Online Crimes
Online Crimes
Online Crimes
1. Harassment
Traditional principles re. harassment:
a) Governed generally by s. 10 of the Non-Fatal Offences Against the Person Act 1997
and can only be tried by way of criminal proceedings. There is no tort of harassment
in this jurisdiction.
b) To harass means to "seriously interfere with the other's peace or privacy or causes
alarm, distress or harm to the other"
c) New legislation now specifically covers online harassment – the Harassment,
Harmful Communications and Related Offences Act 2020, commenced on 10
February 2021.
d) See also new Criminal Justice (Miscellaneous Provisions) Act 2023 Illustration of
previous difficulties
2. Online Harassment
New forms of harassment facilitated by internet
- Online harassment takes many forms, some of which are specific to the internet. The
classic form of online harassment is that which echoes the behaviour described in
section 10 of the 1997 Act, and could be performed by repeatedly texting, emailing
and sending social media messages to a victim, very often in conjunction with more
traditional methods of communication, and possibly even physical besetting.
2
Selection of new offences created by online use:
Revenge Porn.
Sextortion
Online identity theft - 'fraping' or 'catfishing'.
Trolling.
Upskirting/ down-blousing.
3
- In this form of online identity theft, a person's existing social media account is
hacked by someone, who then posts content purporting to come from its rightful
owner, usually in an effort to embarrass or humiliate them.
Catfishing:
- This does not involve the hacking of an existing account, but rather the creation from
scratch of a new account. It can take two different forms. Sometimes, it involves the
creation of a fake identity where the sole purpose is for the poster to disguise their
true identity. In those circumstances, the online identity which they portray does not
involve targeting a specific individual, and the only efforts they make to conceal their
identity is to use a fake name and profile picture.
- In other cases, however, the 'catfisher' wishes to give the impression that they are a
specific individual, and the fake identity they create is therefore designed to trick
users into believing that the content they subsequently create for that identity is
being generated by the person whose identity they have misappropriated. This is
similar in effect to the practice of fraping, except that it is done without hacking into
a user's existing account.
- Example: In 2011 a 34-year-old Roscommon man, Paul Monaghan, set up a fake
account, in the name of an ex-girlfriend, on a website whose members offered
sexual services. He posted various messages, purporting to come from the woman,
and giving her name and postal address, which suggested she was available for
sexual services in lewd terms, and attracted comments from users of the website in
similar terms.
The posts had been on the website for 8 months before the woman, a
childcare worker, became aware of their existence. They had a profound
effect on her, resulted in her having to give up her job and undergo a course
of counselling. The gardai traced the IP address to the home of Mr.
Monaghan, who had a brief relationship with the woman seven years
previously.
He was charged under s.10 of the 1997 Act, and having admitted to the
offence, was given a four-year sentence, suspended in its entirety for four
years.
Trolling:
- This is the practice of posting insulting or inflammatory material online about a
person, sometimes as a result of something said or done by the object of the
comment, but often for no discernible reason in particular. In many cases, the
person who is the object of the trolling is not personally known to the poster, and
the personal nature of much cyber harassment is very often missing from trolling.
- Example: Over a period of four weeks in 2015, a 28-year-old man, Stephen French,
posted a series of threatening messages to Senator Lorraine Higgins, including I'm
going to blow your big f***ing Jew nose right off ... nothing better than to fill a rat's
mouth with lead". Following his arrest, French pleaded guilty to three counts of
4
threatening to kill or cause serious harm to Ms Higgins, and two of harassing her.
French, who had mental health issues, was given a six month sentence, but given his
lack of previous convictions, the Court was satisfied to suspend the sentence for two
years.
Upskirting/ down-blousing:
- It is debatable as to whether this practice, which involves the surreptitious taking of
photographs of a person’s underwear, most commonly in a public place, is strictly
speaking a form of harassment, particularly in circumstances where the victim may
not be aware of the act, and it is performed usually for the sole pleasure of the
offender. In some cases, however, the resultant images are uploaded to the internet,
and where the victims can be identified, it is certainly arguable that this constitutes a
form of harassment.
- Example: A successful conviction for the offence was recently obtained in Dublin
District Court, when an American tourist was sentenced to two months’
imprisonment for using his phone to film up the woman's skirt at the Dublin Pride
Parade in July 2019. The charge was brought under section 45(3) of the Criminal Law
(Sexual Offences) Act 2017, which provides that “A person who intentionally engages
in offensive conduct of a sexual nature is guilty of an offence.” The Court accepted
that such an offence had been committed, with the victim given evidence as to her
humiliation and concern that a recording of her private person would be put "all
over the internet."
5
b) that recording, distribution or publication, as the case may be, seriously interferes
with that other person’s peace and privacy or causes alarm, distress or harm to that
other person.
- Maximum sentence (only tried summarily ) of 12 months
Section 4
A person who -
(a) by any means -
(i) distributes or publishes any threatening or grossly offensive communication about
another person, or
(ii) sends any threatening or grossly offensive communication to another person, and
(b) with intent by so distributing, publishing or sending to cause harm, is guilty of an
offence.
- Maximum sentence of 2 years.
- Issues of note: Communication can be "about" the victim, and no
requirement for "persistence".
6
- Clarke v O'Gorman [2014] IESC 72: "“if it can be shown that the existing law does not
adequately protect the constitutional rights of the citizen” then “a separate claim for
breach of constitutional rights can be invoked.”
- Recent ECtHR decision in Volodin v Russian (No.2) (app 40419/19) linked cyber
harassment against women with domestic violence - "“cyber harassment is currently
recognised as an aspect of violence against women and girls and can take a variety of
forms, such as cyber-violations of private life ... and the taking, sharing and handling
of information and images, including intimate ones”
Harassment at work
a) Clearly the harassing by an employee of any other person will expose them to possible
liability under the new HHCRO Act 2020.
b) It may further cause them problems with their employer if such behaviour falls foul of
company regulations on behaviour in the workplace.
c) The employer themselves may be held liable for harassment conducted by the
employee. Such liability will accrue regardless of whether the employee was acting in
the "course of employment" - under s.14 of the Employment Equality Act 1988, the
employer will be liable if the victim was being harassed in the course of their
employment.
- This section was considered by the Labour Court in McCamley v Dublin Bus (2016) 27
ELR 81. Company was able to avail of the defence that it "took such steps as are
reasonably practicable to prevent the person from harassing the victim."
Harassment at school
a) The traditional conception of "school-yard bullying" has been supplanted by online
harassment, which takes place 24/7, which has resulted in several tragic cases leading to
teenagers taking their own lives. The question arises as to whether the school can be
held liable for this behaviour if it fails to address it, even if such behaviour takes place
away from the school grounds.
7
b) In Bradford-Smart v West Sussex County Council [2002] EWCA Civ 7 the English Court of
Appeal upheld the decision not to find a school liable for the psychiatric injuries caused
to a pupil due to bullying away from the school. The judge held that the duty of the
school went ‘no further than to prevent the bullying actually happening inside the
school...’ It accepted that there may be occasions when a school breaches the duty of
care by failing to combat behaviour that takes place outside of school, but these were
‘these occasions will be few and far between.’
Legislation
- Previous legislation – the Child Trafficking and Pornography Act 1988 - was
problematic as it dealt primarily with "possession" of material, and it was
questionable as to whether people who simply viewed child exploitation material
online without storing it on their PC or mobile device actually "possessed it".
- This has been cured by the Criminal Law (Sexual Offences) Act 2017, which know
creates an offence for either "acquiring" or "possessing" such material.
8
- This creates an offence where a person invites, induces, counsels or incites a child
(someone under the age of 15 years) to touch either themselves or another person
for the sexual gratification of the person.
Technological crimes:
- The Criminal Justice (Offences Relating to Information Systems) Act 2017 is now the
main piece of legislation governing the theft, fraud and hacking offences performed
via the internet.
- The Act gives effect to a number of the provisions of the EU Cybercrime Directive
and creates five new offences in respect of the hacking and misuse of computers.
- Section 2: Accessing information system without lawful authority, etc.
- Section 3:
Interference with information system without lawful authority
Hindering or interrupting the functioning of an information system.
- Section 4:
Interference with data without lawful authority
Deleting, damaging or altering data.
- Section 5: Intercepting transmission of data without lawful authority
- Section 6: Use of computer programme, password, code or data for purposes of s. 2-
5
9
Issue of anonymity:
- One of the difficulties in bringing proceedings against a party who has been accused
of misuse of an information system is the fact that as the acts are done via the
internet, the perpetrator is usually anonymous. When the behaviour involves a
threat of blackmail, not only is the victim faced with having to get an injunction
against an anonymous defendant, but they may also want to apply for such an
injunction anonymously, so as not to damage their own company's reputation.
- In the English case of PML v Person(s) Unknown 2018 EWHC 838, the plaintiff
company's computers having been illegally accessed and a large amount of data
stolen. The company's directors were threatened that confidential material would be
uploaded the internet unless they were paid £300,000 in bitcoin currency. Having
been served with an injunction by email in March 2018, the defendant uploaded the
information anyway.
- The claimant applied obtained a court order in that jurisdiction to have access to the
website blocked. The claimant was also allowed bring the proceedings anonymously
on the basis that "The protection of blackmail victims in both these ways is an
important legal policy, which I found prevailed over any competing considerations at
this stage of this case."
- Compare this to the situation in Ireland.
Financial Harm/Fraud
- Criminal Justice (Offences Relating to Information Systems) Act 2017
- False advertising - Criminal Justice (Theft and Fraud Offences) Act 2001
- Online reviews
10
- The traditional laws of defamation will apply to the posting of online reviews. While
the defence of Honest Opinion is often advanced when a trader brings proceedings
against a reviewer, the defence will fail if the opinion is based on factual
inaccuracies.
- In a Canadian case, Zoutman v Graham [2019] ONSC 2834 the plaintiff doctor had
testified as an expert witness in support of a physician who had attended to a patient
who subsequently died. The defendant was the brother of the deceased, who posted
an extremely critical review of the plaintiff on a medical rating website, warning
potential customers against using his services. Crucially, the reviewer falsely
purported himself to have been a patient of the plaintiff. The court rejected the
defence of fair comment, noting that the defendant was motivated by malice, and
awarded the plaintiff $50,000.
- A similar decision was recently arrived by the English HC in Summerfield Browne v
Waymouth [2021] EWHC 85 (QB) which held that the plaintiff solicitors had been
defamed by a negative review posted on trustpilot.com. The Court held that calling
them “scam solicitors” was clearly an assertion that, as a matter of fact, the firm
were dishonest and fraudulent.
- A recent decision of the FCA (The Federal Court of Australia) in Colagrande v Kim
[2022] FCA 409 awarded Aus$420,000 (c. €220,000) in damages to the plaintiff, a
cosmetic surgeon based on Queensland who specialised in BBLs. A fake review had
been posted by a rival doctor on a website entitled "RateMDs", which claimed that
he had been previously convicted of a sexual assault.
- It should be stressed that these issues have not yet received juridical consideration
in this jurisdiction, and the decisions therefore are merely of persuasive authority.
11