This is a thread from Rahaeli@Twitter, co-founder of Dreamwidth, advising Mastodon instance admins about their liabilities for copyright and CSAM reporting as service hosters.

I asked permission to repost it here, so every post in the thread below is Rahaeli's, not mine.

#fediadmin #copyright #csam

Hey, US folks newly running Mastodon instances: do Future You a *huge* favor, mitigate your potential liability, and register with the copyright office and designate an agent to receive DMCA reports *right now*. https://copyright.gov/dmca-directory/
DMCA Designated Agent Directory | U.S. Copyright Office

DMCA Designated Agent Directory

It costs $6 a year. Use a forwarding phone # and a PO Box or other address you check frequently, not your home address: it will be public. Without this registration, you WILL be held liable for any copyright violation on your instance.

I also strongly recommend that if you run an instance, incorporate as a LLC and -- this is the critical part -- take out an umbrella liability insurance policy with coverage of at least $2m per incident and covers attorney costs and fees.

(If you have homeowners or renters insurance, and you should, this should be a very cheap rider on the policy. 99% of the time it will be unnecessary and the other 1% it will save your ass completely.)

I am somehow not surprised that only two Mastodon instances have registered designated agents and one of them is the Lawprofs instance.

Also: you absolutely should also pre-register with NCMEC, because "I found someone on my instance posting CSAM" is not the time to have to learn the reporting process

But yeah, for copyright, feel free to steal our DMCA policy, it's CC-BY-SA. (Note that we willingly accept a level of potential risk around repeat offender account termination that may be outside your risk tolerance.) https://dreamwidth.org/legal/dmca

Our ToS and privacy policy are also CC, and you're welcome to use them, but they should be more customized for your individual situation than just "take this and change it to your contact info".

Dreamwidth DMCA Policy

If you're on Mastodon and you know your instance admin, point them here. (Mastodon not warning instance admins that they have legal obligations in running a platform is one of the many problems I have with the project, sigh.)

The relevant section of copyright law is 17 USC §512 and you can read it here: https://law.cornell.edu/uscode/text/17/512 You are protected from liability for your users' copyright violations, but ONLY if you follow this process, and the process includes registering a designated agent.

I can't give you legal advice and none of this is intended as such, but if you're absolutely at sea and have never heard of any of this before, I can try to answer general questions.

17 U.S. Code § 512 - Limitations on liability relating to material online

LII / Legal Information Institute

I will be working on a detailed post for "stuff Mastodon instance admins need to know" in the next few days, because the more I think about it, the more I realize y'all probably don't know you should be doing to cover your asses

*don't know all you should be doing

oh man I need to introduce you all to Rozkom, too. the ritual response when you hear anyone mention Rozkom: *fuck* Rozkom.

https://en.m.wikipedia.org/wiki/Roskomnadzor

Roskomnadzor - Wikipedia

Rozkom aka Roskomnadzor is the Russian state internet censorship bureau and if any of your users annoy the Russian government in the slightest you *will* hear from Rozkom wanting you to censor them. Unless you do what we do and blackhole their reports!

Oof, Mike reminded me of this dating bug with the copyright office registration, too:

https://twitter.com/mmasnick/status/1593874393910083584

Mike Masnick on Twitter

“Also, don't renew your DMCA agent status immediately when the @CopyrightOffice sends you the reminder email 3 months before the end of the period you've paid up for... because they just lop off those last 3 months and start the clock again from your renewal date. But do renew.”

Twitter
Also, since I see people misunderstanding: this is for people who run their own servers, plain old users don't need to worry about any of this