This worklow stipulates the steps that need to be taken when receiving DMCA take down requests for users who host copyrighted content belonging to others. Follow the guide below on how to handle incoming requests for GitLab.com.
DMCA complaints have a 24 hour Service Level Agreement.
First 24 hours
Note: If the DMCA is originating from Google, refer to Abuse-DMCA-Google for further guidance.
Review the notice and confirm that the content is still live.
Assign the issue to Legal and comment on the issue for Legal to review. Legal will leave a comment on the issue once the notice has been reviewed.
Forward the notice to the defendant in a new Zendesk ticket using the DMCA::Notice to Content 'Owner'::First Touch macro. Set the requester and Cc email to the email address(es) belonging to the GitLab.com user and paste the content of the forwarded notice into the space provided. The macro should set the ticket on-hold and re-open in 24 hours.
Remove any Personal Identifiable Information (PII)
In the content owner ticket, also add an internal note referencing the DMCA Meta Issue.
In the Gitlab_DMCA_Issue, paste the contents of DMCA::Notice to Legal::First Touch into a note and add the link to the owner contact ticket.
Next 24 hours
Confirm whether the content is still live. If the content has been removed, add an internal note and resolve the ticket.
Respond to the original requester using the DMCA::Requestor reply takedown complete macro.
If the content is still live and the user has not responded, proceed to send a follow up notice to them using the DMCA::Notice to Content 'Owner'::Second Touch macro.
In the Gitlab_DMCA_Issue, add a note with the contents of the DMCA::Notice to Legal::Second Touch macro.
If the content still remains active and the user has not responded to the notice:
Pull up the projects in question and make them private, then block the user.
Ensure that your internal note indicates the original state of the projects in question (i.e., Were the projects already private and which users had access?).
Send another follow-up to the defendant, this time informing them that action has been taken, using the macro DMCA::Notice to Content 'Owner'::Final Touch (takedown).
In the Gitlab_DMCA_Issue Issue, add a note with the contents of the DMCA::Notice to Legal::Final Touch macro and add any additional relevant information.
Service Desk Requests - email@example.com
For Service Desk DMCA requests, post a public comment to the original issue Service-Desk
Note: The Service Desk issue is public and any correspondence on the issue will be sent to the requestor. Make sure any URL(s) in the response have been sanitized.
User disputes a takedown notice
If the user disputes the takedown request, the user should have submitted a valid counter-notice.
Use the DMCA::Acknowledge Counter Receipt macro.
Paste the contents of the counter-notice in a note in the Gitlab_DMCA_Issue and @-mention Legal for review.
If the counter-notice is determined to be valid, Legal will add an internal note whether it is a valid notice.
If the counter-notice is valid and vetted by Legal, forward the notice on to the plaintiff (original requester).
Still follow the steps in the Taking Action section above even though the owner has responded.
Invalid Counter Notice
If the counter-notice is invalid after being vetted by Legal, proceed with steps stipulated in Taking Action.