FTC to Review Software Licensing Practices
UCITA causing problems for users
Computerworld - Washington
Horizon Blue Cross/Blue Shield of New Jersey is located in a state that hasn't adopted the UCITA software licensing law. But a software vendor is adamantly insisting that Maryland's UCITA law, which was enacted Oct. 1, applies to a licensing contract it's currently negotiating with the Newark, N.J.-based insurer.
Arne Larsen, information systems director at the 5,000-employee insurer, said the situation with this vendor, which he declined to identify, is an anomaly among the many software licensing contracts the company is dealing with. But that's of little comfort, he added.
Support from Users
UCITA is "a one-sided law: It protects the software vendors; it does nothing for us," said Larsen. That's one of the reasons why he and other end users interviewed support the U.S. Federal Trade Commission's (FTC) decision to begin exploring software licensing practices, an effort launched at a two-day workshop last week.
The FTC is making a broad-brushed examination of common software licensing practices, such as whether the lack of disclosure of warranty terms until after a software sale is made is fair to end users. It's also exploring issues like whether embedded computer systems found in many products such as automobiles will have the liability-limiting warranty terms allowed by UCITA, formally known as the Uniform Computer Information Transaction Act.
Software industry representatives invited to speak at the workshop credited established licensing practices with giving vendors the flexibility to tailor software to end users' needs, such as those met by application service providers.
"There is no one-time sale. It is, in fact, an ongoing subscription relationship," said Mark Bohannon, general counsel at the Software & Information Industry Association in Washington.
UCITA, which has been adopted in Maryland and Virginia and has been sent to other states for consideration, sets a series of default rules in software licensing, allowing things such as remote disabling of software. Software industry groups, however, say that all UCITA allows is the freedom to contract. Companies can include or exclude whatever terms they like in a contract negotiation.
If the FTC "comes out strongly against it, which I hope they do, then that will be that much more to stoke the opponent fire with," said Randy Roth, director of corporate purchasing at Principal Financial Group in Des Moines, Iowa.
As Horizon Blue Cross/Blue Shield of New Jersey found, however, it doesn't matter where a vendor or end user is located for UCITA to apply to a contract. The vendor can still cite Maryland law as its "choice of law" in a licensingcontract, no matter where the vendor and licensee are located, legal experts say.
Larsen said he believes the size of his organization will give it leverage in negotiations. But whether or not he deals with a company that wants UCITA terms will depend on how badly he wants the software. "If you need it, you need it, and then you just hopefully negotiate your way out of some onerous clauses in the contract," he said.
Read more about Gov't Legislation/Regulation in Computerworld's Gov't Legislation/Regulation Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Gov't Legislation/Regulation White Papers
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and...
- Customer Spotlight: How IPC The Hospitalist Company Implemented Oracle on VMware
- Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn...
- Virtualize Business-Critical Applications with Confidence
- Virtualizing business-critical applications has become a key focus for organizations as they move along their virtualization journey. With the launch of VMware vSphere®... All Gov't Legislation/Regulation Webcasts