable criticism15.

Many individuals pointed out that the implementation of the Directives boiled down mainly to the literal translation of their content into Polish, which was then put into a single legal act. In consequence, the Act draws on inconsistent terminology, for instance in some of the regulations the Polish Act uses the term “an information recipient” and in others “a service recipient”. Another problematic issue is the fact that the Act refers to other regulations provided in other domestic legal acts (e.g. the Telecommunications Law Act of 21 July 200016). What is even more, the regulations of the Polish Act do not explicitly set out if a service provider is exempt from civil liability or also criminal liability resulting from rendering e-services. Even further, the European Council reminded Poland that it had implemented the Directive 2000/31 only partially17. As a result, Poland initiated another legislative process that aimed at full implementation of the Directive, especially with regard to the implementation of the “country of origin” rule and the rule of the freedom of providing e-services.

Apart from the imprecise PSEM and the 1984 Press Law Act, which is a legal act originating practically in another era18, the only legal act that directly refers to internet publications is the Access to Public Information Act of September 6, 2001. The Act introduced an “official teleinformation publishing system” in the form of a “unified webpage system” (article 8). The only Polish legal act that suggests how to create websites (for public institutions to comply with the obligation to publish public information) is the Minister’s of Interior and Administration Regulation of January 18, 2007 on the Public Information Bulletin (BIP). Under article 9(2) of the Regulation

Where a subject, referred to in article 4(1) and (2) of the Act, owns an internet website, the subject’s own BIP website shall be created as a part of the website by placing a link with the BIP logotype that shall give direct access to the subject’s BIP website.

Apart from the imprecise definition of the Public Information Bulletin, which functions on the basis of the aforementioned Access to Public Information Act, there can also be the socalled “own website” which, even though provided for in the Regulation, is not defined therein. In consequence, while creating websites, public administration bodies are bound by no other rules than those existing in the “outer world”. Having recognised that, the authors put forward a statement that since in Leszek Szymczak’s case the charges (publishing a periodical without a registration) were not dropped owing to the lack of features of a prohibited act, the same charges (publication of internet websites without proper registration) can be brought against the highest public institutions in Poland. The authors asked the Chief Police Officer on May 8, 2007 the following: do these “own” internet websites (of public institutions) exist legally? The answer was that the Polish police does not register their internet websites with a registration court.

In a democratic country observing the rule of law, the situation of a public institution, which under art.7 of the Polish Constitution “functions on the basis and within the limits of the law”, differs from the situation of a subject functioning on the basis of economic freedom. Apart from publishing a BIP bulletin, Polish public institutions can also publish daily newspapers and periodicals (which is allowed under article 8 of the APIA)

The publisher can be a legal entity, a natural person or a different organizational entity, even if it is not a legal entity. In particular a publisher can be a public institution, a staterun company, a political organization, a labour union, a cooperative, a selfgovernment body and other social organization, a church or any other religious organization.

If this is the case, public administration institutions should also fulfil legal conditions on the publication of such a newspaper or a periodical. The current practice shows, nevertheless, that the public administration massively creates internet websites and does not register it with registration courts. The Chief Officer of the Police answered the authors19.

The Act of 28 January 1984, the Press Law, does not recognize internet websites as daily newspapers or periodicals.

The first President of the Supreme Court, Lech Gordocki, made a similar statement, later published in the press20.

I am not going to apply to the Regional Court for the registration of the website of the Supreme Court since the Act does not provide such an obligation.

Neither the President of the Republic of Poland, nor the Commissioner for Civil Rights Protection, the Prime Minister of Poland and none of the Polish ministries and state agencies registered their own websites, which functionally do not differ from news websites. Then, if a court held that an individual who published a periodical without proper registration brought minor social harm, the court could rule otherwise if the charged entities were the police, the Prosecutor’s Office, the Ombudsman or even the President, who apart from BIP bulletins all publish news websites without registering them with registration courts21.

As already mentioned, the only normative suggestion concerning internet websites in Poland comes in the form of executive regulations relating to the Access to Public Information Act. These regulations do not differentiate between “websites”, “portals”, “vortals”, etc. Generally we do not know what a “portal”, a “vortal” or a “blog” are. However, Polish courts pass judgments in which judges try wrongly to differentiate between those terms22. If there is no difference between publishing a periodical necessitating proper registration and publishing a blog, then perhaps we should also scrutinise the publishing activities of Marek Siwiec, a Vice-President of the European Parliament, who has been publishing his ruminations at http:// mareksiwiec.blog.onet.pl also without registration with a registration court since 2007.

Recent press releases in Poland induced several individuals to apply to registration courts for the registration of blogs as daily newspapers and periodicals (as understood by the Polish Press Law). In some of those applications courts decided to enter names of the blogs to the Register of Daily Newspapers and Periodicals. This, however, under the Polish law, does not mean that in Poland you need to register a blog with a registration court. First of all, such an application should be filed before publishing has started, but that, again, makes it impossible for a court to decide if a given activity necessitates registration. Secondly, courts cannot deny registration if an individual or an organisation files for the registration of something that is neither a daily newspaper nor a periodical. Under article 21 of the APL

A registrar body shall deny the registration if:
[1] the application does not contain data that the Act describes (the daily newspaper’s or the periodical’s title, the seat of the publisher and the exact address of the editorial office, the particulars of the editor-in-chief, the particulars of the publisher, the frequency of publishing of the daily newspaper or the periodical) and

[2] if granting registration would constitute infringement of the right to the legal protection of an existing press title.

Owing to the above, Polish registration courts did enter the names of blogs provided by their applicants23.

In the case of Leszek Szymczak, the defence asked the Polish Commissioner for Civil Rights Protection to apply for a revocation of the sentence (it can be applied for only by the Commissioner and the Prosecutor General). By the end of June 2008 the defence also filed a constitutional complaint (see the website of the Helsinki Foundation for Human Rights24).

P.S.
On 16 December 2008, the Regional Court in Słupsk issued a judgment in which Leszek Szymczak was acquitted from charges of “publishing press material featuring criminal content that publicly incited its readers to commit offences”. I recommend you to read my post entitled “A sequel to a story on websites that should be registered as press“.

Footnotes
1. Case file VI Ka 409/7.
2. Journal of Laws (Dziennik Ustaw) No.5, pos. 24, with later changes (APL).
3. Journal of Laws (Dziennik Ustaw) No.88, pos. 553, with later changes (the PC).
4. On the basis of the decision of the Voivodeship Court in Slupsk Ns-Rej.Pr 8/91 of September 12, 1991.
5. Ustawa z dnia 18 lipca 2002 r. o świadczeniu usług droga elektroniczna, Journal of Laws (Dziennik Ustaw) of September 9, 2002, No.144, pos.1204, with amendments.
6. Directive 2000/31 of the European Parliament and of the Council of June 8, 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (Directive on electronic commerce) [2000] OJ L178/1-16.
7. Case file I ACa 277/05.
8. Case file I ACa 601/98. Broadcasting Act, Ustawa z dnia 29 grudnia 1992 r. o radiofonii i telewizji, Journal of Laws (Dziennik Ustaw) of 2004, No. 253 item 2531.
9. Case file V KKN 171/98.
10. Case file III CZP 160/93.
11. Az. 27 S 2/07.
12. Decision of December 7, 2006, Az. 10 W 106/06; BGH NJW 2004, 3102.
13. J. Kurek, Comment available at http://prawo.vagla.pl/node/7341#comment-4526 [Accessed November 10, 2008].
14. [2002] OJ L 201/37-47.
15. G. Raczka, Ochrona Uslugobiorcy uslug elektronicznych (Torun 2007), p. 63, W. Iszkowski, X. Konraski, “Elektroniczne uslugi”, Rzeczpospolita newspaper, March 4, 2003.
16. Journal of Laws (Dziennik Ustaw) of 2001, no.73, pos. 852, as amended.
17. Commission of the European Communities, First Report on the application of Directive 2000/31 of the European Parliament and of the Council of June 8, 2000 on certain legal aspects of information society services, in particular electronic commerce, in the Internal Market (Directive on electronic commerce), Brussels, November 21, 2003, COM(2003) 702 final, p. 19.
18. It is noteworthy that August 17, 1991 is a symbolic date recognised as the inception of the Polish internet, i.e. the first time when via an IP protocol the Physics Department of the Warsaw University sent data to the Computer Centre of the Copenhagen University.
19 Letter of June 19, 2007 regarding the answer of the spokesman of the Chief Officer of the Police concerning websites run by the police. See http:// prawo.vagla.pl/node/7329 [Accessed November 10, 2008].
20. In a Polish daily newspaper, Rzeczpospolita, on September 6, 2007.
21. See http://www.president.pl, http://www.kprm.gov.pl/english, http:// www.rpo.gov.pl/index.php?s=3 [Accessed November 10, 2008].
22. See Judgment the district court in Warsaw (IV Civil Division) of June 9, 2008, case file Act IV C 806/07.
23. See http://olgierd.bblog.pl/wpis,moj;nowy;organ;prasowy,7042.html [Accessed November 10, 2008].
24. See http://www.hfhrpol.waw.pl/precedens/pl/aktualnosci/sprawa-gazety-bytowskiej-w-tk.html [Accessed November 10, 2008].

“Pirate” politician

December 23rd, 2008, Tomasz Rychlicki

According to a recent article which is available at wp.pl website, in Polish language, the court trial of Tomasz Sz., former member of the Civic Platform and deputy mayor (or vicepresident if you prefer) of Kraków city will start in mid-January next year. Tomasz Sz. along with other former Kraków city’s managers is facing charges for mismanagement and corruption. The prosecutor also alleges that Tomasz Sz. in order to achieve financial gain, downloaded from the Internet illegally copied software for GPS devices without the consent of its producer and programs that were created for removing security measures implemented to prohibit the operation of software in full. The price of the aforementioned software (with maps included) was estimated at 850 PLN. The said software was found on the Parliamentary’s laptop assigned to the politician.

Now, what about Polish criminal law regulations on computer (and not only as you can see from the above example) software copyright infringement? There are proper provisions included in the Criminal Code (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Chapter XXXV
Offences against Property
Article 278. § 1. Whoever, with the purpose of appropriating, wilfully takes someone else’s movable property shall be subject to the penalty of deprivation of liberty for a term of between 3 months and 5 years.

§ 2. The same punishment shall be imposed on anyone, who without the permission of the authorised person, acquires someone else’s computer software, with the purpose of gaining material benefit.

§ 3. In the event that the act is of a lesser significance, the perpetrator shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.

§ 4. If the theft has been committed to the detriment of a next of kin, the prosecution shall occur upon a motion from the injured person.

§ 5. The provisions of § 1, 3 and 4 shall be applied accordingly to stealing energy or a card enabling the collection of money from a bank automatic cash dispenser [automatic teller machine].

There is also the Polish Act on Authors Rights and Neighbouring Rights – ARNR – (in Polish: ustawa o prawie autorskim i prawach pokrewnych) of 4 February 1994, published in Journal of Laws (Dziennik Ustaw) No 24, item 83, consolidated text of 16 May 2006, Journal of Laws (Dziennik Ustaw) No 90, item 631, with later amendments.

Chapter 14
Criminal Liability
Art. 115. 1. Any person who usurps the authorship or misleads as to the authorship of all or part of the work or performance of another shall be liable to a term of imprisonment of up to 3 years, restriction of freedom or a fine.

2. Any person who, without mentioning the creator’s name or pseudonym, discloses the work of another either in its original or in a derived form, or a performance, or who publicly distorts a work, a performance, a phonogram or videogram or a broadcast, shall be liable to the same penalty.

3. Any person who, with a view to making a material profit in a manner other than that specified in paragraph 1 or 2, infringes the rights of the author or neighboring rights within the meaning of Articles 16, 17, 18, 19 paragraph 1, art. 191, 86, 94 paragraph 4 or article 97 or without performing his duties as mentioned in article 193 paragraph 2, 20 paragraphs 1-4, 40 paragraph 1 or paragraph 2,
shall be liable to a term of imprisonment of up to one year, restriction of freedom or a fine.

Art. 116. 1. Any person who, without authorization or without respecting the conditions imposed, discloses another’s work in its original or in a derived form, or a performance, a phonogram or videogram or a broadcast shall be liable to a term of imprisonment of up to two years, restriction of freedom or a fine.

2. If the perpetrator of the infringement commits the acts specified in paragraph 1 with a view to deriving a material profit therefrom, he shall be liable to a term of imprisonment of up to three years.

3. If the perpetrator of the infringement defined in paragraph 1 has made the infringement into a permanent source of income, or if he organizes or directs the offending activity referred to in paragraph 1, he shall be liable to a term of imprisonment of six months to five years.

4. If the perpetrator of the infringement defined in paragraph 1 acts unintentionally, he shall be liable to a term of imprisonment of up to one year, restriction of freedom or a fine.

Art. 117. 1. Any person who, without authorization or without respecting the conditions imposed, fixes or reproduces another’s work in its original version or in a derived form, or a performance, a phonogram or videogram or a broadcast, at the same time authorizing the disclosure thereof, shall be liable to a term of imprisonment of up to two years, restriction of freedom or a fine.

2. If the perpetrator of the infringement defined in paragraph 1 has made the infringement into a permanent source of income, or if he organizes or directs the offending activity referred to in paragraph 1, he shall be liable to a term of imprisonment of up to three years.

Art. 118. 1. Any person who, with a view to making a material profit thereby, acquires the object constituting the material embodiment of a work, a performance, a program or a disclosed videogram, or reproduces it without authorization or without respecting the conditions imposed, assists in the sale of the said object, conceals it or assists in its concealment, shall be liable to a term of imprisonment of up to two years, restriction of freedom or a fine.

2. If the perpetrator of the infringement defined in paragraph 1 has made the infringement into a permanent source of income, or if he organizes or directs the offending activity referred to in paragraph 1, he shall be liable to a term of imprisonment of up to three years.

3. If the perpetrator of the infringement defined in paragraph 1 or 2 on the basis of surrounding circumstances should and can assume that the item was obtained through criminal act,
he shall be liable to a term of imprisonment of up to two years, restriction of freedom or a fine.

Art. 1181. 1. Any person who manufactures the devices or their components intended for the unauthorized removal or circumvention of effective technical measures against playing, copying or reproduction of works or objects of related rights or any person who is making a turnover of such devices or their components, or advertise them for sale or lease,
he shall be liable to a term of imprisonment of up to three years, restriction of freedom or a fine.

2. Any person who owns, maintains or uses the device or their components, referred to in paragraph. 1,
he shall be liable to a term of imprisonment of up to one year, restriction of freedom or a fine.

Art. 119. Any person who obstructs or hinders the exercise of the right to monitor the use of a work or artistic performance, or who refuses to give the information provided for in Article 47, shall be liable to a term of imprisonment of up to one year, restriction of freedom or a fine.

Art. 120. (repealed)

Art. 121. 1. In the case of condemnation for an act referred to in Article 115, 116, 117 or 118 or article 1181, the court shall decide to confiscate the objects resulting from the infringement, even if they do not belong to the perpetrator thereof.

2. In the case of condemnation for an act referred to in Article 115, 116, 117 or 118, the court may decide to confiscate the objects that served for the commission of the infringement, even if they do not belong to the perpetrator thereof.

Art. 122. The acts referred to in Articles 116, paragraphs 1, 2 and 4, 117, paragraph 1, 118, paragraph 1, 1181 and 119 shall be proceeded against on a complaint from the injured party.

Art. 1221 In cases of crimes referred to in Articles 115-119 a competent organization for collective management of copyright and related rights is also deemed as sufferer.

Art. 123. The Minister of Justice may specify by ordinance the regional courts within the jurisdiction of a particular voivoide court that are competent to hear cases relating to the infringements referred to in Articles 115-119.

Protecting trade secrets in Polish law

October 9th, 2008, Tomasz Rychlicki

I wonder from time to time, whether it is an effective way to write complex studies on the law in the form of a post which is available on a website. The text of such note is formatted in HTML and accessed from a browser, etc. I mean posts or entries which are longer than five sentences, i.e. more or less scientific articles with proper footnotes, etc. Unfortunately, I am not convinced of arguments that publications with a high content of text, which is formatted in the browser window, is the proper way to write and discuss about the law. I think that reading is simply too uncomfortable. On the other hand, a large amount of text can be defined by the CSS with the appropriate format for printing. Alternatively, one may give links to documents that you will be allowed to print… but the latter solution is without a doubt less professional. At the same time, let me try to write something a little bit longer. The subject is Polish regulations on trade secrets.

I. Definitions.
There is no definition of “trade secrets” in Polish law. However, there are regulations that allow for very effective protection.
A. Act on Combating Unfair Competition – CUC – (in Polish: Ustawa o zwalczaniu nieuczciwej konkurencji) of 16 April 1993, Journal of Laws (Dziennik Ustaw) No 47, item 211, with later amendments.

Article 11
An act of unfair competition is the transfer, disclosure or use of third party information, which is company confidential or their receipt from an unauthorised person, if it threatens or violates the interests of the entrepreneur.
2. The provisions of section 1 shall also apply to the person who has been rendering work based on employment contract or another legal relation, for the period of three years from its expiration, unless the contract stipulates otherwise or there is no longer secrecy.
3. The provisions of section 1 shall not apply to the person who, bona fide, by way of a legal operation against payment, acquired the information constituting a business secrecy. The court may oblige the acquirer to the appropriate remuneration for its use, nevertheless for a period not longer than duration of secrecy.
4. Company confidentiality is understood to include the entrepreneur’s technical, technological organisational or other information having commercial value, which is not disclosed to the public to which the entrepreneur has taken the necessary steps to maintain confidentiality.
(…)
Chapter 4
Penal provisions
Article 23.1. Every person, who contrary to her obligation towards the entrepreneur discloses to another person or uses in her own economic activity information which is a business secrecy, shall be liable to the fine, probation or imprisonment up to 2 years, provided it is to the significant detriment of the entrepreneur.
2. The same sanctions shall apply to the person, who having acquired illegally the business secrecy, discloses it to another person or uses in her own economic activity.

It is noteworthy that definition of “company confidentiality” provided in article 11(4) CUC explicitly included “trade secrets” term before amendments in 2002. The CUC protection of “company confidentiality” can be enforced in civil or crminal proceedings. However, regulations afforded in the CUC basically apply only to relations between entrepreneurs (commercial relationships).

B. The Civil Code – CC – (in Polish: Kodeks Cywilny) of 23 April 1964, Journal of Laws (Dziennik Ustaw) No 16, item 93, with later amendments.

Article 72 [1]. § 1. If during the negotiations, a party has provided information as confidential, the other party is required not to disclose and not to transfer of such information to others and not to use such information for its own purposes, unless the parties otherwise agreed.
§ 2 In the event of failure of performance or improper performance of duties as described in § 1, the entitled person may demand from the other party to undo the damages or to return profits received by the other party.

C. The Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.

Chapter XXXIII. Crimes against protection of information
(…)
Article 267.
§ 1. Whoever, without being authorised to do so, acquires information not destined for him, by opening a sealed letter, or connecting to a wire that transmits information or by breaching electronic, magnetic or other special protection for that information shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.
§ 2. The same punishment shall be imposed on anyone, who, in order to acquire information to which he is not authorised to access, installs or uses tapping, visual detection or other special equipment.
§ 3. The same punishment shall be imposed on anyone, who imparts to another person the information obtained in the manner specified in § 1 or 2 discloses to another person.
§ 4. The prosecution of the offence specified in § 1 – 3 shall occur on a motion of the injured person.

I guess, I do not need to add that these aforementioned regulations are the basic. There are some other legal acts that govern specific fields of law. For instance the Act on Acountancy, the Code of Commercial Companies, the Code of Labour, the Act on Banks Law etc.

Penalizing SQL injection techniques in Poland

October 6th, 2008, Tomasz Rychlicki

Polish criminal law has provisions, which in theory would serve to criminalize conducts related to “cracking” actions.

Chapter XXXIII. Crimes against protection of information
(…)
Article 267.
§ 1. Whoever, without being authorised to do so, acquires information not destined for him, by opening a sealed letter, or connecting to a wire that transmits information or by breaching electronic, magnetic or other special protection for that information shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.
§ 2. The same punishment shall be imposed on anyone, who, in order to acquire information to which he is not authorised to access, installs or uses tapping, visual detection or other special equipment.
§ 3. The same punishment shall be imposed on anyone, who imparts to another person the information obtained in the manner specified in § 1 or 2 discloses to another person.
§ 4. The prosecution of the offence specified in § 1 – 3 shall occur on a motion of the injured person.

Provisions of article 267 were used against Mateusz M. He was charged with use of methods known as SQL injection, in conjunction with Article 267 § 1. However, the District Court in Głogów VI Wydział Grodzki in a judgment of 11 August 2008, act signature VI K 849/07, found Mateusz M. not guilty.

The court held that the actions of the accused fail to comply with the statutory elements (…) Overcoming (breaching) security occurs when the offender destroys, removes the security, or when the impact on the security temporarily removes the protective function. (…) The person who gained access to sensitive information, but did not break any security measures will not bear the criminal responsibility.

I have to add that there are pending amendments to the Polish Criminal Code provisions regarding aforementioned regulations. Piotr Waglowski provides more details about this case. As regards legal issues on cracking I already wrote posts entitled “Who will be guilty?” and “Legal hacking“.