Here’s how to legalise phone unlocking

Although Congress has proposals to address the issue of unlocking phones, none of them actually solve the problem.

Apple, Samsung set for court patent showdown in USA
Although there is an exemption safeguard for Section 1201 of the DMCA, it is fatally flawed [EPA]

In the wake of a public petition to allow people to unlock their cellphones for use on the wireless network of their choice, both the White House and the Federal Communications Commission came out in favour of a change in the law. Now, Congress has floated several proposals that would do just that. Unfortunately, the current bills do not take into account what we’ve learned from seven years of unlocking battles and none of them provide a comprehensive fix for consumers. This isn’t a case of the perfect being the enemy of the good. These bills aren’t really all that good. Even assuming Congress wants to leave the broader problems of the DMCA alone for now, we can do much better.

Background on phone unlocking and the DMCA

In 1998, Congress passed the Digital Millennium Copyright Act (DMCA), which is essentially two provisions, the safe harbour and the anti-circumvention rules, also known as Section 1201. Section 1201 is at issue here. That provision was intended to encourage copyright owners to release their works in digital format, having some assurance that by using access and copy protection schemes, backed with the force of law, infringement would not run rampant.  

To that end, section 1201 prohibits circumventing a technological measure that effectively controls access to a copyrighted work (act of circumventing an access control) as well as trafficking in tools or services that circumvent access or copy controls.  

At the time of passage, people identified important, valuable activities, including encryption and security research and reverse engineering that would be adversely affected by the prohibition. In response, Congress identified narrow statutory exemptions and gave the Librarian of Congress, upon recommendation of the Copyright Office, authority to issue new exemptions every three years to allow individuals to circumvent access controls if the proponant can prove that the statute burdens a non-infringing use and that an exemption won’t overly harm copyright interests.

The exemption safeguard is hobbled in serious, even fatal, ways. Very importantly, the exemption process applies only to acts, and cannot exculpate providers of the very tools or services that most individuals need to exercise their freedoms under the exemption. The proponents’ burden of proof in the rulemaking is heavy and byzantine, and the details change every three years.  

In 2006, it came to my attention that phone companies like Motorola and TracFone were claiming that the DMCA prohibited people from unlocking their phones for use on other carriers. My Stanford Law School Cyberlaw Clinic students and I applied for an exemption allowing people to unlock their cell phones. The Librarian granted the exemption on behalf of a man who needed to unlock his phone so he could use it during international travel, and a phone recycling company. The Librarian renewed the exemption in 2010.

If unlocking is legitimate, the law shouldn’t criminalise those who help us get the job done.

Despite these two victories, lawsuits against phone unlocking continued nearly unabated. In particular, TracFone, the nation’s largest seller of prepaid handsets, continues to successfully use section 1201 to shut down phone unlockers. The company’s business model is premised on selling subsidised handsets and making up the difference in service fees. There are organised arbitragers that encourage people to drive around the country from Wal-Mart to Wal-Mart, purchasing the handsets and shipping them to the middlemen, who eventually unlock them and sell the devices overseas. Virgin Mobile has a similar business model, and has faced the same problem, but has not used the DMCA to go after arbitragers. 

Still, as recently as 2012, TracFone was successfully arguing that phone unlockers were not covered by the Librarian’s exemption because they were motivated by their interest in reselling the altered devices for profit, and not, as the exemption required, “for sole purpose of lawfully connecting to a wireless telephone communication network”. TracFone’s success means that a cloud continues to hang over my phone recycling clients’ lawful activities. They, too, turn a profit from unlocking and reselling handsets. Meanwhile, law abiding individuals who lack the technological expertise to modify their own phones (anyone?) have to rely on necessarily grey (or black?) market unlocking tools and services. If unlocking is legitimate, the law shouldn’t criminalise those who help us get the job done. 

The Librarian of Congress decided last October to let the unlocking exemption lapse, despite petitions from MetroPCS, RCA-The Competitive Carriers Association, Youghiogheny Communications and Consumers Union to renew it. As of a few weeks ago, individuals who unlock their phones may be in violation of the anti-circumvention provisions of the Digital Millennium Copyright Act of 1998 (DMCA), 17 USC 1201. Ironically, this lapse may be the best thing that ever happened for phone unlocking. The decision led to a public uproar and to the petition, which led to White House and FCC support, which prompted Senators to act.

Congress’ proposals

There are currently three distinct proposals on the table, from Senators Leahy, Wyden, and Klobuchar. Reportedly, Representative Chaffetz is considering introducing a bill as well. If so, the Senator’s office can learn from the currently available proposals, none of which actually address the problem of locked phones for consumer choice, economic prosperity and the environment.

The Klobuchar bill would require the FCC to direct wireless providers to unlock their customers’ mobile devices on behalf of the wireless subscriber or her agent. The law specifies that consumer contracts with their providers are not affected. This part is confusing. If contracts are unaffected, and the contract says that the consumer may not unlock, then the bill does nothing. Alternatively, the contemplated FCC mandate must limit consumer contracts at least to allow the customer to force the provider to unlock upon request. In any case, any FCC rule issued under this bill would suffer from at least two limitations. First, only subscribers or their agents would be entitled to unlocking from their provider. That leaves phone recyclers, second hand sellers, bona fide purchasers for value and other legitimate unlockers in the lurch. Second, unlockers other than the provider would have no safe harbour. The consumer herself is not able to unlock because her exemption for the act of unlocking has expired. Nor would anyone be authorised to go to any unlocking service other than the provider. This means that just one of my clients in the 2009 rulemaking, ReCellular, would be taking up to four million phones a year to its local mall for unlocking. That’s almost 10,000 a day. This will not work.

Wyden’s bill would amend section 1201 to instantiate forever the 2009 exemption for unlocking. Of course, that exemption is severely limited. It does not allow the sale of unlocking tools or services. It involves only used handsets. It may only be done by the owner of the phone, and then “solely in order to access such a wireless telecommunications network and access to the network is authorised by the operator of the network”. These limitations leave your average Joe who wants to unlock his phone but doesn’t know how without legal recourse. It puts recyclers in a grey area. As in the TracFone cases, are they unlocking “solely” to access a network, or is it also for resale and profit? If the latter, then the Wyden bill wouldn’t protect them. Moreover, it’s unclear how the Wyden bill, if passed, would affect requests for future broader exemptions based on new facts and evolving market practices.  

The Leahy approach would amend the Federal Register to continue the 2009 unlocking exemption until 2015, and direct the Librarian of Congress to reconsider unlocking handsets and other devices, presumably tablets, a year from now. I’m not sure how this proposal gives any meaningful support to phone unlocking, unless the idea is that the recent unlocking hoopla is a shot across the bow that would somehow make the Librarian change his mind three years from now. So much for promulgating regulations based on a legal standard, and burden of proof and all that annoying process. In any case, this fix has the same limitations as the Wyden bill while ensuring consumers one more year of unlocking privileges.

Here’s how to legalise phone unlocking

We have an opportunity here to do something great for consumers and for the planet. Let’s assume a modest goal: Congress wants only to address the unlocking problem, and leave broader concerns about section 1201 aside for now. Any unlocking bill must:

  • Legalise distribution of the tools and services that the vast majority of consumers need to unlock their handsets;
  • Allow any lawful handset owner – not only wireless customers but also second-hand purchasers and recyclers – to unlock lawfully owned phones, or to pay someone else to do it on their behalf;
  • Encourage or require wireless providers to unlock, but not force handset owners to rely solely on providers for the service;
  • Regulate excessive penalties in service contracts that improperly interfere with customer choice in network providers;
  • Consider barring network providers from forcing handset manufacturers to lock phones; and
  • Ensure that bulk unlockers like recyclers and exporters aren’t thrown in the same bucket as handset arbitragers.  

I look forward to seeing what Chaffetz’s office proposes. With full understanding of section 1201 and the limits of the current exemption process, we have a great opportunity ahead of us.

Jennifer Granick is the Director of Civil Liberties at the Stanford Center for Internet and Society.

You can follow Jennifer on Twitter @granick

A version of this article first appeared on the Center for Internet and Society blog.