Difference between revisions of "Copyright"

From Freephile Wiki
Jump to navigation Jump to search
(add a bunch more research and updates to sort out later)
 
(29 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
;Copyright :a wrong idea that really flourished.
 
;Copyright :a wrong idea that really flourished.
  
You know what the General Public License (GPL) is <ref>The worlds most popular software license.  It was recently updated in 2007.  A license utilizing the current legal framework to the advantage of the user AND author of the software. https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses See http://gnu.org and http://www.gnu.org/licenses/gpl.html to learn more.</ref>, because you are a Linux hacker, web developer, or other consultant who lives and breathes free software.  You consult for clients, doing DevOps using Software Engineering tools such as [[Subversion]], and [[Git]] or build automation like [[Jenkins]].  You work with database engines like [[MySQL]], [[Postgres]], and [[MongoDB]].  You do System Administration on [[RedHat]], [[Ubuntu]], and [[Debian]].  You build web services, proxies, reporting systems and more on [[Apache]] and [[Nginx]] web servers.  You build extensions for [[MediaWiki]], modules for [[Drupal]], or plugins for [[WordPress]].  You do User Interface based on [[jQuery]] <ref>jQuery is licensed using the MIT license, the second most popular "Open Source" license https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses</ref> and [[JavaScript]].  You extend, improve or integrate GPL software and systems, that is to say [http://directory.fsf.org/wiki/Main_Page 50,000  market leading, state of the art software products]. You consult for companies, universities, governments, other organizations large and small and they all use boilerplate contract language that is completely oblivious of the software they are using, and the work that you are doing for them in a proper legal context.  In the definition of Copyright <ref>http://www.law.cornell.edu/uscode/text/17/101</ref>, the word software never appears.  The phrase 'digital transmission' is the only hint of technology that was to come in the ensuing decades.  In fact, section 102 <ref>http://www.law.cornell.edu/uscode/text/17/102</ref> on the Subject matter of copyright expressly excludes software in concept:
+
==Copyright in FOSS Consulting==
 +
 
 +
You know what the General Public License (GPL) is <ref>The worlds most popular software license.  It was recently updated in 2007.  A license utilizing the current legal framework to the advantage of the user AND author of the software. https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses See http://gnu.org and http://www.gnu.org/licenses/gpl.html to learn more.</ref>, because you are a Linux hacker, web developer, or other [[Free Software consultant]] who lives and breathes free software.  You consult for clients, doing DevOps using Software Engineering tools such as [[Subversion]], and [[Git]] or build automation like [[Jenkins]].  You work with database engines like [[MySQL]], [[Postgres]], and [[MongoDB]].  You do System Administration on [[RedHat]], [[Ubuntu]], and [[Debian]].  You build web services, proxies, reporting systems and more on [[Apache]] and [[Nginx]] web servers.  You build extensions for [[MediaWiki]], modules for [[Drupal]], or plugins for [[WordPress]].  You do User Interface based on [[jQuery]] <ref>jQuery is licensed using the MIT license, the second most popular "Open Source" license https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses</ref> and [[JavaScript]].  You extend, improve or integrate GPL software and systems, that is to say [http://directory.fsf.org/wiki/Main_Page 50,000  market leading, state of the art software products]. You '''consult''' for companies, universities, governments, other organizations large and small and they all use boilerplate contract language that is completely oblivious of the software they are using, and the work that you are doing for them in a proper legal context.  To a certain degree, this is understandable - technology changes rapidly while legal systems and bureaucracies evolve slowly.
 +
 
 +
In the definition of Copyright <ref>http://www.law.cornell.edu/uscode/text/17/101</ref>, the word software never appears.  The phrase 'digital transmission' is the only hint of technology that was to come in the ensuing decades.  In fact, section 102 <ref>http://www.law.cornell.edu/uscode/text/17/102</ref> on the Subject matter of copyright '''expressly excludes software''' in concept:
 
<blockquote>
 
<blockquote>
 
In no case does copyright protection for an original work of authorship extend to any idea, procedure, process, system, method of operation, concept, principle, or discovery, regardless of the form in which it is described, explained, illustrated, or embodied in such work.
 
In no case does copyright protection for an original work of authorship extend to any idea, procedure, process, system, method of operation, concept, principle, or discovery, regardless of the form in which it is described, explained, illustrated, or embodied in such work.
Line 11: Line 15:
  
  
== Old-School Boilerplate ==
+
==Old-School Boilerplate==
 
ContractStandards.com is a pretty useful website setup by '''Lambert & Associates''' (Boston, MA and Nashua, NH) that illustrates and explains in plain language the various clauses of a contract. For example, they have a page about [http://www.contractstandards.com/contract-structure/representations-and-warranties/intellectual-property Intellectual Property (Representation)]; calling it "one of the most heavily negotiated representations".  (Note: you have to click on the "Clause Elements" section heading to actually view the contents.)
 
ContractStandards.com is a pretty useful website setup by '''Lambert & Associates''' (Boston, MA and Nashua, NH) that illustrates and explains in plain language the various clauses of a contract. For example, they have a page about [http://www.contractstandards.com/contract-structure/representations-and-warranties/intellectual-property Intellectual Property (Representation)]; calling it "one of the most heavily negotiated representations".  (Note: you have to click on the "Clause Elements" section heading to actually view the contents.)
  
Unfortunately, they offer no example that would pertain specifically to a client using GPL software, and hiring a consultant with expertise in that software.  If you look at their example '''[http://www.contractstandards.com/contracts/ica Independent Contractor Agreement]''' ownership is conferred 100% to the client.  As in the boilerplate example, you'll likely see language from your clients about the contractor providing a "work made for hire" under the Copyright Act <ref>http://www.law.cornell.edu/uscode/text/17/201  Any "work made for hire" confers all right to the "employer" as defined in the Act</ref>.  This is old-school, pre-Internet mentality and legal framework (This section of the U.S. Copyright Act was updated in 1979).
+
Unfortunately, they offer no example that would pertain specifically to a client using GPL software, and hiring a consultant with expertise in that software.  If you look at their example '''[http://www.contractstandards.com/contracts/independent-contractor-agreement Independent Contractor Agreement]''' ownership is conferred 100% to the client.  As in the boilerplate example, you'll likely see language from your clients about the contractor providing a "work made for hire" under the Copyright Act <ref>http://www.law.cornell.edu/uscode/text/17/201  Any "work made for hire" confers all right to the "employer" as defined in the Act</ref> <ref>https://www.law.cornell.edu/wex/work_for_hire</ref> <ref>https://scholarship.law.cornell.edu/cgi/viewcontent.cgi?article=3413&context=clr "Work for Hire Definition in the Copyright Act of
 +
1976: Conflict Over Specially Ordered or Commissioned Works" - a review of the statute and history and differing interpretations of what the act means.</ref> <ref>If you read Lee Gesmer, you'll leave out '''any mention''' of 'work for hire' in your legal agreements. It could be a huge mistake. https://www.masslawblog.com/copyright/the-work-for-hire-trap/
 +
 
 +
Mass Law Blog
 +
 
 +
by Gesmer Updegrove
 +
 
 +
Intellectual property and business litigation, Massachusetts and nationally</ref>.  This is old-school, pre-Internet mentality and legal framework (This section of the U.S. Copyright Act was updated in 1979).
  
 
So, where can we get an idea of the language to use for a client wishing to hire a consultant who would employ GPL software and intend to publish and share that intellectual property for the benefit of the client, the contractor and the world at large?
 
So, where can we get an idea of the language to use for a client wishing to hire a consultant who would employ GPL software and intend to publish and share that intellectual property for the benefit of the client, the contractor and the world at large?
  
== Not Viral ==
+
==Good Intellectual Property Agreements==
A lot of people seem to bury their head in the sand as the issue gets complicated. For a long time (and it still continues), the GPL was viewed as bad and labelled "viral" because if you let GPL code touch your proprietary code, you'll be forced to share your proprietary code. That's only half true. Articles like [http://www.techrepublic.com/blog/it-consultant/legal-considerations-when-using-free-software-in-it-consulting-projects/ this one] talk about this viral nature, but don't even touch on the other half of the story: what triggers the license. You have to "distribute" software to trigger the GPL, so if all you ever do is use the software (plus GPL additions) for your own internal purposes, then you have all the right in the world to use GPL software without having to publish your software to the world. Of course some people recognized that they could skirt the line by making "services" out of predominantly free software (e.g. an online logo generator that uses the [[GIMP]] as a backend.) Thus, the Free Software Foundation drafted the GPLv3 as a way to define network transmission of services tantamount to distributing the software.  The GPLv3 license has not been as popular as the GPLv2, but at least it's there for software developers to use when they their creations to get boxed up in the cloud. Ultimately, using GPL software in your (commercially available and distributed) product is not different than using some other (proprietary) software -- you have to have the right to do itGPL says you don't have that right unless you're willing to shareYou don't want to share, then build it yourself.  In-house counsel was often focused on this "governance" and created policies to restrict what could come in-bound to an organizationTheir contracts still had the mindset that they weren't using GPL software anywhere in their organizations, including the mundane and operations related areas of the business that would never cross the "distribution" threshold. To be clear, you can -- and LOTS of companies do -- use Drupal for an internal website, or MediaWiki for a knowledgebase. You can even modify or extend that code to do things you need it to doAnd you don't have to share your code if you don't want to.
+
 
 +
===Examples and Guides===
 +
 
 +
*In 2010 [https://codeforamerica.org/ Code for America] and [https://www.openplans.org/ Open Plans] collaborated to create '''Civic Commons''', which is now all-volunteer, but the work product remains online. The Civic Commons' 2015 article [http://wiki.civiccommons.org/Legal_Issues_and_Best_Practices_Around_Procuring_or_Deploying_OSS_In_Your_Organization Best Practices Around Procuring or Deploying OSS in Your Organization] is one helpful example.
 +
*2013 [http://teleogistic.net/2013/04/gpl-and-free-software-language-for-government-contracts/ GPL and free software language for government contracts] shows a clause that was used in a University setting.
 +
*[https://github.com/github/balanced-employee-ip-agreement Balanced Employee IP Agreement] ([https://github.com/github/balanced-employee-ip-agreement/blob/main/Balanced_Employee_IP_Agreement.md BEIPA]) is the legal agreement '''GitHub''' (now owned by Microsoft) uses for its employees.
 +
*[https://github.com/twitter/innovators-patent-agreement Innovators Patent Agreement] (IPA) from '''Twitter''', a commitment from a company to its employees that the company will not use patents in offensive litigation without the permission of the inventors. Other pertinent policy choices include participation in anti-troll and non-aggression networks such as [https://lotnet.com/ LOT] and [https://openinventionnetwork.com/ OIN], as well as contributing to open source projects.
 +
*[https://docs.google.com/viewer?url=https://processmechanics.com/static/2015-07/ModelCo_IP_Policy.docx Model IP Policy] [https://www.processmechanics.com/2015/07/23/a-model-ip-and-open-source-contribution-policy/ created at Rackspace].
 +
* [https://docs.google.com/document/d/1Z8LTNwD9yKU_4mCN8UOhsvK05Nuk9ZAiRN6lJjZdQbw/edit Massachusetts.gov Statement of Work] boilerplate agreement which gives an example of the language used in state contracting. (Source: https://www.mass.gov/doc/statement-of-work 2018)
 +
 
 +
<br />
 +
==Distribution explained==
 +
 
 +
To get an in-depth explanation and analysis of what constitutes '''distribution''' in everyday practice, see [http://www.ifosslr.org/ifosslr/article/view/66/125 The Gift that Keeps on Giving - Distribution and Copyleft in Open Source] by ''Heather Meeker''
 +
 
 +
==Contribution Agreements==
 +
 
 +
Contribution agreements are one area where we can look to get an idea of standard practices among larger foundations and FOSS projectsEssentially, the client is the foundation, and the developer may be an individual or a member of a corporation.  The OpenID Foundation (OIDF) develops specifications, so it's a good example of where standards development and software development meet. There is a [http://openid.net/executed-contribution-agreements/ long list of contributors to the OpenID Foundation]The OIDF has both a formal Process to develop their specifications, as well as an IPR Policy <ref>http://openid.net/ipr/OpenID_IPR_Policy_(Final_Clean_20071221).pdf</ref>The Policy classifies contributors as "unaffiliated" (an individual), "affiliated" (anyone who work for a company), and "representative" (third-party).   
 +
 
 +
Here is the language in section 5.1 of the IPR:
 +
<blockquote>Copyright License. Some Contributions may not be subject to copyright. To the extent, however, that a Contribution is or may be subject to copyright, the Contributor hereby grants a perpetual, irrevocable (except in case of breach of this license), non-exclusive, royalty-free, worldwide license in such copyright to the OpenID Foundation, to other Contributors, and to Implementers, to reproduce, prepare derivative works from, distribute, perform, and display the Contribution and derivative works thereof solely for purposes of developing draft Specifications and implementing Implementers Drafts and Final Specifications</blockquote>
 +
 
 +
Section 6 of the IPR addresses patents, with essentially a promise not to assert.
 +
 
 +
Here are some others to look at.
 +
 
 +
*[https://www.drupal.org/licensing/faq Drupal]
 +
*[https://wiki.openstack.org/wiki/How_To_Contribute#Contributors_License_Agreement OpenStack]
 +
*Karl Fogel in his book "[http://producingoss.com/en/index.html Producing Open Source Software]" discusses exactly that, from soup to nuts.  In it, he includes a discussion of Copyright License Agreements as well as Copyright Assignment AgreementsThis is a good read for anyone producing open source software of course, but it's also a great way for a corporate attorney to get the perspective of the FOSS developer.
 +
*[https://cla.developers.google.com/about/google-individual?csw=1 Google Individual Contributor License Agreement]
 +
*[http://harmonyagreements.org/index.html Project Harmony] offers not only a "harmonizing" view of Contributor Agreements, but also the inter-company contributor agreements so that employees of one organization can effectively collaborate on external FOSS projects that the company uses.
 +
*[http://wiki.civiccommons.org/Contributor_Agreements The Civic Commons Wiki] offers a complete run down of CLA and CAA examples
  
The issue we're trying to focus on here and that nobody is addressing, is that a '''majority''' of companies not only use free software, but frequently want to build that extra feature or just need help deploying, integrating, upgrading and documenting it.  It's not a core product.  It's just some internal thing to get work done.  Take for example a simple PHP application used for keeping track of Time Off, using a MySQL database backend.  Should a company "own" the intellectual property associated with upgrading MySQL?  It may actually be counter to the law.  An author only has rights to the specific pieces of expression that they've contributed to a collaborative work so they can't claim ownership over the whole thing.
+
Please note that while Contributor License Agreements can be a good place to see proper legal text addressing complex issues of Copyright, Patents and Trademarks, they are not good practice ''operationally''. See Bradley Kuhn's perspective from 2014: [https://sfconservancy.org/blog/2014/jun/09/do-not-need-cla/ You do not need a CLA]
  
== Good Examples ==
+
==Is it Viral?==
It was only after extensive research for this topic that I discovered the Civic Commons' [http://wiki.civiccommons.org/Legal_Issues_and_Best_Practices_Around_Procuring_or_Deploying_OSS_In_Your_Organization Best Practices Around Procuring or Deploying OSS in Your Organization]
 
  
http://teleogistic.net/2013/04/gpl-and-free-software-language-for-government-contracts/ shows a clause that was used in a University setting.
+
Why do contracts seem so hostile toward Free Software?  Basically, contracts were written to defend against the risks that GPL '''could''' introduce to a companies core products.  But this is only one aspect of the complete landscape.  A separate aspect is how companies '''rely''' on GPL software.
  
 +
For a long time (and it still continues), the GPL was labelled "viral" (in a bad way) because if you let GPL code touch your proprietary code, you'll be forced to share your proprietary code.  That's only half true.  Articles like [http://www.techrepublic.com/blog/it-consultant/legal-considerations-when-using-free-software-in-it-consulting-projects/ this one] talk about this viral nature, but don't even touch on the other half of the story: what triggers the license.  You have to "distribute" software to trigger the GPL, so if all you ever do is use the software (plus GPL additions) for your own internal purposes, then you have all the right in the world to use GPL software without having to publish your software to the world.  Of course many people recognized that they could circumvent distribution by making "services" out of free software, for example, an online logo generator that uses the [[GIMP]] as a backend.  This is sometimes called the ASP loophole.  In drafting the GPLv3, there was an attempt to define network transmission of services tantamount to distributing the software.  This did not ultimately make it into the GPLv3, but instead is part of the variant called the Affero GPL (or AGPL)<ref>https://www.gnu.org/licenses/why-affero-gpl.html</ref>.  The AGPL license has not been as popular as the GPLv2, but at least it's there for software developers to use when they want to prevent their creations from getting boxed up in the cloud.  Of greater concern to the corporation is how distribution ''can'' be triggered in some non-obvious ways - such as through merger and aquisition<ref>See Distribution explained</ref>.
  
== Legal explanation ==
+
Ultimately, using GPL software in your (commercially available and distributed) product is not different than using some other (proprietary) software -- you need the right to do it.  GPL says you don't have that right unless you're willing to share.  You don't want to share, then build it yourself.  In-house counsel was often focused exclusively on this viral aspect and the "FOSS governance" policies that grew out of it were focused on restricting what could come in-bound to an organization.  Their consulting contracts with vendors still had the mindset that they weren't using GPL software anywhere in their organizations, including the mundane and operations related areas of the business that would never cross the "distribution" threshold. To be clear, you can -- and millions of companies do -- use Drupal for an internal website, or MediaWiki for a knowledgebase.  You can even modify or extend that code to do things you need it to do.  And you don't have to share your code if you don't want to.  For most companies and most situations, the best thing they can do is to actually promote their code back "upstream" into the FOSS software project.  At a minimum, they should not '''prevent''' their code from getting upstream by placing legal obstacles in the way.
  
[http://www.ifosslr.org/ifosslr/article/view/66/125 The Gift that Keeps on Giving - Distrubution and Copyleft in Open Source] by ''Heather Meeker''
+
The issue we're trying to focus on here and that very few address, is that a '''majority''' of companies not only use free software, but need commercial support for that software. They frequently want to build that extra feature or just need help deploying, integrating, upgrading and documenting it.  It's not a core product.  It's just some internal thing to get work done.  Take for example a simple PHP application used for keeping track of Time Off, using a MySQL database backend.  Should a company "own" the intellectual property associated with upgrading MySQL?  It may actually be counter to the law.  An author only has rights to the specific pieces of expression that they've contributed to a collaborative work so they can't claim ownership over the whole thing.
  
  
== Contribution Agreements ==
+
==Further Resources==
  
* [https://www.drupal.org/licensing/faq Drupal]
+
*[http://www.law.cornell.edu/ Legal Information Institute] - a project started in 1992 by the Cornell University Law School that publishes the law online, for free.  See the [http://www.law.cornell.edu/constitution U.S. Constitution] and [http://www.law.cornell.edu/uscode/text U.S. Code], etc.
* [https://wiki.openstack.org/wiki/How_To_Contribute#Contributors_License_Agreement OpenStack]
+
*[http://copyfree.org/resources/references Copyfree], offers a collection of interesting articles, essays etc. about the problems of Copyright and offers an alternative copyright regime.
* Karl Fogel in his book "[http://producingoss.com/en/index.html Producing Open Source Software]" discusses exactly that, from soup to nuts.  In it, he includes a discussion of Copyright License Agreements as well as Copyright Assignment Agreements. This is a good read for anyone producing open source software of course, but it's also a great way for a corporate attorney to get the perspective of the FOSS developer.
+
*[https://jolts.world/index.php/jolts JOLTS] (Journal of Open Law, Technology & Society): an international, broadly-scoped journal about openness still has an archive of their work online <ref>On 2022/09/07 they went inactive (archive mode). On 2019/10/29 The International Free and Open Source Law Review relaunched as the "Journal of Open Law, Technology & Society": an international, broadly-scoped journal about openness at Open Source Summit Europe. Previously it was the [http://www.ifosslr.org/ifosslr International Free and Open Source Software Law Review]
* [https://cla.developers.google.com/about/google-individual?csw=1 Google Individual Contributor License Agreement]
 
* [http://harmonyagreements.org/index.html Project Harmony] offers not only a "harmonizing" view of Contributor Agreements, but also the inter-company contributor agreements so that employees of one organization can effectively collaborate on external FOSS projects that the company uses.
 
* [http://wiki.civiccommons.org/Contributor_Agreements The Civic Commons Wiki] offers a complete run down of CLA and CAA examples
 
  
== Further Resources ==
+
JOLTS is a collaborative legal publication aiming to increase knowledge and understanding among lawyers about Free and Open Source Software issues. Topics covered include copyright, license implementation, license interpretation, software patents, open standards, case law and statutory changes.</ref>
* Legal Information Institute - a project started in 1992 by the Cornell University Law School
+
*Traditional treatment of the subject comes from the perspective of protecting against risks that the software is perceived to create.  The Association of Corporate Counsel has this primer http://www.acc.com/legalresources/quickcounsel/quickcounsel_open_source_software.cfm While it does discuss many of the valid concerns that you would have as a corporation, it does nothing to address the proactive and beneficial things you can and should do to address the needs and benefits created by the collaboration economy.
* [http://copyfree.org/resources/references Copyfree], offers a collection of interesting articles, essays etc. about the problems of Copyright and offers an alternative copyright regime.
+
*Cornell University Law School https://www.law.cornell.edu/wex/collective_work
* [http://www.ifosslr.org/ifosslr International Free and Open Source Software Law Review]  is a collaborative legal publication aiming to increase knowledge and understanding among lawyers about Free and Open Source Software issues. Topics covered include copyright, licence implementation, licence interpretation, software patents, open standards, case law and statutory changes.
+
*It would be great if the Wikimedia Foundation published their Employee IPR Policy, as a reference model, but there is no mention of it at https://foundation.wikimedia.org/wiki/Policy:Main#Board_and_staff_members and I don't believe it is publicly available.
* Traditional treatment of the subject comes from the perspective of protecting against risks that the software is perceived to create.  The Association of Corporate Counsel has this primer http://www.acc.com/legalresources/quickcounsel/quickcounsel_open_source_software.cfm While it does discuss many of the valid concerns that you would have as a corporation, it does nothing to address the proactive and beneficial things you can and should do to address the needs and benefits created by the collaboration economy.
 
  
 +
== Non-competes, Work for Hire, Employment Agreements ==
 +
* [https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2517604 The New Cognitive Property: Human Capital Law and the Reach of Intellectual Property] - a paper about the expansion of Copyright into "thoughts" by non-compete agreements etc. in industry. Published by '''SSRN - Elsevier''' (Social Science Research Network) which is an open-access preprint community providing services to academic schools & government institutions. Scholars can post their early research, collaborate on theories and discoveries, and get credit for their ideas before peer-reviewed publication.
 +
* https://faircompetitionlaw.com/2023/09/18/50-state-noncompete-chart-updated-september-18-2023/ [https://faircompetitionlaw.com/wp-content/uploads/2023/09/Noncompetes-50-State-Noncompete-Survey-Chart-20230918.pdf the chart in PDF] - a survey of non-competes across all 50 US states. Brought to you by Beck Reed Riden - a law firm in Boston which doesn't want employees to have the freedoms of mobility that California provides.
 +
 +
== GPL and What Works ==
 +
Software Freedom Law Center, the pro-bono law firm led by Eben Moglen, Professor of law at Columbia Law School and the world’s foremost authority on Free and Open Source Software law held its annual fall conference at Columbia  Law School, New York on Oct. 28. The full-day program featured technical and legal presentations on Blockchain, FinTech, Automotive FOSS and GPL Compliance by industry and community stalwarts.
 +
 +
The program culminated in remarks by Moglen that highlighted the roles of engagement and education in building effective, ever-lasting communities. While expressing his gratitude to his colleague, friend and comrade Richard M. Stallman, Moglen emphasized the positive message relayed by Greg Kroah-Hartman and Theodore Ts’o –earlier in the day– for creating win-win solutions and spreading users’ freedom.
 +
 +
[https://www.linux.com/news/eben-moglen-gpl-compliance-and-building-communities-what-works/ Here is a video and the transcript of his remarks] (2016).
 +
 +
== Embrace and Extend ==
 +
Since most contributions to the Linux kernel project these days (2021) are [https://lwn.net/Articles/860989/ by paid staffers of the biggest tech companies], there is an overwhelming undercurrent of non-enforcement of the GPL in business. And who would do it anyway? There is no government or trade organization that will do GPL enforcement.
 +
 +
== MediaWiki and Wikipedia ==
 +
* [[mw:Copyright]]
 +
* [[wp:Copyright]]
  
 
{{References}}
 
{{References}}
  
== Disclaimer ==
+
==Disclaimer==
<abbr title="I Am Not A Lawyer">IANAL</abbr> (That means I am not a lawyer.) I'm just a free software expert.
+
"Nothing on the website is legal advice. If it were, it would come with an invoice."  I'm just a free software expert.
 +
 
 +
This information is here to educate, inform, and hopefully spread best practice information to consultants, their clients, employees and employers alike who wish to operate in the real world that is completely full of interconnected "Intellectual Property".  It is not legal advice.  It should not be construed as legal advice.  It does not create an attorney-client relationship.  If you're an attorney reading this, I'd love to get your feedback and I hope that this information is useful to the representation you provide to your clients.
 +
 
 +
==Colophon==
 +
As part of our Free Culture efforts, the copyright for this wiki was updated to use the Creative Commons Attribution-ShareAlike 4.0 International License.
  
This information is here to educate, inform, and hopefully spread best practice information to other consultants and their clients alike who wish to operate in the real world that is completely full of interconnected "Intellectual Property". It is not legal advice. It should not be construed as legal advice. It does not create an attorney-client relationship. If you're an attorney reading this, I'd love to get your feedback and I hope that this information is useful to the representation you provide to your clients.
+
<html>
 +
<a rel="license" href="http://creativecommons.org/licenses/by-sa/4.0/"><img alt="Creative Commons License" style="border-width:0" src="https://i.creativecommons.org/l/by-sa/4.0/88x31.png" /></a><br />This work by <a xmlns:cc="http://creativecommons.org/ns#" href="http://freephile.org" property="cc:attributionName" rel="cc:attributionURL">http://freephile.org</a> is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-sa/4.0/">Creative Commons Attribution-ShareAlike 4.0 International License</a>.
 +
</html>
  
 
[[Category:Contracts]]
 
[[Category:Contracts]]
 +
[[Category:Legal]]
 +
[[Category:Free Software]]

Latest revision as of 22:47, 9 November 2023

Copyright
a wrong idea that really flourished.

Copyright in FOSS Consulting[edit | edit source]

You know what the General Public License (GPL) is [1], because you are a Linux hacker, web developer, or other Free Software consultant who lives and breathes free software. You consult for clients, doing DevOps using Software Engineering tools such as Subversion, and Git or build automation like Jenkins. You work with database engines like MySQL, Postgres, and MongoDB. You do System Administration on RedHat, Ubuntu, and Debian. You build web services, proxies, reporting systems and more on Apache and Nginx web servers. You build extensions for MediaWiki, modules for Drupal, or plugins for WordPress. You do User Interface based on jQuery [2] and JavaScript. You extend, improve or integrate GPL software and systems, that is to say 50,000 market leading, state of the art software products. You consult for companies, universities, governments, other organizations large and small and they all use boilerplate contract language that is completely oblivious of the software they are using, and the work that you are doing for them in a proper legal context. To a certain degree, this is understandable - technology changes rapidly while legal systems and bureaucracies evolve slowly.

In the definition of Copyright [3], the word software never appears. The phrase 'digital transmission' is the only hint of technology that was to come in the ensuing decades. In fact, section 102 [4] on the Subject matter of copyright expressly excludes software in concept:

In no case does copyright protection for an original work of authorship extend to any idea, procedure, process, system, method of operation, concept, principle, or discovery, regardless of the form in which it is described, explained, illustrated, or embodied in such work.

But in order to create an expansive copyright regime, this was interpreted to mean that the "expression" of the idea is copyrightable, while the actual methods or processes adopted by the programmer are not within the scope of the copyright law. While you chew on that for a bit, we'll get back to the point here: contract language that is GPL-aware.

It's time to have "boilerplate" contract language that understands the world we live in and is helpful to the client and contractor in clear terms.


Old-School Boilerplate[edit | edit source]

ContractStandards.com is a pretty useful website setup by Lambert & Associates (Boston, MA and Nashua, NH) that illustrates and explains in plain language the various clauses of a contract. For example, they have a page about Intellectual Property (Representation); calling it "one of the most heavily negotiated representations". (Note: you have to click on the "Clause Elements" section heading to actually view the contents.)

Unfortunately, they offer no example that would pertain specifically to a client using GPL software, and hiring a consultant with expertise in that software. If you look at their example Independent Contractor Agreement ownership is conferred 100% to the client. As in the boilerplate example, you'll likely see language from your clients about the contractor providing a "work made for hire" under the Copyright Act [5][6][7][8]. This is old-school, pre-Internet mentality and legal framework (This section of the U.S. Copyright Act was updated in 1979).

So, where can we get an idea of the language to use for a client wishing to hire a consultant who would employ GPL software and intend to publish and share that intellectual property for the benefit of the client, the contractor and the world at large?

Good Intellectual Property Agreements[edit | edit source]

Examples and Guides[edit | edit source]


Distribution explained[edit | edit source]

To get an in-depth explanation and analysis of what constitutes distribution in everyday practice, see The Gift that Keeps on Giving - Distribution and Copyleft in Open Source by Heather Meeker

Contribution Agreements[edit | edit source]

Contribution agreements are one area where we can look to get an idea of standard practices among larger foundations and FOSS projects. Essentially, the client is the foundation, and the developer may be an individual or a member of a corporation. The OpenID Foundation (OIDF) develops specifications, so it's a good example of where standards development and software development meet. There is a long list of contributors to the OpenID Foundation. The OIDF has both a formal Process to develop their specifications, as well as an IPR Policy [9]. The Policy classifies contributors as "unaffiliated" (an individual), "affiliated" (anyone who work for a company), and "representative" (third-party).

Here is the language in section 5.1 of the IPR:

Copyright License. Some Contributions may not be subject to copyright. To the extent, however, that a Contribution is or may be subject to copyright, the Contributor hereby grants a perpetual, irrevocable (except in case of breach of this license), non-exclusive, royalty-free, worldwide license in such copyright to the OpenID Foundation, to other Contributors, and to Implementers, to reproduce, prepare derivative works from, distribute, perform, and display the Contribution and derivative works thereof solely for purposes of developing draft Specifications and implementing Implementers Drafts and Final Specifications

Section 6 of the IPR addresses patents, with essentially a promise not to assert.

Here are some others to look at.

  • Drupal
  • OpenStack
  • Karl Fogel in his book "Producing Open Source Software" discusses exactly that, from soup to nuts. In it, he includes a discussion of Copyright License Agreements as well as Copyright Assignment Agreements. This is a good read for anyone producing open source software of course, but it's also a great way for a corporate attorney to get the perspective of the FOSS developer.
  • Google Individual Contributor License Agreement
  • Project Harmony offers not only a "harmonizing" view of Contributor Agreements, but also the inter-company contributor agreements so that employees of one organization can effectively collaborate on external FOSS projects that the company uses.
  • The Civic Commons Wiki offers a complete run down of CLA and CAA examples

Please note that while Contributor License Agreements can be a good place to see proper legal text addressing complex issues of Copyright, Patents and Trademarks, they are not good practice operationally. See Bradley Kuhn's perspective from 2014: You do not need a CLA

Is it Viral?[edit | edit source]

Why do contracts seem so hostile toward Free Software? Basically, contracts were written to defend against the risks that GPL could introduce to a companies core products. But this is only one aspect of the complete landscape. A separate aspect is how companies rely on GPL software.

For a long time (and it still continues), the GPL was labelled "viral" (in a bad way) because if you let GPL code touch your proprietary code, you'll be forced to share your proprietary code. That's only half true. Articles like this one talk about this viral nature, but don't even touch on the other half of the story: what triggers the license. You have to "distribute" software to trigger the GPL, so if all you ever do is use the software (plus GPL additions) for your own internal purposes, then you have all the right in the world to use GPL software without having to publish your software to the world. Of course many people recognized that they could circumvent distribution by making "services" out of free software, for example, an online logo generator that uses the GIMP as a backend. This is sometimes called the ASP loophole. In drafting the GPLv3, there was an attempt to define network transmission of services tantamount to distributing the software. This did not ultimately make it into the GPLv3, but instead is part of the variant called the Affero GPL (or AGPL)[10]. The AGPL license has not been as popular as the GPLv2, but at least it's there for software developers to use when they want to prevent their creations from getting boxed up in the cloud. Of greater concern to the corporation is how distribution can be triggered in some non-obvious ways - such as through merger and aquisition[11].

Ultimately, using GPL software in your (commercially available and distributed) product is not different than using some other (proprietary) software -- you need the right to do it. GPL says you don't have that right unless you're willing to share. You don't want to share, then build it yourself. In-house counsel was often focused exclusively on this viral aspect and the "FOSS governance" policies that grew out of it were focused on restricting what could come in-bound to an organization. Their consulting contracts with vendors still had the mindset that they weren't using GPL software anywhere in their organizations, including the mundane and operations related areas of the business that would never cross the "distribution" threshold. To be clear, you can -- and millions of companies do -- use Drupal for an internal website, or MediaWiki for a knowledgebase. You can even modify or extend that code to do things you need it to do. And you don't have to share your code if you don't want to. For most companies and most situations, the best thing they can do is to actually promote their code back "upstream" into the FOSS software project. At a minimum, they should not prevent their code from getting upstream by placing legal obstacles in the way.

The issue we're trying to focus on here and that very few address, is that a majority of companies not only use free software, but need commercial support for that software. They frequently want to build that extra feature or just need help deploying, integrating, upgrading and documenting it. It's not a core product. It's just some internal thing to get work done. Take for example a simple PHP application used for keeping track of Time Off, using a MySQL database backend. Should a company "own" the intellectual property associated with upgrading MySQL? It may actually be counter to the law. An author only has rights to the specific pieces of expression that they've contributed to a collaborative work so they can't claim ownership over the whole thing.


Further Resources[edit | edit source]

Non-competes, Work for Hire, Employment Agreements[edit | edit source]

GPL and What Works[edit | edit source]

Software Freedom Law Center, the pro-bono law firm led by Eben Moglen, Professor of law at Columbia Law School and the world’s foremost authority on Free and Open Source Software law held its annual fall conference at Columbia Law School, New York on Oct. 28. The full-day program featured technical and legal presentations on Blockchain, FinTech, Automotive FOSS and GPL Compliance by industry and community stalwarts.

The program culminated in remarks by Moglen that highlighted the roles of engagement and education in building effective, ever-lasting communities. While expressing his gratitude to his colleague, friend and comrade Richard M. Stallman, Moglen emphasized the positive message relayed by Greg Kroah-Hartman and Theodore Ts’o –earlier in the day– for creating win-win solutions and spreading users’ freedom.

Here is a video and the transcript of his remarks (2016).

Embrace and Extend[edit | edit source]

Since most contributions to the Linux kernel project these days (2021) are by paid staffers of the biggest tech companies, there is an overwhelming undercurrent of non-enforcement of the GPL in business. And who would do it anyway? There is no government or trade organization that will do GPL enforcement.

MediaWiki and Wikipedia[edit | edit source]

References[edit source]

  1. The worlds most popular software license. It was recently updated in 2007. A license utilizing the current legal framework to the advantage of the user AND author of the software. https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses See http://gnu.org and http://www.gnu.org/licenses/gpl.html to learn more.
  2. jQuery is licensed using the MIT license, the second most popular "Open Source" license https://www.blackducksoftware.com/resources/data/top-20-open-source-licenses
  3. http://www.law.cornell.edu/uscode/text/17/101
  4. http://www.law.cornell.edu/uscode/text/17/102
  5. http://www.law.cornell.edu/uscode/text/17/201 Any "work made for hire" confers all right to the "employer" as defined in the Act
  6. https://www.law.cornell.edu/wex/work_for_hire
  7. https://scholarship.law.cornell.edu/cgi/viewcontent.cgi?article=3413&context=clr "Work for Hire Definition in the Copyright Act of 1976: Conflict Over Specially Ordered or Commissioned Works" - a review of the statute and history and differing interpretations of what the act means.
  8. If you read Lee Gesmer, you'll leave out any mention of 'work for hire' in your legal agreements. It could be a huge mistake. https://www.masslawblog.com/copyright/the-work-for-hire-trap/ Mass Law Blog by Gesmer Updegrove Intellectual property and business litigation, Massachusetts and nationally
  9. http://openid.net/ipr/OpenID_IPR_Policy_(Final_Clean_20071221).pdf
  10. https://www.gnu.org/licenses/why-affero-gpl.html
  11. See Distribution explained
  12. On 2022/09/07 they went inactive (archive mode). On 2019/10/29 The International Free and Open Source Law Review relaunched as the "Journal of Open Law, Technology & Society": an international, broadly-scoped journal about openness at Open Source Summit Europe. Previously it was the International Free and Open Source Software Law Review JOLTS is a collaborative legal publication aiming to increase knowledge and understanding among lawyers about Free and Open Source Software issues. Topics covered include copyright, license implementation, license interpretation, software patents, open standards, case law and statutory changes.


Disclaimer[edit | edit source]

"Nothing on the website is legal advice. If it were, it would come with an invoice." I'm just a free software expert.

This information is here to educate, inform, and hopefully spread best practice information to consultants, their clients, employees and employers alike who wish to operate in the real world that is completely full of interconnected "Intellectual Property". It is not legal advice. It should not be construed as legal advice. It does not create an attorney-client relationship. If you're an attorney reading this, I'd love to get your feedback and I hope that this information is useful to the representation you provide to your clients.

Colophon[edit | edit source]

As part of our Free Culture efforts, the copyright for this wiki was updated to use the Creative Commons Attribution-ShareAlike 4.0 International License.

Creative Commons License
This work by http://freephile.org is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.