Can big data accumalators be guilty of defamation/libel/slander?
<p><a href="https://www.bbc.co.uk/news/world-60029508" rel="nofollow noreferrer">It is currently in the news</a> that there are accusations that the <a href="https://gifct.org/" rel="nofollow noreferrer">Global Internet Forum to Counter Terrorism</a> (GIFCT) has been used to target individuals.  As I understand it third parties, Only Fans in this case, told GIFCT that images from certain individuals were associated with terrorism and GIFCT publishes identifiers of images (hashes) that other third parties (Meta in this case) acted on to the detriment of those individuals (their images and/or accounts were removed by Meta because of the association with terrorism).  For a <a href="https://www.daslaw.co.uk/blog/understanding-the-definition-of-defamation" rel="nofollow noreferrer">statement to be defamatory</a> it is required that:</p>
<ul>
<li>The statement was communicated to a third party;</li>
<li>It caused or is likely to cause serious harm to the claimants reputation:
<ul>
<li>It causes the regard in which the subject is held by right thinking or reasonable members to be lowered;</li>
<li>It substantially affects in an adverse manner the attitude of others towards the claimant.</li>
</ul>
</li>
</ul>
<p>It seems this would apply in this case, as it consisted of one of the worse accusations possible in this day and age it could be considered extremely so.  The same basic model is used by other organisations, such as credit reference agencies (X is a bad credit risk) and <a href="https://www.cifas.org.uk/" rel="nofollow noreferrer">CIFAS</a> (X is a fraudster or easy mark).  These is the defence of honest opinion, but one could at least make the claim that the word of a competitor would not be considered sufficient proof of terrorism for a reasonable person to repeat said claims.</p>
<p>Are these sorts of determinations the sort of thing that could generate a valid claim of defamation?  As they are usually transmitted in the form of a web service I do not know if it would could as libel or slander.</p>

<p><a href="/questions/tagged/united-states" class="post-tag" title="show questions tagged &#39;united-states&#39;" rel="tag">united-states</a></p>
<p>Usually, big data collectors who get something wrong while acting in good faith and simply making a mistake, at least unless they are notified of the problem and fail to correct it, are not liable for defamation in the U.S. since they have not met the intent requirement for a defamation action (or because statutory immunity such as the immunity provided by <a href="https://blog.ericgoldman.org/archives/2022/01/background-reports-protected-by-section-230-dennis-v-mylife.htm" rel="nofollow noreferrer">Section 230</a> (citing <em>Dennis v. MyLife.com</em>, Inc., 2021 WL 6049830 (D.N.J. Dec. 20, 2021)) or certain provisions of the <a href="https://www.ftc.gov/enforcement/statutes/fair-credit-reporting-act" rel="nofollow noreferrer">Fair Credit Reporting Act</a> applies, sometimes but not always, with a statutory remedy as a substitute for common law liability).</p>
<p>Defeating a defamation lawsuit isn't always what it's cracked up to be for a defendant. For example, the Better Business Bureau recently prevailed in defamation lawsuit only after seven years of litigation (an outcome that suggests that a case that can survive an early dismissal may have significant settlement value). <em>A Better Way Wholesale Autos, Inc. v. Better Business Bureau of Connecticut</em>, 2021 WL 5112673 (Conn. Superior Ct. Oct. 19, 2021) (discussed <a href="https://blog.ericgoldman.org/archives/2021/11/bbb-defeats-defamation-lawsuit-after-7-years-better-way-v-bbb.htm" rel="nofollow noreferrer">here</a>).</p>
<p>More often, the common law remedy is the tort of negligent misrepresentation (which applies to false statements of material facts made in the course of a business or occupation as a result of the negligence of the person making the statements), or in the case of a credit reporting agency, a statutory claim under federal laws regulating credit reporting agencies. <em>See also, e.g.</em>, Megan Valent, &quot;<a href="https://heinonline.org/HOL/LandingPage?handle=hein.journals/umblr28&amp;div=20&amp;id=&amp;page=" rel="nofollow noreferrer">The United States: Big Data, Little Regulation</a>&quot;, 28 U. Miami Bus. L. Rev. 434 (2019).</p>
<p>One has to show particularized injury from a violation to state a claim, however, including claims under the statutory remedy that purports to give standing to anyone whose information is inaccurate. <em>See <a href="https://www.supremecourt.gov/opinions/15pdf/13-1339dif_3m92.pdf" rel="nofollow noreferrer">Spokeo, Inc. v. Robins</a></em> (U.S. 2016) and <em><a href="https://www.supremecourt.gov/opinions/20pdf/20-297_4g25.pdf" rel="nofollow noreferrer">TransUnion, LLC v. Ramirez</a></em> (U.S. 2021) (involving inaccurate terrorism warnings from a credit reporting agency). The <em>TransUnion</em> case essentially added a constitutional standing component to the publication and damages elements that would apply in a defamation action in the context of a statutory claim under the Fair Credit Reporting Act that doesn't expressly require either of these elements.</p>
<p>Many of the legal issues, however, are <a href="https://www.futureoftech.org/big-data/5-privacy-security-liability/" rel="nofollow noreferrer">unsettled questions of first impression</a>.</p>
<p><a href="/questions/tagged/european-union" class="post-tag" title="show questions tagged &#39;european-union&#39;" rel="tag">european-union</a></p>
<p>A survey of the issues in an E.U. context can be found at Thomas Hoeren, &quot;Big data and the legal framework for data quality&quot; International 25(1) Journal of Law and Information Technology 26-37 (January 8, 2017). <a href="https://doi.org/10.1093/ijlit/eaw014" rel="nofollow noreferrer">https://doi.org/10.1093/ijlit/eaw014</a> the abstract of which states:</p>
<blockquote>
<p>Power has a lot to do with knowledge, access to, and utilization of
data. But in the context of the debate about power, the question of
data quality is hardly ever raised. This is because legal standards
for data quality are lacking. The first attempts to regulate this
question can be found hidden in Article 6 of the EU Data Protection
Directive and in the regulation on scoring in section 28b of the
German Federal Data Protection Act (BDSG). From this, with the help of
initial research attempts by computer science and sociology, we can
develop a provisional, fragmentary framework for legal standards in
data quality, as I will demonstrate in the following 10 theses.</p>
</blockquote>
<p>U.S. courts will often decline to assert jurisdiction over GDPR claims arising under the laws of European countries. <em>See Finch v. Xandr, Inc.</em>, 2021 WL 5910071 (S.D.N.Y. Dec. 14, 2021) (discussed <a href="https://blog.ericgoldman.org/archives/2021/12/new-york-court-is-the-wrong-venue-for-uk-gdpr-class-action-finch-v-xandr.htm" rel="nofollow noreferrer">here</a>).</p>

internet defamation terrorism