You are using an outdated browser and your browsing experience will not be optimal. Please update to the latest version of Microsoft Edge, Google Chrome or Mozilla Firefox. Install Microsoft Edge

August 31, 2011

New U.S. Law Affects Users of Unlicensed or Pirated IT

Informed Counsel

Manufacturers whose products are sold, or offered for sale, in Washington State should be aware of a new unfair competition law in that state. The new law, which went into effect on 22 July 2011, imposes civil liability on manufacturers who use IT that is either stolen or misappropriated. Proceedings can be brought by competing manufacturers or the Washington State Attorney General if such IT is used in the manufacture, distribution, marketing or sale of products sold or offered for sale in the state. This may become a growing trend in the U.S., as a similar law has already been passed in Louisiana. Other states are likely to follow.

The new laws seek to level the playing field so that users of illegal or unauthorized IT will no longer enjoy the competitive advantage of being able to use such IT for free, thus competing unfairly against competitors in the marketplace who choose to use only legal and legitimate IT to conduct their business. Moreover, those manufacturers who elect to use stolen IT run the risk of having to pay damages, having their goods seized, and possibly losing access to desirable U.S. markets.

The laws are intended to ensure that there is a respect for property rights, while also providing a compliance procedure that is easy for all stakeholders to implement.

How the Law Works

Under the Washington State law, a competing manufacturer, whether it resides in the U.S. or a foreign country, can  bring the action having to prove that it:

  • Manufactures products sold in the state in direct competition with the products claimed to have been created using stolen or misappropriated IT.
  • Did not manufacture its products using stolen or misappropriated IT.
  • Suffered economic harm, established by showing a retail price of stolen IT of at least USD 20,000.

The law goes even further. Not only are manufacturers liable for suit, but so are third parties, such as retailers or distributors, who offer goods produced with stolen IT. After a successful action against the manufacturer, a plaintiff may bring an action against third parties that, among other criteria, have a direct contractual relationship with the manufacturer that uses unauthorized IT. Such an action may be brought if the third party was not subject to the original proceedings, if the manufacturer has no attachable assets to satisfy the judgment, or if certain other criteria are fulfilled. Plaintiffs are not required to have any minimum contacts in the state in order to commence actions under the Washington State law.

Before an action can commence, IT owners are first required to have written to the potential defendant setting out details of the allegation particular enough to allow the potential defendant to respond. The potential defendant will have 90 days to respond to the IT owner’s letter. A further 90-day period may be granted if the manufacturer demonstrates that it needs more time for the legalization process. Defendants who fail to stop using stolen IT after the commencement of the court action may be subject to court injunctions preventing the sale of their goods in the state, or the plaintiff could be awarded either the actual damages suffered or statutory damages not exceeding the retail price of the IT, whichever is greater. Willful infringers run the risk of having damages tripled.

There are several limitations, however. Actions may not be brought against manufacturers who produce food, beverages, and medical products regulated by the U.S. FDA. Companies cannot be sued if their end products are protected by copyright law, such as books, movies, and music. Promotional products related to copyrightable works and theme parks are also excluded from the law.

What the Law Calls For

Because these new U.S. state laws apply to any manufacturers of goods sold in those states and any customers (such as retailers or distributors) they have within those jurisdictions, even manufacturers with no legal presence in the U.S. should examine these new laws closely and should monitor those state legislatures which are considering similar laws. Most businesses have IT management systems in place already, but with the promulgation and likely additional laws intended to disadvantage users of stolen IT, now may be a good time to conduct internal audits on their business units and supply chains globally to ensure internal policies and procedures are being followed and to determine whether additional safeguards need to be implemented. Manufacturers around the world are now going to have increase their IT management vigilance.

The benefits of using legal and legitimate IT are clear. Compliance with legal IT can be a competitive differentiator in the global marketplace. Successful global companies are increasingly focused on implementing high standards of legal and ethical compliance throughout their supply chains and in their relationships with other businesses. Organizations that are able to certify their use of legal IT will enhance their global reputation, safeguard their business and have a distinct competitive advantage.

RELATED INSIGHTS​ 

July 16, 2026
Thailand’s Office of the Personal Data Protection Committee (PDPC) published a series of draft guidance documents for public consultation on July 7, 2026. Issued under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), the drafts address a range of compliance issues and offer insight into the regulator’s current enforcement priorities. This article examines two of those drafts: one on lawful bases for processing personal data, and another on marketing and direct marketing. Together, they reflect the Office of the PDPC’s evolving expectations on lawful-basis selection, accountability, and the use of personal data in marketing. Organizations operating in Thailand should assess the practical implications now, before the guidance is finalized. Lawful Bases: A Structured Selection Process The draft guidance on lawful bases introduces a systematic five-step process for selecting an appropriate lawful basis for each processing activity. Organizations are expected to: Identify the processing activity involved. Assess the appropriate lawful basis. Evaluate whether the data is necessary for the processing. Conduct a legitimate interest assessment (LIA) where applicable. Ensure transparency through privacy notices. The guidance provides practical explanations and examples for each lawful basis under section 24 of the PDPA—including archiving, research, statistics, vital interests, contractual necessity, legal obligation, public task, legitimate interests, and consent—as well as the bases applicable to sensitive personal data under section 26. The aim is to promote more consistent and accurate lawful-basis selection across public- and private-sector organizations. A recurring theme throughout the guidance is that organizations should select the lawful basis that most accurately reflects the actual purpose and circumstances of the processing activity. The guidance cautions against treating consent as a default or catch-all basis where another lawful basis is more appropriate. For processing based on legitimate interests, organizations should conduct and document an LIA. Processing involving sensitive personal data may require
July 14, 2026
Thailand’s National Broadcasting and Telecommunications Commission (NBTC) has published guidelines establishing a risk-based framework for the responsible use of artificial intelligence by telecom licensees. Released on July 2, 2026, the Guidelines on the Use of Artificial Intelligence for Telecommunications Services address governance structures, ethical principles, lifecycle management, and consumer protection obligations. Scope and Legal Context The nonbinding guidelines apply to holders of telecom business licenses under Thailand’s telecom licensing laws, but only with respect to the use of AI in providing licensed telecom services. Entities without such licenses are not directly subject to the guidelines, though they may be affected as third-party AI solution providers to licensees. The guidelines supplement and should be read alongside existing laws, including the Cybersecurity Act, the Personal Data Protection Act (PDPA), the Computer Crime Act, and the NBTC Notification regarding Measures to Protect Telecommunications Service Users’ Rights Regarding Personal Data, Privacy Rights, and Freedom of Telecommunications, as well as forthcoming AI governance legislation being drafted by the ETDA. AI Governance Structure Licensees are expected to establish committees, working groups, or designated officers at both policy and operational levels to set strategic direction for AI use, formulate governance policies and tools, and oversee risk management. Roles, responsibilities, and accountability should be clearly defined for all personnel across every stage of the AI lifecycle—including for third-party AI solution providers and outsourced service providers, whose obligations should be explicitly documented in service agreements. Core Principles The guidelines identify six core principles that licensees should adhere to when deploying AI: Compliance with laws, ethics, and international standards: AI should respect privacy, dignity, and human rights, and content filtering for inputs and outputs should be considered. For example, the AI should not be designed and developed to be used in generating false information, supporting illegal activities, or causing
July 10, 2026
Vietnam has taken a significant step in regulating its e-commerce sector with the issuance of a new decree guiding the country’s recently enacted Law on E-Commerce. Decree No. 248/2026/ND-CP, issued on June 30, 2026, and taking effect the following day, addresses mandatory platform policies, registration requirements for offshore platforms, additional obligations on platform operators, and market access conditions for foreign investors. Mandatory Policy Contents The decree sets out detailed guidance on the required contents of various platform policies, covering pricing, payment, display priority, livestream sales, delivery, returns, method of service provision, and service termination and refunds. Clarification of Obligations for Platform Operators The decree provides clarification of the obligations applicable to platform operators. Notably, intermediary e-commerce platform operators with online ordering functions must: Collect specific information to implement electronic identity verification of sellers; Cooperate with regulators by reporting online through the state e-commerce management system and by blocking, suspending, or removing content upon request of a competent authority; Maintain a mechanism to store contract data, including price, product or service information, and parties’ information, for at least three years from the date of contract conclusion; and If qualifying as a “large digital platform” under consumer protection law, maintain an online system for receiving and handling complaints and requests, and comply with enhanced content-removal requirements. Registration Requirements for Offshore Platforms Offshore e-commerce platforms, whether direct-sales, intermediary, social-network-based, or integrated, that conduct e-commerce activity in Vietnam must register with the Ministry of Industry and Trade if the platform: Allows Vietnamese-language selection; Uses a “.vn” domain; or Reaches 100,000 or more transactions with Vietnam-based buyers within a calendar year. Notably, the registration requirement now captures not only traditional intermediary platforms, but also direct-sales platforms. Foreign Investment Conditions Foreign investors holding a controlling interest in an intermediary e-commerce platform, a social media platform
July 8, 2026
On July 7, 2026, the Trade Competition Commission of Thailand (TCCT) issued a press release announcing the establishment of two new subcommittees designed to intensify oversight of digital platforms and modern trade businesses. The formation of the digital platform subcommittee marks a significant escalation in competition enforcement following the TCCT’s Guidelines on Multi-Sided Platforms and E-Commerce Businesses, which took effect on March 25, 2026. Platform operators, sellers, and related service providers should expect heightened regulatory scrutiny and potential investigations into practices already flagged under the March guidelines. Two Dedicated Enforcement Bodies The first new body is the digital platform subcommittee—formally the Subcommittee on Supervision, Monitoring, and Prevention of Trade Conduct in Digital Platform Business. It is tasked with driving intensive oversight of digital platform businesses. It will coordinate with government agencies, the private sector, business operators, and other relevant stakeholders to supervise and prevent trade conduct that may affect competition, and to promote free and fair competition in the digital platform sector. The subcommittee will be composed of TCCT members and representatives from the Department of Internal Trade. The second body—the Subcommittee on Determining Guidelines and Action Plans Concerning Competition Conditions in Modern Wholesale and Retail Business—will study, analyze, and monitor market structure in modern wholesale and retail businesses, compile databases to analyze retail business concentration, assess impacts on small-scale operators, and propose supervisory measures for the retail sector. TCCT members will serve on the subcommittee alongside experts from government and private organizations, including the Office of Industrial Economics, the Office of Small and Medium Enterprises Promotion, the Thai SME Federation, and the Thai SME Council. Operational Impact for Industry Participants These subcommittees provide the TCCT with a focused mechanism to investigate various trade practices deemed unfair, and the TCCT has authority under the Trade Competition Act to issue cease-and-desist