Stopped in its Tracks: The Government’s Failure to Track Software Use Constitutes Infringement Under 28 U.S.C. § 1498
Client Alert | 1 min read | 03.09.21
In Bitmanagement Software GmbH v. United States, the Federal Circuit vacated and remanded a decision by the Court of Federal Claims (COFC) that found the Navy was not liable for copyright infringement even though it was undisputed that the Navy made 429,604 copies of Bitmanagement’s BS Contact Geo software when it only paid for 119 copies. The COFC reasoned that the Navy was not liable because it had an implied-in-fact license that permitted it to make copies. The Federal Circuit’s majority agreed the Navy had an implied-in-fact license, but that the COFC’s analysis should not have stopped there; rather, the COFC should have also considered whether the Navy complied with the terms of that implied license. The Navy did not. According to the Court, the implied license was conditioned on the Navy’s use of a license-tracking software at the time of copying to monitor usage by limiting the number of simultaneous users of Bitmanagement’s software. However, the Navy failed to use that license-tracking software. The Court held that the Navy’s copying outside of the scope of the implied license created liability for infringement. In a concurring opinion, Judge Newman reached the same conclusion; however, she disagreed as to the existence of an implied license, simply finding that the Navy’s “massive copying” infringed Bitmanagement’s copyright.
The case was remanded to the COFC for the calculation of a reasonable royalty for the Navy’s actual usage in excess of the licensed number of copies, which the burden is on the Government to prove.
Contacts
Insights
Client Alert | 13 min read | 06.12.26
The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA.
Client Alert | 6 min read | 06.11.26
CMS Announces New Medicaid Eligibility Requirements: Implications for Managed Care Plans
Client Alert | 7 min read | 06.11.26
Qatar Rewrites the Playbook: What the New Public M&A Rules Mean for Market Participants
Client Alert | 2 min read | 06.11.26
Synthetic Performers, Real Consequences: Implications of Trailblazing New York AI Ad Law


