10 minute read 17 Aug 2023
make it clear

Make IT clear - 06-07/2023

Authors
Justyna Wilczynska-Baraniak

EY Polska, EY Law, Intellectual Property, Technologies and Personal Data, Partner, Attorney-at-law

Intellectual Property, Technology and Personal Data Team Leader. Experienced in legal advisory for multi-jurisdictional clients.

Joanna Ostrowska (Gałajda)

EY Poland, EY Law, Senior Manager

Joanna Ostrowska is a Senior Manager in TMT an IP practice, responsible for cloud computing and cybersecurity projects.

Maciej Bisch

EY Poland, EY Law, Manager, Attorney-at-law

Lawyer with years of experience in intellectual property law, data protection, commercial company law and dispute resolution.

10 minute read 17 Aug 2023
Related topics Law

 

Here is the Make IT clear special materials 06-07/2023

 

Topics discussed:

  • IP - Amendments to the civil procedure – interim relief in IP cases
  • IT - The European Union’s strategy regarding Web 4.0 and virtual worlds
  • Cybersecurity - New modifications in the Cyber Resilience Act proposal
  • Data protection - The EU-USA decision on adequate level of personal data protection
  • E-commerce - Proposed new requirements for contracts for financial services concluded at a distance 
  • EY Guide 2023 – Poland: e-commerce in practice
Amendments to the civil procedure – interim relief in IP cases
(Chapter breaker)
1

Chapter

Intellectual property

Amendments to the civil procedure – interim relief in IP cases

Amendment to the Code of Civil Procedure

On July 1 2023, a major amendment to the Code of Civil Procedure came into effect. The amendment concerns a major part of the framework as the changes will affect nearly 150 provisions of the Code. Among many changes, some of the more significant ones include:

  • Raising the minimum amount in dispute for cases pending before a regional court from PLN 75,000 to PLN 100,000 (cases where the amount in dispute will be less than PLN 100,000 are going to be processed by district courts),
  • introducing a new separate proceeding for consumer cases to speed up the judicial review and strengthen the consumer's position vis-a-vis a company,
  • changes to interim relief procedures in intellectual property cases.

In our newsletter, we aim to explain the changes regarding the interim relief in IP cases in an easy and concise manner.

Changes related to intellectual property

  • Substantiating the claim

    (Article 7301 § 11 and Article 736 § 5 of the Code of Civil Procedure)

    In principle, security or injunction may be sought by each party or participant in the proceedings if they substantiate the claim and demonstrate a legal interest in having the interim relief granted. However, the amendment provides for additional conditions for cases involving industrial property rights (registered intellectual property rights, such as trademarks, invention patents or industrial designs, among others).

    Under the new provisions, the court must also take the likelihood of revocation of the exclusive right in other pending proceedings into its consideration when evaluating the prerequisite of substantiating the claim. This circumstance shall be determined based on information from the parties, unless it is known to the court ex officio.

    What are the practical implications? The above-mentioned change signifies that the application for interim relief must also include information on whether there are, or have been any pending industrial property right revocation proceedings, alternatively, a statement about the lack of knowledge of any such proceedings.

  • Hearing of the obligor

    (Article 755 § 22 of the Code of Civil Procedure)

    The new regulations for interim relief in intellectual property rights cases (for both copyright and industrial property rights) also include a requirement to hear the obligor. This means that prior to granting a security or injunction, the court has to hear the party against which such a measure would be applied.

    Exempt from this requirement are the following situations:

    • It is necessary to make an immediate ruling on the rightsholder's claim,
    • If the interim relief is fully enforceable by execution by the bailiff,
    • As part of an interim relief the claimant is applying for the establishment of a compulsory administration over an enterprise, an agricultural enterprise, or a part of it, or a facility within an enterprise or a part of it.
  • Deadline for submitting the application

    (Article 755 § 23 of the Code of Civil Procedure)

    A 6-month time limit for submitting an application for the interim relief in intellectual property proceedings (including both copyright and industrial property rights) has been introduced, starting from the date of a rightsholder becoming aware of the infringement of his exclusive right.

What do these changes mean for your business?

When someone infringes your intellectual property rights

In a situation in which someone violates your organization's intellectual property rights (e.g. there is an infringement of a trademark, patent or copyright), the most common first step you take at the competent court is to apply for an interim relief to secure your claim against the allegedly infringing party. Nowadays, intellectual property cases are reviewed in separate proceedings. The new interim relief regulations, among other things, introduce a 6-month time limit for submitting an application for an interim relief, and, in the case of industrial property rights, an additional obligation to state whether an IP revocation proceeding is or has been pending. Both of these issues are crucial to protect the interests of the organization whose IP rights might have been infringed.

When someone accuses you of infringement of intellectual property rights

In case you find yourself on the side of someone accused of infringing intellectual property rights of third parties, it is worth to remember that the latest changes under the amendment - apart from the exemptions mentioned in this article - guarantee the right to a hearing before the court grants any interim relief at the expense of your organization.

The European Union’s strategy regarding Web 4.0 and virtual worlds
(Chapter breaker)
2

Chapter

IT

The European Union’s strategy regarding Web 4.0 and virtual worlds

On July 11 2023, the European Commission adopted a new strategy on Web 4.0 and virtual worlds. In the strategy, the Commission presented its vision and proposed roadmap which aim to make a significant contribution in achieving the objectives of the Digital Decade in regards to technological leadership, sovereignty and competitiveness by 2030.

The strategy sets out to shape Web 4.0 technology as well as virtual worlds in a way that reflects the values and principles of the EU, guarantees respect for the rights of people living in the EU, and provides an environment in which European businesses can thrive. 

The four key pillars of the strategy

1. Empowering people and enhancing skills

By the first quarter of 2024 at the latest, the Commission will publish guidelines for the general public in the form of a „toolkit for citizens”

The Commission will work with the Member States, in order to build a talent pool and support the enhancement of skills, also among women and girls, through projects funded under the „Digital Europe” programme.

2. Transformation of businesses

The Commission will support digital content creators and media companies in the EU in testing new tools, ensure collaboration between developers and commercial users, and work with Member States to provide regulatory sandboxes related to Web 4.0 and virtual worlds.

3. Transformation of public services

The Commission is investing in important initiatives, among others „Destination Earth” (DestinE), Local Digital Twins for Smart Communities and the European Ocean Digital Twin

The Commission will launch two new flagship initiatives: „CitiVerse” – i.e. an immersive urban environment that can be used for city planning and management, and the European Human Virtual Twin, i.e., a copy of the human body to support clinical decision-making and treatment in individual cases.

4. Shaping global standards for open and interoperable virtual worlds and Web 4.0 technology

The Commission will work with stakeholders in the area of Internet governance around the world and promote standards for Web 4.0 technology which are in line with the vision and values of the EU.

Why has the Commission launched the new initiative on Web 4.0 technologies and virtual worlds?

The European Commission aims to ensure that the EU’s public, businesses and public bodies are ready to take advantage of the opportunities created by the 4.0 tech and the virtual world. Virtual worlds offer significant chances in industrial and social fields. In the manufacturing sector, digital twins help test and optimize production processes, rendering them more efficient and sustainable. In the cultural and creative sectors, virtual worlds offer new ways to create, promote  and distribute European content and interact with audiences. 

One important potential in the virtual world is education and training, particularly in the medical field, for such things as emergency situations or surgical simulations to reduce the risk of surgical complications and to increase the accuracy of diagnosis. Additionally, virtual classrooms will enable students and teachers to visualize abstract objects or simulate scientific experiments without endangerment. 

What regulations might apply currently to Web 4.0 technology and the virtual world?

The EU has a substantial regulatory framework that applies to several aspects related to the development of the virtual world and Web 4.0 technology.

With regard to protecting and enforcing the rights of individuals and businesses in the digital world, the Digital Services Act and the Digital Markets Act introduce a comprehensive accountability system for platform as well as search engine providers and core platform service providers, respectively. The said regulations also apply to virtual worlds and Web 4.0 technology.

The GDPR guarantees the proper processing of personal data, and EU consumer protection regulations, particularly the Unfair Commercial Practives Directive, protect against manipulation of consumers’ online choices and transactions. The newly adopted Markets in Crypto Assets Regulation (MiCA) addresses cryptoassets not covered by existing financial services regulations.

The aforementioned legal frameworks will be very important in the context of emerging virtual worlds.

New modifications in the Cyber Resilience Act proposal
(Chapter breaker)
3

Chapter

Cybersecurity

New modifications in the Cyber Resilience Act proposal

Due to low levels of cybersecurity and insufficient understanding and access to information among users which prevents them from choosing products with an adequate cybersecurity level, hardware and software are increasingly falling victim to successful cyberattacks. In addition, cyber incidents often have a cross-border impact.

Therefore, the EU legislator has proposed the adoption of a regulation on horizontal cybersecurity requirements for products with digital elements and amendment of Regulation (EU) 2019/1020 (Cyber Resilience Act), which aims to create conditions for the development of secure products with digital elements and to enable users to take cybersecurity into account when choosing a product.

Work on the project has been ongoing since 2022. In July 2023, further modifications were proposed to the provisions of the regulation, which is approaching its final version.

  • Scope of modifications

    The latest changes affect many aspects of the proposal. Among the most significant, it is worth mentioning the modifications in:

    • Obligations related to supply chain
    • Incident reporting
    • Scope of critical products with digital elements classes
    • Date of application of the regulation
  • Supply chain

    Manufacturers who choose to integrate products with digital elements of third-party components must exercise due diligence in ensuring that the product complies with cybersecurity requirements. This also applies if the manufacturer uses free and open-source software. All information relevant to ensure compliance with the requirements under the regulation must be provided free of charge by the manufacturer to the manufacturer of the final product.

  • Incident reporting

    The incident reporting obligation covers any actively exploited vulnerabilities during the product manufacturer's support period. Third parties will be able to report vulnerabilities directly to the manufacturer or anonymously through the national CSIRT.

  • Critical products with digital elements

    The range of critical products with digital elements in both Class I and Class II has been significantly changed:

    • Class I - only 8 of 21 product types remain, including anti-virus software, microcontrollers and operating systems
    • Class II - only 3 product types remain: VPNs, firewalls and runtime systems that support virtualized execution of operating systems
  • Date of application

    Entrepreneurs will have an extended period of time to adapt to the obligations under the regulation. The regulation will apply 40 months after its entry into force. However, the obligation to report will apply 20 months after the entry into force of the regulation.

The EU-USA decision on adequate level of personal data protection
(Chapter breaker)
4

Chapter

Data protection

The EU-USA decision on adequate level of personal data protection

On July 10, the European Commission adopted its Adequacy Decision, allowing easier data transfers between the EU and the US under the Transatlantic Data Protection Framework which came into effect the following day, July 11.

Introduction

The Transatlantic Data Protection Agreement seeks to update the legal basis under which transfers of personal data from the Union to the United States are permitted. Previous  regulations, the 2000 Safe Harbor and 2016 Privacy Shield, were invalidated by the CJEU in the Schrems I (C-362/14) and Schrems II (C-311/18) rulings, as a result of complaints brought to the Court by Max Schrems.

  • Changes - effectual or illusory?

    In response to the CJEU's invalidation of the "Privacy Shield”, the new framework was supposed to include a number of significant changes to give EU citizens a guarantee of being treated equally to US citizens by US authorities. Some changes have indeed been implemented, such as limiting access to data by the US intelligence authorities and imposing additional obligations on those authorities, as well as new remedies, though, in practice, the agreement differs little from the earlier "Privacy Shield". It remains to be seen how long entities on both sides of the Atlantic will be able to partake in this free flow of data.

  • Schrems III on the horizon

    The NOYB ("None of Your Business") organization, founded by Max Schrems, considered the concluded agreement to be a copy of the Privacy Shield and has already announced a complaint to the CJEU:

    „They say the definition of insanity is doing the same thing over and over again and expecting a different result. Just like 'Privacy Shield' the latest deal is not based on material changes, but by political interests.” ~ Max Schrems

A national competition authority may conclude, when investigating abuse of dominant position, a violation of the GDPR provisions- CJEU ruling C-252/21
(Chapter breaker)
5

Chapter

Data protection

A national competition authority may conclude, when investigating abuse of dominant position, a violation of the GDPR provisions- CJEU ruling C-252/21

Meta Platforms Ireland operates the online social network Facebook in the EU. By registering with Facebook, its users accept Meta Platforms Ireland's terms and conditions in general, including its data and cookie policies. As a result, Meta Platforms Ireland collects data on user activity within and outside the social network and links it to user data accounts on Facebook. "Non-Facebook data" is data resulting from visits to third-party websites and applications, and data on the use of other online services belonging to the Meta group (including Instagram and WhatsApp). The collection of this data is used, among others, to create personalized advertising messages for Facebook users.

CJEU ruling

  • When investigating abuses of dominance, a Member State's competition authority may also examine a company's compliance with other regulations such as the GDPR.
  • Once the national competition authority considers that an examination of compliance with the GDPR is necessary, it must determine whether this or similar behavior has already been the subject of a decision by the competent supervisory authority, or the CJEU.
  • The mere fact that a user visits websites or applications that may reveal "sensitive" data does not mean that the user is making his or her data public within the meaning of the GDPR. A user's posting of data on a social networking site as well as the use of "like„ and "share" buttons, or buttons for identification via email address and phone number, will only constitute "obvious" public disclosure of data if the user explicitly expresses his or her intent beforehand.
  • Personalized advertising used to fund Facebook's activities is not a legitimate justification for processing data without user consent.
  • The dominant position of a company can affect users' freedom of choice, which is an important factor when determining whether consent was given voluntarily.
Proposed new requirements for contracts for financial services concluded at a distance
(Chapter breaker)
6

Chapter

E-commerce

Proposed new requirements for contracts for financial services concluded at a distance

The Council and the European Parliament have reached a provisional political agreement on simplifying regulations for contracts for financial services concluded at a distance, enhancing consumer protection and creating a level playing field for financial services offered online, over the phone, or through other forms of remote sales.

What initiated the need for changes?

The development of IT technology is causing more and more financial services (loans, insurance, investments, pension plans, etc.) to be advertised on the Internet, and contracts for such services to be concluded at a distance.

The above mentioned often makes consumers more exposed to:

  • the use of interfaces designed to trick users and divert their attention towards products or services they did not wish to sign up for (dark patterns), or
  • unclear, long or deceptive contracts that, once signed, are difficult to withdraw from. 
  • What provisions are affected by the proposed changes?

    The changes will include the provisions of the Directive 2002/65/EC of the European Parliament and of the Council of 23 September 2002 concerning the distance marketing of consumer financial services (the „Directive”), and are intended to update it and bring it in line with the realities of the digital market.

  • What changes can be expected?

    The political agreement reached by the Council and Parliament provides:

    • Clarification of the scope of the Directive and the safety net it provides, especially for financial services that are excluded from or only partially covered by other sectoral regulations;
    • Improvement of disclosure rules, modernization of pre-contractual information obligations, maintaining the possibility for Member States to apply more strict national rules in this area, thus not allowing the level of consumer protection to be compromised;
    • Ensuring that consumers can request human intervention to better understand the impact of a contract on their financial situation when a trader uses online tools (e.g., robo-advisory or chatbots);
    • Introducing a withdrawal function ("withdrawal button") located on the service provider's interface that is easy to find to make consumers aware that they can withdraw from a contract, and to make withdrawal no more difficult than entering into a contract;
    • Reducing the use of dark patterns as a sales technique used to influence consumer decisions.
  • What’s next?

    Before the changes can come into effect, the provisional agreement must be approved and formally adopted by the Council and the European Parliament, and the revised directive must be adopted in the legislative process. 

EY Guide 2023 – Poland: e-commerce in practice

EY Law, together with the tax advisory team and the EY Strategy and Transactions team, has prepared the EY 2023 Guide - Poland: e-commerce in practice. Our experts have analyzed all the relevant aspects that need to be taken into account before starting an online business in Poland. 

Read more

Summary

Here is the next study prepared as part of the Make IT clear program.

Every month we will show you the trends that entrepreneurs should follow and the solutions that should be implemented in order to be up to date with the law of technology, intellectual property and data protection. We will also indicate the risks and challenges associated with your business.

Do not hesitate to contact us!

Contact us

Interested in the changes we have made here,

contact us to find out more.