Cybersecurity Law
[ August 18, 2022 by VGBA 0 Comments ]

Detoxifying the anonymous internet one troll at a time: Norwich orders

By: Jordan Deering, Ryan J. Black, Tyson Gratton, Ryan Hamieh (student)

When people create profiles and interact with one another online, doing so anonymously under an assumed username remains the most common approach.  While some major platforms have moved away from this model and have begun requiring users to register with their actual names, the vast majority of platforms continue to operate with anonymity as a key feature.  When users layer anonymous accounts upon anonymous accounts it can be nigh impossible for parties who have been wronged online to identify the wrongdoers and hold them to account without the cooperation of platforms and ISPs who are able to connect anonymous usernames with identifying information such as names, email addresses, and IP addresses.

A Norwich order is an extraordinary equitable remedy that requires an innocent third party, which is tied up in the wrongdoing of another, to disclose certain information to the wronged party so that the wronged party may pursue a claim. As platforms and ISPs will generally refuse to disclose information about their users upon request and in some cases are prohibited from doing so absent a court order, Norwich orders have become a valuable tool in Canada to obtain the necessary information to pursue claims against people who infringe copyright, harass, defame, make threats of physical harm and death, or otherwise facilitate crime online.

The inquiry in a recent Ontario Superior Court of Justice case considered whether a legitimate objective justified the use of a Norwich order in an ex parte setting. An ex parte proceeding is one where the judge decides without all of the parties being present at the application—in this case the third party platform who was the subject of the application. In Bungie Inc. v. TextNow Inc., 2022 ONSC 4181, the Court established that there was rationale for proceeding absent TextNow, as concerns over the safety of the applicants provided sufficient justification in light of TextNow’s policy to inform its customers of applications of this nature. This decision reemphasizes the unique utility of Norwich orders and how such orders can be obtained on an urgent and ex parte basis when there is a serious risk of harm.

The background

The applicants were two Bungie Inc. employees, going by the pseudonyms James Doe and Jane Doe, who live in the US and work as developer and community manager, respectively, for Bungie’s popular multiplayer game, Destiny 2. While games are an enjoyable pastime for many, others take it as an opportunity to harass, grief and troll (intentionally degrading the gameplaying experience of others through malicious activity), dox (using or exposing private or personal information about a particular individual on the internet with malicious intent, enabling others to do the same or make threats of harm) and even swat (that is, calling in emergency police requests that result in armed police officers arriving at the victim’s address) other members of the gaming community. Game development employees who are public-facing, especially as “community managers” who responsible for interacting with and engaging with the game’s online community, face the direct ire of these miscreants, often as a result of gameplay issues, development decisions, perceived community slights, racism, sexism, or a host of other reasons.

In this context, the applicants were subjected to increasing harassment and abuse of their personal information at the hands of an anonymous individual living in the United States.   Evidence was submitted demonstrating that the harasser employed the use of the services of the respondent, TextNow Inc., to anonymize their conduct and communications. TextNow is a company registered in Ontario and, amongst other things, operates a service where it purchases access to phone networks operated by telephone companies, and then provides customers with inexpensive access to those networks.  The net result is that while there are many legitimate uses for this service, in some cases it enables harrassers to efficiently make anonymous texts and phone calls. TextNow’s terms of service make it clear that it functions to provide customers with anonymity, maintaining a policy that they only preserve records for 90 days, and (absent a non-disclosure order) will inform users of requests for customer information giving them seven days to dispute the request in court.

The applicants submitted ample evidence that one of TextNow’s customers was harassing and doxing the individuals applicants. The abusive behaviour ensued through numerous calls, texts and offensive voicemails, sending death threats, and going so far as to order pizza to the applicants house (which, while sounding innocuous, is a direct threat in the context of known swatting opportunities).

The applicants submitted a Norwich application to extract information about the harasser from the customer database of TextNow. Generally these orders go unopposed upon notice.  But in this context, the rationale for proceeding ex parte was the concern that TextNow has a policy to tell its customers of applications of this type, which may have lead to dire consequences. The Court considered whether to make an interim order prohibiting disclosure of the Norwich application by the respondent when served. Ultimately, the Court determined that notice of the application to TextNow should be waived in the interests of justice.

Justification for waiving notice

For the Court to determine that notice of the application should be waived, they examined the established legal test for granting Norwich orders, including whether:

  • The applicant has provided sufficient evidence to raise a valid, bona fide or reasonable claim;
  • The applicant has established a relationship with the third party from whom the information is sought, such that it establishes that the third party is somehow involved in the acts complained of;
  • The third party is the only practicable source of the information available;
  • The third party can be indemnified for costs to which the third party may be exposed because of the disclosure; and
  • The interests of justice favour obtaining the disclosure.

In determining whether to provide notice of the Norwich application to TextNow, the Court assessed the need for discovery and the proposed use for the information sought. The arguments against providing notice generally underscore whether notice to the alleged wrongdoer may precipitate the dissipation of assets or additional offences.

The Superior Court concluded that notice of the application should be waived because the delay necessary to give notice of the proceeding could entail severe consequences, elaborating that if TextNow followed its posted policy and informed its customer of the application, the harm the customer may commit is serious given evidence of anti-social behaviour and overt threats. The Court clarified that providing notice would be foolhardy given the nature of threats made against the applicant Bungie employees.

Finally, the Court elaborated that this equitable remedy ought to be made available to identify people in circumstances of harassment, racism, doxing, overt threats or the abuse of private information. Regardless of the wrongdoer’s location, the Court elaborated that the identity of targets should be discoverable provided the prerequisites of a Norwich application are met.

Future outlook

As anonymity surges throughout the globe, it becomes increasingly difficult to identify individuals who have committed wrongdoing. The progression of social media and identity-concealing apps contributes to this inconspicuousness and functions to hinder legal investigations.

The Superior Court’s affirmation of ex parte Norwich relief in circumstances of online harassment serves to give yet another tool to pierce the veil of duplicitous offenders. This equitable remedy will prove valuable in certain litigation settings and serve to diminish strain and cost in cross-border investigations. And, when the circumstances dictate, removing the obligation to provide notice expedites legal proceedings and ensures the potential consequences of litigation are mitigated well in advance.

A version of this article was originally published on (and is used with permission), but it provides only general information about legal issues and developments, and is not intended to provide specific legal advice. Please see DLA Piper’s disclaimer for more details.


Sport & Entertainment
[ July 26, 2022 by VGBA 0 Comments ]

The benefits of bespoke drafting: BC Court upholds arbitration provision and class action waiver ‎in video game context

By: Ryan J. Black, Rebecca von Rüti, Tyson Gratton, Jason Lin (Summer Student)

Video gamers are accustomed to accepting terms and conditions as part of their gameplay. Whether for the platform through which they access the game, the hardware on which they play it, the ‎operating system that commands the hardware, the internet service that enables their play, or ‎for the game itself, different terms of service apply to nearly every interaction in games. While a consumer may be under the impression that they are purchasing a copy of a game (an artifact from a simpler time) in reality (and legally speaking) the gamer is purchasing a licence to play the game in accordance with limited, and often detailed, licence terms.

While there are some constraints around ‎that in consumer protection law, a player’s choice is to either agree to play the game on those terms, or to decline ‎those terms and find another game to play.  When a dispute arises between the player and the game company, those terms (representing an agreement between consumer and licensor) are the first stop for determining how—and where—that dispute might be resolved‎.

In Petty v Niantic Inc, 2022 BCSC 1077, the defendants sought a court order to partially stay‎1 the class proceeding brought by Sharise Petty and David Stasch (the “Plaintiffs”), as representative plaintiffs on behalf of a proposed class of residents of British Columbia and Alberta who play the games “Pokémon Go” and “Harry Potter: Wizards Unite” (the “Games”).

The Plaintiffs claimed that the “loot boxes” —a catch-all phrase for consumable, purchasable items within the Games that offer a player virtual advantages– amounted to an unlicensed, illegal gaming system under various Canadian laws, including the Criminal Code, the Competition Act, the Alberta Consumer Protection Act (the “Alberta CPA”) and the British Columbia Business Practices and Consumer Protection Act (“BC BPCPA”).

By asking for a stay, the Defendants were asking the British Columbia Supreme Court (the “Court”) to halt further legal process in the action, which could later be lifted depending on certain later events taking place. The Defendants sought a stay on the basis that the Plaintiffs agreed, in the Games’ Terms of Service (the “Terms”), to a clause requiring disputes about the Games to be resolved by either binding arbitration under California law or local small claims procedures.

Prescriptive alternative dispute resolution provisions are common in consumer contracts and can vary in their restrictiveness. Among the most restrictive are “mandatory arbitration provisions” which require all disputes to be settled by binding arbitration, often pursuant to the laws of and taking place in, the jurisdiction of the service provider. Such provisions commonly incorporate class action waivers and invariably prevent or restrict the ability of the consumer to bring a class action against a service provider. Another, increasingly common, approach is the one taken by the Defendants here, which presents the consumer with a choice between arbitration and small claims procedures. Absent dispute resolution provisions in a consumer agreement, the parties may attempt to bring a claim before any court of competent jurisdiction. While flexible, it can lead to uncertainty over whether a given court is the appropriate forum to hear the dispute, which can result in delays and increased costs.

In Canada, some provinces like Ontario and Quebec have changed consumer protection law to expressly prohibit mandatory arbitration provisions and class action waivers. Notably, though, the BC BPCPA does not prohibit mandatory arbitration provisions in consumer contracts, and the Alberta CPA’s limitation on mandatory arbitration provisions states that these provisions will be enforceable if, after a dispute has arisen, the consumer is allowed to decide whether they wish to use arbitration or an action in court to resolve the dispute.

Since the Terms in this case gave consumers a choice between proceeding via arbitration or small claims court, the Court found that the Alberta CPA did not prohibit the arbitration provision in the Terms. While there were other technical arguments raised against the stay by the Plaintiffs, most significant was that the Plaintiffs asked the Court to consider the arbitration provision void, inoperative or incapable of being performed for both unconscionability and public policy reasons. Unconscionability is an equitable doctrine that is used to set aside unfair agreements, with two requirements for application: first, there must be an inequality of bargaining power; and, second, the bargain itself must be improvident. Public policy is a similar doctrine—however, where the unconscionability doctrine focusses on the vulnerability of the weaker party and the unfairness of the contract that results from that vulnerability, the public policy doctrine focusses on the harm to society at large as a result of enforcing a particular contract’s terms.


As mentioned above, terms of service are commonly encountered contracts of adhesion for consumers—the term “contract of adhesion” refers to a standard form contract that is generally presented without opportunity for negotiation. The Plaintiffs argued that they are individual consumers of games while the Defendants are large sophisticated businesses, and thus an inequality of bargaining power existed particularly due to the fact that the Terms were a contract of adhesion. The Court disagreed, distinguishing the facts of this case from other recent decisions in this area, particularly Douez v. Facebook.‎2‎ 3

In Douez, the plaintiffs argued that a forum selection clause in Facebook’s terms of service was unenforceable. In its analysis, the Supreme Court found that the provision was unenforceable as there was a gross inequality of bargaining power due to the fact that the terms were a contract of adhesion. The Supreme Court states that in the context of Facebook, “unlike a standard retail transaction, there are few comparable alternatives to Facebook, a social networking platform with extensive reach. British Columbians who wish to participate in the many online communities that interact through Facebook must accept that company’s terms or choose not to participate in its ubiquitous social network”.‎4

The Court differentiated the facts at hand from those in Douez, finding that, in Douez, the services at issue were more critical to everyday life than those at issue in Petty. The Court found that there was no evidence that use of the Games (or the ability to purchase virtual items within them) are important elements of everyday life that make the Plaintiffs dependent or vulnerable in terms of their need to play the Games. The Games themselves are free to download, and consumers had a choice of whether or not to purchase the virtual items in question. The Court emphasized that this was not a case where a “special relationship of trust” existed such as employer-employee agreements, or agreements involving financial, health or educational services.

Citing Heller,‎5‎ a recent decision of the Supreme Court of Canada involving a class action brought on behalf of a class of drivers, the Court broadly stated that contracts of adhesion are not necessarily “the product of an inequity in bargaining power”. The Court highlights that when a drafting party clearly and effectively communicates the meaning of any onerous or unusual clauses this can mitigate against the lack of “free bargaining” in contracts of adhesion. In this case, the Court found that the Plaintiffs were able to understand the arbitration provisions at issue and that the costs of arbitration and the arbitration procedure were sufficiently described in the Terms.

Therefore due to the nature of services at issue and the clarity in drafting, the Court found the first requirement for unconscionability, an inequality in bargaining power, was not met. 

Although that would be enough to find against the Plaintiffs, the Court found that the second requirement, an improvident bargain, was also not met. As described by the Court, an improvident bargain “is one where the contract at issue unduly advantages the stronger party or unduly disadvantages the more vulnerable party”. In this case, the Terms allowed the Plaintiffs to opt out of the arbitration agreement within 30 days of downloading the Game, which would have given them a choice to proceed to small claims court or arbitration in their home jurisdiction. The Terms also covered some of the Plaintiffs’ costs of arbitration fees.  Furthermore, the Terms stated that if the Plaintiffs succeeded, they would obtain legal fees, but also that they would not have to pay the Defendants’ legal fees if their claims were unsuccessful. As such, the second arm of the unconscionability test, an improvident bargain, was not met.

Public policy

The Plaintiffs also argued that the arbitration provision ought to be found unenforceable for public policy reasons. In determining whether to refuse to enforce an arbitration provision on public policy grounds, a court will consider whether the provision in question causes an undue hardship. This takes into account the nature of the disputes likely to arise, the proportionality between the cost to pursue potential claims and the potential award, the relative bargaining power of the parties, and whether the parties have attempted to tailor the limit on dispute resolution. For the same reasons discussed in the unconscionability analysis above, the Court found that the arbitration provision did not create an undue hardship and therefore is not unenforceable for public policy reasons. In particular, the Court found that the arbitration provision in question was “sufficiently tailored” to avoid undue hardship by providing the 30-day opt-out, indemnifying the defendants for their arbitration costs, and providing for legal fees in the event the consumer was successful in arbitration without a reciprocal right in favour of the Defendants.

Importantly, the Court found that the fact that a consumer does not have the ability access a particular form of proceeding, in this case a class or other proceeding the British Columbia Supreme Court, does not necessarily make an arbitration provision unfair or unduly burdensome.


As a result, the Court allowed the partial stay of proceedings requested by the Defendants.  While it should be noted that the more consumer-friendly dispute resolution terms used for these particular Games are not ubiquitously present in the terms for most video games (such as the choice to opt-out of arbitration and cost mitigation for the consumer if an action is pursued), this decision stands for the proposition that, if a game developer or publisher properly considers the equity of the bargain that its games’ terms seek to strike with players, a court may uphold its arbitration provisions—provided that the consumer protection law of the jurisdiction in question does not outright prohibit it. In light of this decision, game developers and publishers should therefore consider revisiting their terms of service with counsel to ensure their dispute resolution provisions remain up-to-date and effective.

A version of this article was originally published on (and is used with permission), but it provides only general information about legal issues and developments, and is not intended to provide specific legal advice. Please see DLA Piper’s disclaimer for more details.


[1] The Defendants requested a stay of all proceedings other than in respect of ‎‎the relief sought by the Plaintiffs under s. 172 of the BC BPCPA, which gives the court power to make ‎declarations or grant non-monetary injunctive relief in connection with certain consumer transactions.‎ ‎ ‎

[2] The Plaintiffs particularly relied on the decision of the Supreme Court of ‎Canada in Douez v. Facebook, Inc., 2017 SCC 33 where the Court engaged inequality of bargaining ‎power in respect of a forum selection provision in Facebook’s terms of service. ‎ ‎‎

[3] For example, in Pearce v. 4 Pillars Consulting Group Inc. 2021 BCCA 198,‎ ‎ a ‎case involving a debt restructuring business, ‎the plaintiffs included people who were facing bankruptcy ‎and were thus vulnerable. In Heller, the ‎plaintiffs relied on the multinational corporation for ‎employment ‎and were thus vulnerable. Further discussion 

[4] Douez at para. 56 ‎

[5] Heller at para. 88‎

IP & Technology
[ February 22, 2022 by VGBA 0 Comments ]

Exploring the metaverse: What laws will apply?

By: Tom K. Ara, Mark F. Radcliffe, Michael Fluhr, Katherine Imp

During the last decade, virtual interactions have become an increasingly important part of life for consumers and businesses. This trend has accelerated during the COVID-19 pandemic, with both consumers and businesses gravitating towards video-conferencing and other forms of virtual interactions. Recently, interest in virtual interactions has focused on the “metaverse,” with major companies, among them Facebook, announcing metaverse initiatives. In fact, Facebook, predicting the metaverse as the next wave in technology, has gone so far as incorporating the term into its new name, Meta.

However, like any new foundational technology, the metaverse remains confusing and unknown to many. So, what precisely is the metaverse? What metaverse use cases currently exist, and which do we expect to emerge? What laws will apply to the metaverse?  In this article, we explore these and other questions in more detail.

In the numerous virtual worlds of the metaverse, technology will bring content in ways never before imagined and, with it, legal issues and challenges never before contemplated.

What is the metaverse?

Despite widespread discussion of the metaverse as if it were already an existing, finished construct, the metaverse is currently not much more than a rapidly evolving idea. Discussing the metaverse in 2022 may be a bit like discussing the Internet in the 1960s. In both cases, even computer scientists can only imagine what the future might hold. Modern-day authors and filmmakers such as Ernest Cline and Steven Spielberg – who collaborated on Ready Player One – have given us just a small glimpse of what they envision one aspect of the metaverse to look like.

The metaverse is not a new concept, and efforts at building a metaverse have been afoot for decades. For example, in 2003 San Francisco-based firm Linden Lab released Second Life, an online multimedia platform in which users create an avatar and build a “second life” in an online world. And as is often the case, science fiction precedes and predicts reality. In 1992, writer Neal Stephenson published the novel Snow Crash, a dystopian story featuring a “Metaverse” urban environment complete with virtual real estate accessible through VR goggles. In the 2018 film (and book of the same name), Ready Player One, much of humanity interacts using the fictional OASIS virtual reality simulation. In real life, during the COVID-19 pandemic, humanity has already taken its first step in this direction, with education migrating online and video meetings supplanting business travel around the world at a magnitude never before imagined.

Many people also view the development of the metaverse as the natural evolution of the Internet from Web 2.0 to Web 3.0. For context, Web 1.0 is described by many as the first stage of Internet evolution, whereby users primarily consumed content. In Web 2.0 (the currently dominant paradigm), users also interact with the Internet to create and share content. Web 3.0 adds disintermediation (gradual removal of intermediaries) and decentralization, giving users tremendous control over their experience on the Internet.

Loosely defined, the concept of a metaverse refers to the migration of various parts of the human experience from the physical world to an increasingly immersive virtual world. At its core, the metaverse is a pronounced intersection of technology and content. For example, video games such as Fortnite and Roblox allow players to enter a complex, extensive virtual world and engage in a wide variety of virtual experiences and interactions – including with other players from around the world. Platforms such as Sensorium allow users to create their own alter egos and enter a shared virtual space where top DJs play virtual shows, complete with a massive crowd of fellow users. Facebook recently announced Horizon World, a “mixed reality” meeting space that allows users to participate in meetings in a virtual world, complete with avatars, virtual meeting rooms and tables, and even virtual chalkboards.

Some platforms, such as Pokémon Go and Illust Space, allow users to explore the physical world which has been supplemented with digital characters and other artifacts. Many of these platforms can be made more immersive with the use of VR headsets, and future developments in technology – such as haptic feedback suits (which facilitate 3D touch) and omnidirectional treadmills – promise to add to the experience.

Thus, despite reference to “The Metaverse,” there is at present no unitary metaverse experience. Rather, “The Metaverse” refers to an idea likely to be embodied in numerous virtual worlds, where technology has the opportunity to bring content to those worlds in ways never before imagined and, with it, legal issues and challenges never before contemplated.

Present and future uses of the metaverse

As noted above, several aspects of the present versions of the metaverse are already in use and/or in the late stages of development. The need for mankind to continue to advance its experiences in commerce, entertainment and education, particularly in a world where personal interaction is forbidden or discouraged due to health risks, has fueled rapid advances in the development of the metaverse in a number of key areas discussed more fully below.


The fully immersive metaverse is being built on a foundation of Web 3.0 technologies, including blockchain, cryptocurrencies, and non-fungible tokens (NFTs). We have already seen major companies accept cryptocurrencies as a form of payment for goods and services, and El Salvador recently became the first country to adopt the cryptocurrency Bitcoin as a second legal tender. In a fully immersive metaverse, commerce may use cryptocurrencies as consideration. Digital goods, ownership of which is often recorded with NFTs, have recently found great success, further evidencing the commercial possibilities in the metaverse.

The metaverse also offers a significant opportunity for virtual occupational training. Companies will likely continue to develop and build upon the virtual and augmented reality occupational training modules currently employed. The metaverse may offer significant opportunities for candidates to gain experience in occupational skills and display such skills to prospective employers.

The metaverse has and will continue to revolutionize the marketing and advertising of products and services by creating brand experiences that are more engaging and exciting and give the consumer a bespoke experience. Many major brands have already embraced the medium in numerous ways, and their brand engagement and awareness has already yielded meaningful results. Virtual events, virtual storefronts, and digital collectibles are – and will continue to be – just some of the ways that brands and products will reach virtual consumers.


Technological advances relating to online video games have been a major driver in the necessary technology for the metaverse. From the early pioneers such as Second Life to the leading interactive online video games of today, these games have resulted in rapid evolution of an interactive virtual world for competitive play and have opened the door for new virtual experiences, from concerts to movie premieres to NFTs of all types.

For example, musical artists such as Lil Nas X, Travis Scott, and Ariana Grande have each held successful virtual concerts within the online game platforms Roblox and Fortnite, attracting millions of viewers worldwide. As the metaverse becomes a part of popular culture, virtual concerts and sporting events can provide artists and athletes with a new platform to interact with fans on a global scale. Similarly, game play will also continue to evolve with opportunities for interconnectivity among different metaverse platforms.

Sports and entertainment memorabilia and collectibles in both the traditional form and virtual form will also find growing adoption in the metaverse, in the form of conventional NFTs or NFTs with real-world components. For example, the NFL has created virtual commemorative NFT tickets for its games. Other leagues and events have sold NFTs that provide access to real-world experiences and perks. The metaverse has also spawned interest in sports memorabilia and collectibles that exist solely in the virtual world. ZED RUN, for instance, combines NFTs, cryptocurrency and blockchain technology to create digital horse racing, allowing its users to buy, trade, breed, and race their digital horses.


Until a few years ago, distance learning was viewed as a viable yet occasional means of attaining a post-secondary degree. During the pandemic, that changed, with interactive distance learning being put into action for many students from primary school to universities. The COVID-19 era has opened the gates to this form of learning, with its potential to create learning experiences that are rich and meaningful.

Virtual classrooms are only the beginning of what may evolve into an educational experience that allows educators and students together to visit, for example, archaeological ruins, the surface of a planet in our solar system, or the DNA of person. Educators will also be able to incorporate aspects of the metaverse into class projects. For example, using Roblox’s “learn and explore” experiences, students can build virtual theme parks to demonstrate their knowledge of angles and math concepts. As the metaverse expands and develops, so too will the ways in which educators and students can talk, learn, plan and exist together in a virtual environment.

Law in the metaverse

Much of the application of existing laws, as well as potential creation of new laws, in the metaverse remains unknown. In some cases, existing legal schemes may clearly apply. In other cases, existing laws make an awkward fit, and courts may be tasked with novel issues of application to new technology. In still other cases, existing laws may prove insufficient to address problematic conduct, which might trigger passage of new laws and regulation. The scope of all laws and regulations that can or might be implicated in a metaverse is practically unbounded and might generate innumerable legal issues.

Intellectual property

Intellectual property disputes will almost certainly feature prominently among these legal issues – and, indeed, metaverse and other Web 3.0 projects have already seen a number of intellectual property disputes arise. In June 2021, record label Roc-A-Fella sued one of its co-founders, Damon Dash, seeking to enjoin him from auctioning a NFT of the cover of the Jay-Z album Reasonable Doubt. Roc-A-Fella claims it owns the copyright in the album cover and that Dash has no rights to sell the album cover as an NFT.

In another example, back in 2018 several well-known figures and celebrities filed lawsuits against Fortnite developer Epic Games, alleging that the game implemented each plaintiff’s trademarked dance moves without permission. Tracking and pursuing intellectual property enforcement in the virtual world has generally proved to be a difficult game of whack-a-mole, and we can expect similar challenges in the metaverse.

The creation of new types of digital assets, such as digital collectibles documented via NFT, has already raised novel intellectual property issues, among them the scope of the right to use the content held by the NFT owner. NFT creators and content licensors are developing a number of different licensing models. For example, the holder of an NBA Top Shot Moment NFT receives a limited license to use, copy and display the underlying content for personal, non-commercial use.

Use and exploitation of previously licensed or acquired intellectual property rights in the metaverse raise novel questions for licensees and acquirors around the breadth and scope of rights they have obtained under agreements that may have long predated the Internet, much less the metaverse. These important issues around the scope of rights licensed or granted – many of which have previously led to disputes between parties with the advents of new content exploitation methods over the past decades (eg, CDs, DVDs, digital copies, streaming) – have and will arise in the context of the metaverse and may pose new legal questions and challenges which are unique due to the way the metaverse operates.

While the scope of intellectual property protection in the metaverse is not clear, the new NFT market has already seen a number of intellectual property disputes. The possibility of disputes in the metaverse is even greater. Companies and developers need to carefully consider whether they have the necessary intellectual property rights for the proposed use within a metaverse, and traditional approaches on enforcement of intellectual rights may be revisited or significantly challenged, as we have seen in recent years with intellectual property incorporated into user-generated content.

Regulation of virtual assets

Virtual assets in the metaverse, such as NFTs, may be subject to traditional financial regulatory regimes such as securities, banking, money transmission, and commodities laws. The manner in which some blockchain-based assets are developed and sold might render them “investment contracts” and, thus, subject to securities laws. Application of securities laws would trigger a complex set of regulations on sales, trading and other activities.

The metaverse will undoubtedly use cryptocurrencies and tokens, which may be subject to these regulatory regimes. The SEC is already struggling with the appropriate application of securities laws to cryptocurrencies and tokens, and one SEC commissioner recently stated that securities laws might apply to certain NFT projects, particularly NFT projects that offer fractionalization or entitle the holder to a revenue stream. In addition to securities laws, the issuance, trading, exchange, lending and other activities concerning in-world currencies may trigger certain regulatory regimes – for example, those concerning banking, money transmission and other financial activities.


Similarly, when such assets are purchased and sold, they may be subject to various taxes, including income and sales taxes. The US Internal Revenue Service (IRS) has issued guidance clarifying that cryptocurrencies constitute property, the profit from which is taxable. NFTs are understood to receive similar treatment. Indeed, the IRS has already issued myriad subpoenas to cryptocurrency exchanges seeking information that could lead to the identification and collection of income taxes, and it would not be surprising to see taxation authorities targeting metaverse projects in similar fashion.

Whether NFT and other metaverse asset sales are subject to state sales tax presents another open issue. While many states have guidance on sales tax as applied to digital assets, to date no state has issued guidance specifically on whether sales tax applies to NFTs.

Regulation of conduct in the metaverse

Another major issue concerns the legal limits of conduct in a metaverse and who will police them. Roblox recently filed a lawsuit against content creator Benjamin Robert Simon, alleging that Simon has been engaging in a variety of harassing behaviors against other users, in violation of the Roblox terms of service as well as federal and state computer fraud and abuse statutes. A beta tester of Facebook’s VR platform Horizon World recently made allegations that she had been virtually groped in a virtual Horizon World meeting space called the Plaza. Facebook has thus far responded by noting that users can block each other, but it did not address the potential legal consequences of such actions, which may require novel application of laws designed to address misconduct in the physical world.

On this front, many metaverse projects have terms of service that purport to govern user conduct contractually, allowing remedies for violation such as banning from the platform and confiscation of in-world assets. For example, the virtual worlds Fortnite and Roblox both require users to accept terms of service before entering the game. These terms typically address an array of conduct, from restriction of various behaviors to measures taken to achieve platform security to methods for dispute resolution.

The enforceability of such contractual provisions may raise novel issues, particularly with respect to enforceability between users and for individuals who purchase in-world assets outside of the metaverse who may not have viewed or agreed to such terms of service.

Gambling and lottery laws

Gambling and lottery laws, which typically regulate certain activities concerning games of chance with prize awards, may also be implicated in metaverse projects that feature chance-based opportunities to win prizes. For example, some metaverse games feature “loot boxes,” virtual unopened treasure chests that users can discover or purchase and open to receive a randomized selection of various virtual assets. The regulation of loot boxes as a form of gambling has already triggered scrutiny in several jurisdictions.

Privacy and cybersecurity

Two other emerging issues concerning metaverse projects involve privacy and cybersecurity.  Privacy impacts activities concerning personal data, including processing activities such as the collection, use, and transmission of personal data. Metaverse projects may collect a variety of personal data from users, which can range from basic identifying information to information about movement and activities in the metaverse.

To address these issues, metaverse creators should consider implementing privacy policies and internal compliance programs.  That said, the application of existing privacy laws to the metaverse poses new issues. This challenge will only grow as more jurisdictions continue to pass new comprehensive privacy laws – for example, California, Virginia and Colorado’s laws.

Cybersecurity also presents unique issues in the metaverse.  Cybersecurity relates to how a company protects itself from an attack by a third party that could impact data, whether personal or not, as well as information systems.  There are a number of emerging issues regarding cybersecurity, including new guidance regarding disclosure and controls.

Both privacy and cybersecurity have legal implications, as well as other implications, including under governance.

As mentioned above, these are just a few of the many legal areas that may be triggered by metaverse projects. Others may include sanctions and export control laws, employment laws, criminal laws, and many others. Furthermore, metaverse projects are generally global, allowing use and interaction by participants across the world. Companies using the metaverse must consider the risk of complying with the laws and regulations in multiple jurisdictions.

Strategies for metaverse projects

The opportunities in the metaverse are new and are likely to evolve over time as the technology evolves. Creators building metaverse projects should consider at least the following.

Be prepared to experiment with different strategies and metaverse platforms

Metaverse technology is new and evolving. The companies building metaverse platforms are taking different approaches, including different functions that may evolve over time. Some existing and future metaverse platforms may fail over time, and a company should be prepared for this risk. Companies should thus be prepared to experiment with multiple metaverse platforms as well as different strategies, adjusting the strategy as needed.

Consider the consumer experience

A metaverse strategy should consider the desired consumer experience and the cost to the consumer of hardware or other technology needed to access the metaverse platform. For example, the current cost of VR headsets is still relatively high and may limit mass consumer adoption of metaverse platforms requiring such headsets. The metaverse strategy should also be coordinated with other components of the company’s digital strategy such as the use of NFTs, social media and communication channels (eg, Discord or Telegram) as well as with real-world events.

Ensure that the company has the necessary intellectual property rights for its existing content

Companies will probably wish to use existing content to implement their metaverse strategies, but they should be sure that they have the necessary rights to use any content developed by third parties. For example, the rights to music in television advertisements are generally licensed for use solely in a single commercial. Indeed, disputes have already arisen in the NFT market about the rights to using existing content: Miramax Pictures has sued director Quentin Tarantino over the right to sell copies of scripts and other material relating to the film, Pulp Fiction.

If the rights in the content are owned by third parties, a company creating a virtual experience on a metaverse platform should ensure that its license from the intellectual property owner or licensor is sufficiently broad to cover the development and licensing of the content for virtual experiences on metaverse platforms. Even if the company owns the intellectual property in the content, it may have already licensed the intellectual property rights relevant to metaverse use to third parties.

For example, National Geographic was in litigation for years with its authors over its right to publish a CD-ROM collection of its magazines. Content, such as pictures, videos and music, can involve complex rights that require special expertise to assess the scope of embedded intellectual property and obtain the rights to use it. Videos may include copyright-protected moving images, still images, music and background scene features (such as street art), as well as other forms of property such as trademarks and rights of publicity, all of which might need to be cleared for the specific use.

Future-proof your strategy

The use of the metaverse is likely to continue to expand in importance in the future, and companies should ensure that licenses to third-party content in the future include rights to exploit such content for virtual experiences on metaverse platforms. The company can learn from the experience of the entertainment industry through the technology changes from films to television to videocassette and DVD to streaming. Companies should also protect their brands in the new categories represented by the metaverse by registering their trademarks in the appropriate new classes.

Monitor metaverse platforms for infringement of IP owned by your company

The metaverse is in its infancy, and many participants are casual about intellectual property rights (and some participants are willing to misappropriate the rights of other parties to make a quick dollar). To give just one example: a digital artist, Mason Rothschild, created “MetaBirkens,” which were NFT versions of Hermes’ famous Birken bags. Hermes has sent him a cease-and-desist letter. However, at the time of writing, the MetaBirken NFTs are still available on some platforms. As the metaverse provides new opportunities for misappropriation of intellectual property, content owners and licensors should consider the appropriate scope of monitoring such platforms and enforcing their rights.


Mankind is only beginning to arrive at the event horizon of the metaverse.  As we delve deeper, organizations and individuals will increasingly embrace its use and incorporate this foundational technology into their real-world existence. As the metaverse evolves and expands, so too will the number of legal and regulatory issues which will arise that legal counsel must help their clients navigate.

If the metaverse evolves into the ultimate convergence of technology, content and the human experience – as it is expected to – then anticipating and addressing the emerging legal and regulatory issues will be critical to its successful adoption.

An earlier version of this article was published in Chambers TMT 2022 on February 22, 2022.  A version of this article was originally published on (and is used with permission), but it provides only general information about legal issues and developments, and is not intended to provide specific legal advice. Please see DLA Piper’s disclaimer for more details.

[ October 9, 2018 by VGBA 2 Comments ]

A Developer’s Guide to Expo: Workshops & Meetups

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

[ October 9, 2018 by VGBA 2 Comments ]

Hacking Your Product Leader Career

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

[ October 9, 2018 by VGBA 2 Comments ]

10 Great Venues for Greatest Conferences 2019

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

There are no secrets to success. It is the result of preparation, hard work, and learning from failure

- Paul Tournier
[ October 9, 2018 by VGBA 2 Comments ]

Using Jobs-To-Be-Done for Better Product Strategy

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

[ October 9, 2018 by VGBA 2 Comments ]

A Little of What We Got Right at Genesis Expo

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

Sketching for Visual Communication

[ October 9, 2018 by VGBA 2 Comments ]

Get the Skills to Communicate Your Ideas Visually

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.

[ October 9, 2018 by VGBA 2 Comments ]

Good Music for Good Mood

Genesis Expo will gather over 5,000 CTOs in one place, and about another 11,000 engineers. If you are a first time dev at Expo this post should help you think about your trip.