Indiana Law Review Indiana Law Review Volume 43 2009 Number 1 NOTES Drop-down Lists and the Communications Decency Act: A Creation Conundrum Hattie Harman* Introduction The Internet is a vast medium for expressing ideas, expanding commerce, and exchanging information ofall kinds. In addition to these socially beneficial activities, the Internet provides opportunities to achieve less desirable ends, such as defamation, 1 fraud, 2 and housing discrimination. 3 Multiple parties may contribute to the wrong, including the individual computer user who "posted" the offensive online content and the Internet service provider whose website the individual used to accomplish his act. 4 Determining legal responsibility for these acts has concerned courts and Congress since the early days ofthe Internet. 5 In 1996, Congress amended the Telecommunications Act of 1996 with the Communications Decency Act, codified at § 230 oftitle 47 ofthe U.S. Code ("§ 230"), effectively eliminating websites' liability for content they did not create or develop. 6 More recently, courts have begun to face the issues presented by limited sets ofpre-populated content, such as drop-down lists, that websites make * J.D. Candidate, 2010, Indiana University School of Law—Indianapolis; B.A., 1990, M.A.T. 1992, Miami University, Oxford, Ohio. I would like to thank Professors Andrew R. Klein and R. George Wright for their guidance and insights during this project, and my husband, John, and son, Gordon, for their endless patience throughout my law school experience. This Note is dedicated to the memory of my mother, Jo Harman, who was and continues to be a source of absolute support and inspiration to me. 1 . See, e.g. , Whitney Info. Network, Inc. v. Xcentric Ventures, L.L.C., No. 2 :04-cv-47-FtM- 34SPC, 2008 WL 450095, at *5-6 (M.D. Fla. Feb. 15, 2008). 2. See, e.g., Anthony v. Yahoo! Inc., 421 F. Supp. 2d 1257, 1259, 1262 (N.D. Cal. 2006). 3. See, e.g., Fair Hous. Council v. Roommates.com, L.L.C., 521 F.3d 1 157, 1 166 (9th Cir. 2008) (en banc). 4. See, e.g., Chi. Lawyers' Comm. for Civil Rights Under Law, Inc. v. Craigslist, Inc., 519 F.3d 666, 671-72 (7th Cir. 2008); MCW, Inc. v. Badbusinessbureau.com, L.L.C., No. Civ.A.3:02- CV-2727-G, 2004 WL 833595, at *10 (N.D. Tex. Apr. 19, 2004). 5. See Cubby, Inc. v. CompuServe, Inc., 776 F. Supp. 135, 139 (S.D.N.Y. 1991) (determining liability for allegedly defamatory statements carried in a publication on CompuServe's database). 6. 47 U.S.C § 230 (2006). 1 44 INDIANA LAW REVIEW [Vol. 43 : 1 43 available to their users. 7 Pre-populated content differs from other types ofuser- generated Internet content because the website actually authors the list ofoptions it provides; the user merely selects from that list. 8 Therefore, the website arguably creates or develops the user's ultimate selection and cannot use § 230 to shield it from liability should a court ultimately find the resulting content to be unlawful. 9 Conversely, because the website user unilaterally selects from the available options, he is conceivably the sole creator of the resulting content. This Note examines whether drop-down lists and other pre-populated content restrict a user's available input, making the website a creator or developer ofthe user-selected content, and evaluates possible approaches courts might take to such a question. Part I of this Note traces the history of liability for Internet content. Part II explains relevant statutory definitions and their interpretations by courts. Part III examines recent cases dealing specifically with pre-populated content. Part IV analyzes the problems with courts' current applications of§ 230 to pre-populated content. Part V assesses possible approaches to liability for pre- populated content and concludes with a set ofstandards courts can apply to judge website liability for pre-populated content. I. History of Liability for Internet Content The ability of users to manipulate and provide Internet content has grown with the medium. 10 Increased Internet speech naturally yields to more conflicts over that speech. ' l Because the common law evolved to deal with speech in print media, it has not been perfectly suited to application on the Internet. 12 A. Evolution ofInternet Content Today's Internet differs substantially from the "walled garden" Internet world of the 1990s, where Internet service providers (ISPs) such as America 7. See, e.g., Roommates.com, 521 F.3d at 1 165. 8. For the purposes of this Note, pre-populated content is information formulated by a website and provided as a choice or option to the user. Examples include drop-down lists, check boxes, and radio button selections. 9. See §230(0(3), (c)(1). 1 . See Cecilia Ziniti, Note, The OptimalLiability Systemfor Online ServiceProviders: How Zeran v. America Online Got It Right and Web 2.0 Proves It, 23 Berkeley Tech. L.J. 583, 590 (2008). 11. See Brandy Jennifer Glad, Comment, Determining What Constitutes Creation or Development ofContent Under the Communications Decency Act, 34 Sw. U. L. REV. 247, 247-48 (2004) (discussing the expansion ofInternet communication and the resultant struggle between free speech and traditional defamation rules). 12. See Anthony Ciolli, Chilling Effects: The Communications Decency Act and the Online Marketplace ofIdeas, 63 U. MIAMI L. Rev. 137, 145-46 (2008); see also Zeran v. Am. Online, Inc., 129 F.3d 327, 330 (4th Cir. 1997) (noting Congress's recognition that tort claims threatened freedom of speech on the Internet); Ziniti, supra note 10, at 584-85 (discussing the unfair result of the application of common law principles to an Internet defamation claim). 2009] THE COMMUNICATIONS DECENCY ACT 1 45 Online controlled the information and websites that users could access. 13 During that era, a website provided information and advertising via static web pages, and users had no practical ability to add their own content to the sites. 14 Due in part to increased competition in the dial-up access market and the proliferation of broadband access, the "walls" of the walled garden world began to crumble, 15 and websites began to offer users the ability to interact with the content on their sites. 16 The increase in user-website interaction was possible largely through the use of graphical user interfaces (GUIs), which permitted users to interact directly with the content on the screen, typically by using a mouse. 17 GUIs include familiar items such as clickable icons, windows, and scrollbars. 18 GUIs were a significant advance over traditional command line interfaces (CLIs) because GUIs allowed a user to execute a computer operation by selecting a graphic representation ofthe command, rather than forcing the user to type in a string of text, as CLIs required. 19 In the mid-1970s, Xerox researchers developed the first GUIs, 20 but the most important GUI pioneer was Apple computer.21 In 1983 Apple released its short-lived "Lisa" computer, which incorporated the first GUI commonly known today as a drop-down list. 22 GUIs are the norm in modern software applications 23 and have become particularly important in web browsing applications. 24 Drop-down interfaces in particular have gained widespread application in both traditional and Internet environments because they are easy for the average non-tech savvy computer user to manipulate, and they use relatively little screen space. 25 13. See Ciolli, supra note 12, at 166. The term "walled garden" refers to the idea that ISPs allowed users access to only a small area of the total online world. Id. 14. See id. at 168; Ziniti, supra note 10, at 590. 15. See Ciolli, supra note 12, at 172-73, 176. 16. See id. at 179; Ziniti, supra note 10, at 591-92. 17. The Linux Information Project, GUI Definition, http://www.linfo.org/gui.html (last visited Oct. 13,2009). 18. Eric Steven Raymond & Rob W. Landley, The Art of Unix Usability (2004), http://www.catb . org/~esr/writings/taouu/html/ch02s05 .html . 19. See The Linux Information Project, Command Line Definition, http://www.linfo.org/ command_line.html (last visited May 24, 2009). 20. Raymond & Landley, supra note 1 8. 2 1 . Jeremy Reimer, A History ofthe GUI, ARS Technica, May 5, 2003, http://arstechnica. com/old/content/2005/05/gui.ars/4. 22. Id. ; Raymond & Landley, supra note 1 8. 23. See User Customizable Drop-Down Control List for GUI Software Applications, U.S. Patent Application No. 20090007009 (filed Jan. 1, 2009). 24. The Linux Information Project, GUI Definition, supra note 17. 25. But see Krisha Kumar, Replacing theHTML Drop-Down Control, THOUGHT CLUSTERS : Software, Development and Mgmt., Jan. 12, 2008, http://www.thoughtclusters. com/2008/0 lreplacing-the-drop-down-control (describing the shortcomings of dropdown lists in addition to their benefits). 146 INDIANA LAW REVIEW [Vol. 43: 143 B. Applying the Law to Internet Content Traditional print publication standards for defamation arose from the common law.26 Under the common law of defamation as applied to print publications, courts treat publishers, and distributors differently. 27 Publishers, such as newspapers, are liable for defamatory material they publish, regardless of knowledge of the material's unlawful nature because they have editorial control over that material. 28 Distributors, such as booksellers, are liable only for distributing material they know or should know to be defamatory and may escape "republisher" liability ifthey remove defamatory material from distribution once they have knowledge of the material's defamatory nature. 29 In 1991, a federal district court in New York applied traditional print publication standards to find Internet service provider CompuServe not liable for alleged defamatory content posted on one of its forums. 30 In Cubby, Inc. v. CompuServe, Inc., 31 the district court held that CompuServe had no editorial control over the information at issue and, thus, was subject to liability only as a distributor of the content, that is, if it "knew or had reason to know of the allegedly defamatory" statements. 32 Four years later in Stratton Oakmont, Inc. v. Prodigy Services Co., 33 a New York court held an ISP to the stricter "publisher" standard and found it liable for content posted on one of its online bulletin boards. 34 The court reasoned that the ISP was liable because it "held itself out to the public and its members as controlling the content ofits computer bulletin boards," and it "actively utiliz[ed] technology and manpower to delete notes from its computer bulletin boards on the basis of offensiveness and 'bad taste' . . . and such decisions constitute editorial control." 35 In 1996, largely in response to the holding in Stratton Oakmont 36 Congress enacted § 509 ofthe Communications Decency Act, codified at § 230 oftitle 47 of the U.S. Code. 37 In passing § 230, Congress sought to limit Stratton 26. See Sewali K. Patel, Note, Immunizing Internet Service Providers from Third-Party Internet Defamation Claims: HowFar Should Courts Go?, 55 VAND. L. REV. 647, 654-57 (2002). 27. Mat 656-58. 28. See id. at 656-57. 29. See id. at 657-58. 30. Cubby, Inc. v. CompuServe, Inc., 776 F. Supp. 135, 141 (S.D.N.Y. 1991). 31. Id. 32. Mat 140-41. 33. No. 3 1063/94, 1995 WL 323710 (N.Y. Sup. Ct. May 24, 1995), superseded by statute, Communications Decency Act, Pub. L. No. 104-104, 110 Stat. 137 (1996). 34. A/. at*4-6. 35. Id. at*4. 36. See Barrett v. Rosenthal, 146P.3d510, 516(Cal. 2006) (noting that "[§ 230's] legislative history indicates that [it] was enacted in response to [Stratton Oakmont]"). 37. 47 U.S.C. § 230 (2006). 2009] THE COMMUNICATIONS DECENCY ACT 147 Oakmonfs "backward" result of imposing stricter liability over those ISPs who "tried to exercise some control over offensive material."38 As Congress noted at the time, "[o]ne of the specific purposes of this section is to overrule Stratton- Oabnont v. Prodigy and any other similar decisions which have treated such providers and users as publishers or speakers of content that is not their own because they have restricted access to objectionable material." 39 Section 230 provides in pertinent part: "No provider or user ofan interactive computer service shall be treated as the publisher or speaker ofany information provided by another information content provider." 40 The statute is designed to further several policies: (1) to promote the continued development of the Internet and other interactive computer services and other interactive media; (2) to preserve the vibrant and competitive free market that presently exists for the Internet and other interactive computer services, unfettered by Federal or State regulation; (3) to encourage the development oftechnologies which maximize user control over what information is received by individuals, families, and schools who use the Internet and other interactive computer services; (4) to remove disincentives for the development and utilization of blocking and filtering technologies that empower parents to restrict their children's access to objectionable or inappropriate online material; and (5) to ensure vigorous enforcement ofFederal criminal laws to deter and punish trafficking in obscenity, stalking, and harassment by means of computer. 41 In apparent recognition of § 230's potentially far reach, Congress included a section defining the statute's effect on other areas of the law.42 Specifically, Congress provided that § 230 have no effect on federal criminal statutes, intellectual property law, federal or state communications privacy law, or any state law "consistent with this section." 43 However, the statute specifically prohibits liability for ordinary state law claims, such as contract actions and defamation claims that do not fall within the specific exemptions. 44 Beginning with Zeran v. America Online, Inc., 45 courts have interpreted § 38. 141 Cong. Rec. H8460-01 (1995). 39. H.R. CONF. REP. No. 104-458, at 194 (1996) (Conf. Rep.), reprinted in 1996 U.S.C.C.A.N. 10. 40. § 230(c)(1). 41. Id. § 230(b). 42. Id § 230(e). 43. Id 44. Id. § 230(e)(3) ("No cause of action may be brought and no liability may be imposed under any State or local law that is inconsistent with this section."). 45. 129 F.3d 327 (4th Cir. 1997). 148 INDIANA LAW REVIEW [Vol. 43: 143 230 immunity expansively. 46 Zeran held that § 230 immunized "distributors" as well as "publishers" of third party Internet content. 47 Traditionally, publishers need not have knowledge of the existence of unlawful content in their publications in order to be liable for that content. 48 In contrast, distributors, such as news vendors or booksellers, must have actual knowledge of the unlawful nature ofthe content in order to be liable. 49 The Zeran court concluded § 230' s instruction that "[n]o provider ... of an interactive computer service shall be treated as the publisher or speaker of any information provided by another information content provider" 50 applied equally to distributors with notice of unlawful content. 51 The court further noted that introducing tort liability to the Internet would chill speech in an arena where the right to speak freely is meant to be particularly robust. 52 ?ost-Zeran courts "have construed the immunity provisions in § 230 broadly in all cases arising from the publication of user- generated content." 53 II. Who Is an "Information Content Provider"? Because § 230 provides immunity only for information provided by another information content provider, 54 a website can be liable when it is found to be the provider of content. The meaning of "information content provider" is paramount. The statute and case law help elucidate the meaning ofthe statutory language. 55 Section 230 provides definitions for some of its key terminology.56 Under the statute, an "interactive computer service" is "any information service, system, or access software provider that provides or enables computer access by multiple users to a computer server, including specifically a service or system that provides access to the Internet and such systems operated or services offered by libraries or educational institutions." Courts have recognized the statutory 46. See Barrett v. Rosenthal, 1 46 P.3d 5 1 0, 5 1 8 (Cal. 2006) (discussing the broad acceptance in both federal and state courts of the Zeran holding). 47. Zeran, 129 F.3d at 334. Despite arguments that Internet service providers should be liable as contributors ofcontent, see, e.g. , Patel, supra note 26, at 653, Zeran and subsequent courts have found § 230 immunizes both distributors and publishers from liability for defamatory Internet content, see Barrett, 1 46 P.3d at 5 1 3 ; Doe v. Am. Online Inc. , 783 So. 2d 1 1 0, 1 1 7 (Fla. 200 1 ). 48. Zeran, 1 29 F.3d at 33 1 (citing W. PAGE KEETON et AL., PROSSER and Keeton ON THE Law of Torts § 1 13, at 810 (5th ed. 1984)). 49. Id. (citing Keeton ET al., supra note 48, at 8 1 1 ). 50. 47 U.S.C. § 230(c)(1) (2006). 51. SeeZeran, 129 F.3dat 333. 52. See id. at 331. 53. Doe v. MySpace, Inc., 528 F.3d 413, 418 (5th Cir. 2008). 54. § 230(c)(1). 55. See, e.g., § 230(f)(3); Fair Hous. Council v. Roommates.com, L.L.C., 521 F.3d 1157, 1 162-63 (9th Cir. 2008) (en banc). 56. See§ 230(f). 2009] THE COMMUNICATIONS DECENCY ACT 149 definition of"interactive computer service" "includes a wide range ofcyberspace services" 57 and "the most common ... are websites."58 Section 230 further defines "information content provider" as "any person or entity that is responsible, in whole or in part, for the creation or development of information provided through the Internet or any other interactive computer service." 59 Although "content" is neither explicitly addressed by courts nor defined in the statute, courts have recognized e-mail listservs, 60 message boards, 61 dating and other "matching" websites, 62 and chat rooms 63 as generating the content at issue in § 230 cases. Additionally, courts have recognized the statutory immunity defense against claims including defamation, 64 negligence, 65 infringement of free speech, 66 intentional infliction of emotional distress, 67 violation ofthe Fair Housing Act, 68 violation ofTitle II ofthe Civil Rights Act, 69 fraud, 70 and breach of contract. 71 57. Batzel v. Smith, 333 F.3d 1018, 1030 n.15 (9th Cir. 2003). 58. Roommates.com, 521 F.3d at 1 162 n.6. 59. §230(f)(3). 60. Batzel, 333 F.3d at 1018. 61. Krinsky v. Doe 6, 72 Cal. Rptr. 3d 231, 234 (Ct. App. 2008). 62. See Chi. Lawyers' Comm. for Civil Rights Under Law, Inc. v. Craigslist, Inc., 519 F.3d 666, 668 (7th Cir. 2008); Roommates.com, 521 F.3d at 1 161-62; Carafano v. Metrosplash.com, Inc., 339 F.3d 1 1 19, 1 121 (9th Cir. 2003). 63. See Green v. Am. Online, 318 F.3d 465, 468-69 (3rd Cir. 2003). 64. See, e.g., Whitney Info. Network, Inc. v. Xcentric Ventures, L.L.C., No. 2:04-cv-47-FtM- 34SPC, 2008 WL 450095, at *2 (M.D. Fla. Feb. 15, 2008) (claiming website owner contributed to user-posted content defaming his business). 65. See Doe v. MySpace, Inc., 528 F.3d 413, 416 (5th Cir. 2008) (claiming negligence against social networking website for failing to prevent thirteen-year-old girl from lying about her age, when the girl was sexually assaulted by alleged predator she met through the website). 66. See e360Insight, L.L.C. v. Comcast Corp., 546 F. Supp. 2d 605, 606-07 (N.D. 111. 2008) (claiming that internet service provider's blocking of mass e-mails to ISP's customers violated e- mailers First Amendment right to free speech). 67. See Doe v. Friendfinder Network, Inc., 540 F. Supp. 2d 288, 292-93 (D.N.H. 2008) (claiming for emotional distress against dating website for profile posted by unknown third party impersonating plaintiff). 68. See Fair Hous. Council v. Roommates.com, L.L.C, 521 F.3d 1157, 1162 (9th Cir. 2008) (en banc) (claiming that defendant's roommate-matching website violated provisions of42 U.S.C. § 3604 prohibiting publication ofdiscriminatory housing advertisements); see also Chi. Lawyers' Comm. for Civil Rights Under Law, Inc. v. Craigslist, Inc., 519 F.3d 666, 668 (7th Cir. 2008). 69. See Noah v. AOL Time Warner, Inc., 261 F. Supp. 2d 532, 534 (E.D. Va. 2003) (claiming ISP failed to protect Muslin user from religion-based harassment by other users). 70. See Anthony v. Yahoo! Inc., 421 F. Supp. 2d 1257, 1262 (N.D. Cal. 2006) (claiming dating website fraudulently used fake profiles to trick user into subscribing to the dating service). 71. See id at 1260-61. 150 INDIANA LAW REVIEW [Vol. 43: 143 A. Creation or Development The critical language when analyzing whether a website is an information content provider is "creation or development." 72 Section 230 does not specifically define "creation or development," though courts have given the concept a variety of meanings. 73 Further, whether or not a website creates or develops content ultimately turns on whether it "is responsible, in whole or in part, for the creation or development of information." 74 Courts have generally found that traditional editorial functions such as deleting inaccurate information 75 and making other "minor alterations" 76 do not constitute creation or development. 77 In Batzel v. Smith™ a listserv operator claimed § 230 immunity to successfully defeat a defamation claim. 79 The Batzel court found "[t]he 'development ofinformation' therefore means something more substantial than merely editing portions of an e-mail and selecting material for publication." 80 The Batzel dissent disagreed, finding that selecting a third party's e-mail message for publication effectively alters its meaning, "adding to the message the unstated suggestion that [Defendant] deemed the message worthy of readers' attention." 81 A similar view was advanced in Anthony v. Yahoo! Inc.* 2 where a court found § 230 not applicable because the plaintiffclaimed the defendant's manner of presenting undisputedly third party information constituted development of that information. 83 Most courts reject this view. 84 B. Solicitation When courts consider the context of the website receiving the information in addition to the website owner's actions, the question of creation or development is often closer. In Hy Cite Corp. v. Badbusinessbureau.com, L.L.C, 85 the court found a website soliciting reports of consumers' negative 72. See 47 U.S.C. § 230(c)(1), (f)(3) (2006). 73. See, e.g., Batzel v. Smith, 333 F.3d 1018, 1031 (9th Cir. 2003); Ben Ezra, Weinstein, & Co., Inc. v. Am. Online, Inc., 206 F.3d 980, 986 (10th Cir. 2000); Hy Cite Corp. v. badbusinessbureau.com, L.L.C, 418 F. Supp. 2d 1 142, 1 148-49 (D. Ariz. 2005). 74. § 230(f)(3) (emphasis added). 75. Ben Ezra, 206 F.3d at 986 (finding that "[b]y deleting the allegedly inaccurate stock quotation information, Defendant was simply engaging in the editorial functions Congress sought to protect"). 76. &tfze/,333F.3datl031. 77. See id. 78. See id 79. Id. 80. Id. 81. Id. at 1040 (Gould, J., dissenting in part). 82. 421 F. Supp. 2d 1257 (N.D. Cal. 2006). 83. Mat 1263. 84. See, e.g., Doe v. FriendfinderNetwork, Inc., 540 F. Supp. 2d 288, 298 n.9 (D.N.H. 2008). 85. 418 F. Supp. 2d 1 142 (D. Ariz. 2005). 2009] THE COMMUNICATIONS DECENCY ACT 1 5 1 experiences with businesses by offering compensation could "arguably" be found "responsible ... for the creation or development of information" provided by consumers in response to the solicitation. 86 Some courts have compared soliciting a particular type of content to its development. 87 In F. T. C v. Accusearch, Inc. ,88 the Tenth Circuit held that § 230 did not protect a website from a Federal Trade Commission claim that it engaged in unfair business practices by obtaining and marketing confidential phone records. 89 By making confidential telephone records available for public purchase, the court found Accusearch "developed" those records and therefore was an information content provider under § 230. 90 The court in MCW, Inc v. Badbusinessbureau.com, L.L. C 91 reached a similar result where a consumer-complaint website asked a disgruntled consumer to, among other things, take specific photographs ofthe offending company's owner and post them on the website. 92 The court opined, "[t]he defendants cannot disclaim responsibility for disparaging material that they actively solicit." 93 The court further equated "actively encouraging and instructing a consumer to gather specific detailed information" to development of that information. 94 More recently, however, a court resolved a similar issue differently.95 Whitney Information Network, Inc. v. Xcentric Ventures, L.L.C. 96 concerned the same defendant consumer-complaint website as in MCW.91 The Whitney court found that despite the fact the website advised its users make their reports more interesting by using creativity, 98 it differed from the solicitation at issue in MCW because here the website had not solicited specific content. 99 It is notable, however, that the Whitney court made a point of mentioning the website's 86. Id at 1 149 (quoting 47 U.S.C. § 230(f)(3) (2006)). 87. See F.T.C. v. Accusearch, Inc., 570 F.3d 1 187, 1 199-1200 (10th Cir. 2009); MCW, Inc. v. Badbusinessbureau.com, L.L.C, No. Civ.A.3:02-CV-2727-G, 2004 WL 833595, at *10 (N.D. Tex. Apr. 19, 2004). But see Whitney Info. Network, Inc. v. Xcentric Ventures, L.L.C, No. 2:04- cv-47-FtM-34SPC, 2008 WL 450095, at *10, *11 n.27 (M.D. Fla. Feb. 15, 2008) (finding that despite plaintiffs assertions that defendants solicited user reports about companies that rip off consumers, defendant had not solicited specific material and therefore did not develop the content at issue). 88. 570 F.3d 1187. 89. Mat 1201. 90. Mat 1198. 91. 2004 WL 833595. 92. Id at *\0. 93. Id 94. Id 95. See Whitney Info. Network, Inc. v. Xcentric Ventures, L.L.C, No. 2:04-cv-47-FtM- 34SPC, 2008 WL 450095, at *12 (M.D. Fla. Feb. 15, 2008). 96. Id 97. Compare id. at *1, with MCW, 2004 WL 833595, at *1. 98. Whitney, 2008 WL 450095, at *5. 99. /