opinion

Keeping Your 2257 Records Clean

Model Release? Check! Performer ID’s? Check! 2257 form? Check! Throw them all into a file or load them into a database and your legal tail is covered, right? Unfortunately, XXX law is never that simple, particularly when discussing compliance with the federal regulations applied to highly-regulated, sexually-explicit content.

One of the most common mistakes our firm has seen over the years with section 2257 compliance is the inclusion of extraneous records in the 2257 file or database. The biggest offender always seems to be the model release, which is often kept alongside the 2257 form related to an individual performer. Logic would dictate that this is the proper procedure, and that all legal documentation associated with a performer should be maintained in the same place, at the risk of getting lost if separated. But alas, logic does not always inform obligations imposed by a federal statute. The applicable statutory provision appears in 28 C.F.R. § 75.2(e) which states:

The good news is that segregating your business records from your 2257 records actually benefits the producer (and the performers). A federal agent has no authority — and frankly no business — poring over documents containing proprietary business information.
Records required to be maintained under this part shall be segregated from all other records, shall not contain other records, and shall not be contained within any other records.

Seems pretty clear, right? But even well-known adult industry lawyers become confused on occasion, and have recommended including information or other evidence in a performer’s 2257 file beyond the specific categories of material required by the statute (e.g., dress size, pen and ink handwriting samples, etc.). The specific items that must be contained in any producer’s 2257 files and/or database is beyond the scope of this article, and more importantly, the subject of professional legal advice. However, given the clear dictates of federal law, commonly obtained documents such as model releases, payment information, or evidence of sobriety have no place in a 2257 file. Such information could certainly be kept separately by the producer to help defend against later claims by models seeking to remove their content, but not included with 2257 records. Any suggestion that such information be kept in a 2257 file is simply dangerous.

Why would the Department of Justice require this segregation of 2257 records from other performer records? Was that provision included just to make compliance more difficult, in the attempt to catch producers in technical violations? While one’s inner conspiracy theorist cannot immediately dismiss such questions — particularly when a controversial issue such as adult entertainment is the subject of the regulation- the real answer is probably less incendiary and much more practical. The fact of the matter is that FBI inspectors simply do not want to sift through mounds of irrelevant business documentation to find the federally-mandated information that is pertinent to their investigation. The 2257 inspections that have occurred thus far typically involved the FBI’s use of a device to copy all the relevant files and/or database elements in order to facilitate the inspection process and avoid unnecessary governmental review of proprietary business information. Segregating the records into a single physical or electronic file allows for easy copying and examination by authorized federal agents, without permitting review of extraneous and possibly confidential business information.

Section 2257 is not the only federal statute that requires some sort of records segregation. For example, federal drug regulations mandate that medical professionals and researchers, authorized to handle controlled substances, must keep separate records pertaining to such substances. Various portions of HIPAA, specifically those pertaining to the privacy regulations of the Americans with Disabilities Act and the Family & Medical Leave Act, require that employers maintain employee medical records in separate files as well. Similarly, psychotherapy notes and related information must be segregated from other records under HIPAA privacy rules.

Some of the separation requirements are based on privacy concerns, such as those applicable to medical records, while others are focused on easing the burdens on inspectors (i.e., § 2257 and the controlled substances regulations). Whatever the justification, it is clear that section 2257 requires that only the specific items required by the statute be included in the 2257 file/database. Unfortunately, before the adoption of the relevant federal regulation in 2008 (made effective in 2009), many 2257 forms circulated by XXX lawyers were included in, or comprised the first page of, the performer’s model release. Often, only one signature was obtained for both the model release and the 2257 form. While this practice was certainly easier on the content producers and helped prevent inadvertent loss or misplacement of portions of a model’s legal documentation, this procedure is no longer permissible.

Unlike certain “grandfathering” provisions found in section 2257, such as those exempting content depicting the “lascivious exhibition of the genitals or pubic area” of a person (if created prior to March 18, 2009), the record segregation provision was effective immediately upon adoption. As a practical matter, that means content producers who were accustomed to maintaining extraneous documents (such as model releases) in their 2257 files were immediately obligated to clean out those files and separate any 2257 material from all other business records pertaining to the performer. Often this required the creation of a new 2257 form or database from the data in the combined documents that were circulating prior to the adoption of 28 C.F.R. § 75.2(e). While this may sound unnecessary, particularly in an era when section 2257 is not being actively enforced, violation of this regulation still carries a potential five year federal prison sentence. Certainly this would be harsh punishment for content producers who happen to mix some extraneous performer information in their 2257 file. Notably, however, the DEA routinely enforces similar, complex records segregation requirements against physicians, by conducting audits of their records, which must be meticulously categorized and separated under penalty of license revocation, civil fines, and/or criminal prosecution. Thus, compliance with this analogous provision of section 2257 should be taken seriously by producers and records custodians.

The good news is that segregating your business records from your 2257 records actually benefits the producer (and the performers). A federal agent has no authority — and frankly no business — poring over documents containing proprietary business information, such as compensation details, exclusivity obligations, non-compete provisions, STD test results, or any other category of information not specifically authorized for review without a warrant under section 2257. Remember, FBI agents can enter a producer’s place of business without notice and demand to inspect 2257 records under penalty of federal law. Producers of erotic content need not expose their entire business files to review by federal agents without a warrant, when such is not required by section 2257. A last minute attempt to segregate 2257 records from other documents while the federal agents are waiting to conduct an inspection is not practical, and could arouse suspicion in the minds of the investigators.

An argument can also be made that producers have an affirmative obligation to protect the performer’s privacy rights, thus triggering the requirement to weed out sensitive performer information from their files. Performer files could contain social security numbers, personal phone numbers, and other identifying information that many performers desire to keep confidential. In an age where privacy rights are dwindling at a rapid pace, every effort should be undertaken by producers of erotic content to demonstrate what is known in the law as a “reasonable expectation of privacy” in their business records. Failing to keep 2257 files clean and separate from all other business documentation could result in a waiver of important constitutional rights to privacy if extraneous information is voluntarily produced to federal agents during a 2257 inspection. Without a warrant, the government’s prying eyes must be limited to only those minimal categories of information that producers are obligated to make available under federal law.

Industry attorney Lawrence G. Walters heads up Walters Law Group, and has advocated for the interests of the adult entertainment community for over 20 years. Nothing contained in this article is intended as legal advice. Walters can be reached at larry@firstamendment[dot]com or (800) 530-8137.

Related:  

Copyright © 2024 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More Articles

opinion

Why Cyber Insurance Is Crucial for Adult Businesses

From streaming services and interactive platforms to ecommerce and virtual reality experiences, the adult industry has long stood at the forefront of online innovation. However, the same technology-forward approach that has enabled adult businesses to deliver unique and personalized content to consumers worldwide also exposes them to myriad risks.

Corey D. Silverstein ·
opinion

Best Practices for Payment Gateway Security

Securing digital payment transactions is critical for all businesses, but especially those in high-risk industries. Payment gateways are a core component of the digital payment ecosystem, and therefore must follow best practices to keep customer data safe.

Jonathan Corona ·
opinion

Ready for New Visa Acquirer Changes?

Next spring, Visa will roll out the U.S. version of its new Visa Acquirer Monitoring Program (VAMP), which goes into effect April 1, 2025. This follows Visa Europe, which rolled out VAMP back in June. VAMP charts a new path for acquirers to manage fraud and chargeback ratios.

Cathy Beardsley ·
opinion

How to Halt Hackers as Fraud Attacks Rise

For hackers, it’s often a game of trial and error. Bad actors will perform enumeration and account testing, repeating the same test on a system to look for vulnerabilities — and if you are not equipped with the proper tools, your merchant account could be the next target.

Cathy Beardsley ·
profile

VerifyMy Seeks to Provide Frictionless Online Safety, Compliance Solutions

Before founding VerifyMy, Ryan Shaw was simply looking for an age verification solution for his previous business. The ones he found, however, were too expensive, too difficult to integrate with, or failed to take into account the needs of either the businesses implementing them or the end users who would be required to interact with them.

Alejandro Freixes ·
opinion

How Adult Website Operators Can Cash in on the 'Interchange' Class Action

The Payment Card Interchange Fee Settlement resulted from a landmark antitrust lawsuit involving Visa, Mastercard and several major banks. The case centered around the interchange fees charged to merchants for processing credit and debit card transactions. These fees are set by card networks and are paid by merchants to the banks that issue the cards.

Jonathan Corona ·
opinion

It's Time to Rock the Vote and Make Your Voice Heard

When I worked to defeat California’s Proposition 60 in 2016, our opposition campaign was outspent nearly 10 to 1. Nevertheless, our community came together and garnered enough support and awareness to defeat that harmful, misguided piece of proposed legislation — by more than a million votes.

Siouxsie Q ·
opinion

Staying Compliant to Avoid the Takedown Shakedown

Dealing with complaints is an everyday part of doing business — and a crucial one, since not dealing with them properly can haunt your business in multiple ways. Card brand regulations require every merchant doing business online to have in place a complaint process for reporting content that may be illegal or that violates the card brand rules.

Cathy Beardsley ·
profile

WIA Profile: Patricia Ucros

Born in Bogota, Colombia, Ucros graduated from college with a degree in education. She spent three years teaching third grade, which she enjoyed a lot, before heeding her father’s advice and moving to South Florida.

Women In Adult ·
opinion

Creating Payment Redundancies to Maximize Payout Uptime

During the global CrowdStrike outage that took place toward the end of July, a flawed software update brought air travel and electronic commerce to a grinding halt worldwide. This dramatically underscores the importance of having a backup plan in place for critical infrastructure.

Jonathan Corona ·
Show More