International Information Systems Security Certification Consortium, Inc. v. Security University, LLC

823 F.3d 153, 120 U.S.P.Q. 2d (BNA) 1388, 2016 U.S. App. LEXIS 9045, 2016 WL 2893172
Court of Appeals for the Second Circuit·Decided May 18, 2016·No. Docket No. 14-3456-cv·Published·Cited by 52 cases

Opinion

POOLER, Circuit Judge:

Plaintiff-appellant International Information Systems Security Certification Consortium, Inc. (“ISC2”) filed suit against defendants-appellees Security University (“SU”) and Sondra Schneider, alleging that SU’s use of ISC 2’s certification mark violated the Lanham Act, 15 U.S.C. § 1051 et seq., and constituted infringement under 15 U.S.C. § 1114, false designation of origin and false advertising under 15 U.S.C. § 1125(a), and trademark dilution under 15 U.S.C. § 1125(c), and that SU’s use of the mark constituted unfair competition under the Connecticut Unfair Trade Practices Act, Conn. GemStat. § 42-110a et seq. (“CUTPA”). Following cross-motions for summary judgment, the district court granted summary judgment to defendants on all grounds, holding that defendants’ use of the certification mark constituted nominative fair use under the Ninth Circuit’s test, which our Court has not, to this point, adopted. Critical to its determination that defendants’ use of the mark constituted nominative fair use under the Ninth Circuit’s test were the dis[156] trict court’s misperceptions that the only type of confusion relevant to an infringement claim was confusion as to source and that a certification mark could not be infringed by a duly certified individual.

Having considered other circuits’ nominative fair use tests as well as our own prior treatment of claims involving nominative use, we hold that nominative fair use is not an affirmative defense to a claim of infringement under the Lanham Act. We further hold that in cases involving nominative use, in addition to considering the Polaroid factors, courts are to consider (1) whether the use of the plaintiffs mark is necessary to describe both the plaintiffs product or service and the defendant’s product or service, that is, whether the product or service is not readily identifiable without use of the mark; (2) whether the defendant uses only so much of the plaintiffs mark as is necessary to identify the product or service; and (3) whether the defendant did anything that would, in conjunction with the mark, suggest sponsorship or endorsement by the plaintiff holder, that is, whether the defendant’s conduct or language reflects the true or accurate relationship between plaintiffs and defendant’s products or services. When considering these factors, courts must be mindful of the different types of confusion relevant to infringement claims, including confusion as to sponsorship, affiliation, or connection, as well as, when considering a certification mark, the various ways such a mark can be infringed.

Because the district court failed to consider the Polaroid factors and because its consideration of the relevant nominative fair use factors was based on incorrect assumptions, we vacate the district court’s grant of summary judgment on the infringement claims. Accordingly, we also vacate the grant of summary judgement on the false designation of origin and false advertising claims, which the court decided on the same grounds as the infringement claims, and the CUTPA claims, which were dismissed because they were derivative of the Lanham Act claims. We affirm the grant of summary judgment on the dilution claims, which ruling was not challenged on appeal. We remand for further proceedings consistent with this opinion.

BACKGROUND

I. The CISSP® Mark

A. ISC 2,s Mark

ISC2 is a non-profit organization that was formed in 1989 to develop standards for the information security industry. In March 1990, ISC2 developed a certification program and began using the certification mark “CISSP®” to denote a “Certified Information Systems Security Professional” who has met certain requirements and standards of competency in the information security field, including passing the CISSP® certification examination that ISC2 administers.

On March 18, 1997, the United States Patent and Trademark Office registered ISC2’s CISSP® certification mark. The registration stated: “The [CISSP®] certification mark is used by persons authorized by the certifier [ISC2] to certify completion of appropriate work experience and/or successfully passing examinations as established by the certifier in the field of security of information systems.” App’x at 30.

B. SU’s Alleged Infringement

SU is a for-profit company that was formed in 1999 by defendant-appellee Sondra Schneider, a CISSP®-certified individual, to provide information security training. SU offers various classes, including a class to prepare individuals for ISC2’s CISSP® certification examination. SU has used the CISSP® mark in connection [157] with certification-specific training courses since 2001. It is undisputed that SU is allowed to use the CISSP® certification mark to indicate that its services are directed at preparing students for the CISSP® certification examination. Furthermore, given the nature of ISC 2’s certification mark, SU instructors may accurately identify themselves as being CISSP®-certified, so long as they follow ISC2’s regulations governing the use of the mark.1

However, ISC2 objects to some of SU’s advertisements, run between 2010 and 2012, which, ISC2 argues, misleadingly suggested that SU’s instructor, Clement Dupuis, had attained some higher level of certification as a “Master CISSP” or “CISSP Master.” These advertisements include the following statements:

• “MASTER THE 10 CISSP DOMAINS with the Master CISSP® Clement Dupuis.” App’x at 71.
• “REGISTER NOW to Master the CISSP® Certification with Master CISSP® Instructor Clement Dupuis of www.ccure.org!” App’x at 71.
• “Register for CISSP® Prep class with Master CISSP Clement Dupuis today!” App’x at 76.
• “You are taught by CISSP Master Clement Dupuis, the father of www. ccure.org website.” App’x at 76, 83.
• “Security University’s CISSP® Prep Class[.] Register for CISSP® Prep ' class with Master CISSP Clement Du-puis today!” App’x at 78, 83.
• “Attend the BEST CISSP® Prep Class in Europe[.] Master CISSP June 27-30 AMERSTERDAM with MASTER CISSP® Instructor Clement Dupuis[.]” App’x at 88-89.

Free access — add to your briefcase to read the full text and ask questions with AI

International Information Systems Security Certification Consortium, Inc. v. Security University, LLC, 823 F.3d 153, 120 U.S.P.Q. 2d (BNA) 1388, 2016 U.S. App. LEXIS 9045, 2016 WL 2893172 (2d Cir. 2016).

823 F.3d 153 (International Information Systems Security Certification Consortium, Inc. v. Security University, LLC) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related