Filed 6/28/16

CERTIFIED FOR PUBLICATION
COURT OF APPEAL, FOURTH APPELLATE DISTRICT
DIVISION ONE
STATE OF CALIFORNIA

THE PEOPLE,

D067863

Plaintiff and Respondent,
v.

(Super. Ct. No. SCD252338)

KEVIN CHRISTOPHER BOLLAERT,
Defendant and Appellant.

APPEAL from a judgment of the Superior Court of San Diego County, David M.
Gill, Judge. Affirmed.
Patrick J. Hennessey, Jr., under appointment by the Court of Appeal, for
Defendant and Appellant.
Kamala D. Harris, Attorney General, Gerald A. Engler and Julie L. Garland,
Assistant Attorneys General, Eric A. Swenson, Junichi P. Semitsu, Garrett A. Gorlitsky,
Deputy Attorneys General, and Steven Taylor Oetting, Deputy Solicitor General, for
Plaintiff and Respondent.

 A jury convicted Kevin Christopher Bollaert of extortion (Pen. Code,1 § 520;
counts 3, 16, 18, 21, 27, 29) and the unlawful use of personal identifying information
(§ 530.5, subd. (a); counts 2, 4-15, 17, 19, 20, 22-24, 26, 28), stemming from his
operation of Web sites, "UGotPosted.com," through which users posted private, intimate
photographs of others along with that person's name, location and social media profile
links, and "ChangeMyReputation.com," through which victims could pay to have the
information removed. As to some of the victims, the jury unanimously found that
Bollaert committed the unlawful act of an invasion of privacy by disclosure of private
facts. The trial court declared a mistrial as to one of the identity theft charges (count 25)
and a conspiracy charge (count 1). It sentenced Bollaert to a split sentence of 18 years:
eight years of local confinement followed by 10 years of mandatory supervision.2
Bollaert contends his convictions under section 530.5, subdivision (a) must be
reversed for insufficient evidence because (1) he is immunized from liability under
section 530.5, subdivision (f) as an "interactive computer service" or "access software
provider" within the meaning of the Communications Decency Act (the CDA; 47 U.S.C.

1

Statutory references are to the Penal Code unless otherwise specified.

2
The court had initially sentenced Bollaert to 18 years in county jail, consisting of
the three-year midterm on count 3, consecutive eight-month terms (one-third the
midterm) on counts 4-15, 17, 19, 20, 22-26 and 28, and consecutive one-year terms (onethird the midterm) on counts 16, 18, 21, 27 and 29. The court imposed but stayed under
section 654 a two-year midterm on count 2. It later recalled Bollaert's sentence and in
September 2015 imposed the split sentence set forth above.
2

 § 230(c)(1));3 (2) he did not take action to develop or create the content of his Web site,
and therefore was not liable as an "information content provider" as defined by the CDA;
and (3) he did not willfully obtain the personal identifying information for an unlawful
purpose. Bollaert further contends there is insufficient evidence supporting his extortion
convictions because he did not directly or implicitly threaten any of the victims to expose
any secret; the alleged secrets—the photographs—were already in the public domain; and
he merely engaged in a business practice whereby legally posted information could be
removed. Finally, Bollaert contends the trial court erred by giving the jury instructions
on civil liability—CACI Nos. 1800 and 1801—regarding intrusion into private affairs
and public disclosure of private facts.
We conclude the evidence is sufficient to support Bollaert's convictions for
unlawful use of personal identifying information as well as extortion, and that the jury's
rejection of CDA immunity is likewise supported by evidence that Bollaert developed, at
least in part, the offensive content on his Web site by requiring users to input private and
personal information as a condition of posting the victims' pictures, making him an
information content provider within the meaning of the CDA. We further conclude
Bollaert invited the claimed instructional error, but hold in any event that he has not
shown error in the instructions as a whole. We affirm the judgment.

3
References to title 47 United States Code section 230 will at times be referred to
as section 230.
3

 FACTUAL AND PROCEDURAL BACKGROUND4
In 2012, 2013 and 2014, a number of individuals discovered that photographs of
themselves, including nude photographs, as well as their names, hometowns, and social
media addresses, had been posted without their permission on a Web site,
UGotPosted.com. Most of the pictures were taken by or for former significant others or
friends.5 Some of the pictures the victims had taken on their own phones or placed on
personal webpages for private viewing by themselves or select others. Some had been
taken while the victim was drugged and in a compromised state or otherwise unaware of
the photographing. Victims received harassing and vulgar messages from strangers.
Many of the victims contacted the Web site administrator at UGotPosted.com to try to get
their photographs and information removed without success. One of the victims testified
that when she tried to communicate with the UGotPosted contact, she reached a person
named "James Smith," not realizing it was Bollaert, who told her that to remove her
photos she would have to provide two forms of identification and show an unspecified
sign. The UGotPosted Web site contained a link to another Web site,
ChangeMyReputation.com, where victims were told that for payment of a specified
amount of money, their pictures and information would be taken down. Six of the

4
Some of the factual background is taken from a surreptitiously taped interview of
Bollaert by special agents with the Department of Justice, which was played to the jury at
trial.
5
One witness testified she unwillingly sent the pictures via text to a boy who
harassed, stalked and threatened her for the photographs. Two other victims had sent the
photographs to another person in connection with a dating application.
4

 victims paid money to an account on ChangeMyReputation.com to have their pictures
removed from the Web site.
Bollaert was the administrator and registered owner of the UGotPosted Web site.
He created it with another person, Eric Chanson, who eventually declined to participate
and transferred his interest to Bollaert. Bollaert was in control of the Web site, and he
managed and maintained it; changed, added and deleted content; and updated software
that operated the site. He designed the Web site so that he had to review the content
before it was posted, and it had "required fields" by which a user who wanted to post
pictures of another person had to input that other person's full name, age, location ("city,
state, country") and Facebook link. Bollaert had the only user account on the computer;
he looked at every single post that came through the Web site and decided what would
get posted on it, placed watermarks on each photograph to discourage others from
stealing the pictures, and accessed the site remotely. He kept a spreadsheet recording
every single post. Bollaert would not post pictures that he deemed "garbage," including
pictures that did not include nude persons. He removed pictures of minors and some
other content depending on the nature of the request. He moderated and approved the
comments that were posted on the Web site, and edited the contents of the posts. At
some point, Bollaert received about $800 or $900 in monthly income from advertising off
the site. Bollaert felt the Web site was "kinda fun and entertaining" at the beginning, but
he later took it down because it was causing him stress and "ruining his life."
Bollaert also set up and managed the Web site ChangeMyReputation.com, to
which individuals who had pictures posted on the UGotPosted site would be directed and
5

 told they could pay money to have the information removed. A Department of Justice
forensic auditor determined that victims paid a total of $30,147.73, which eventually was
forwarded to Bollaert's personal PayPal account. Law enforcement later used Bollaert's
site to contact victims. At one point, a legal analyst with the Attorney General's office
created a user account and attempted to post pictures of her pet cats on the Web site, but
they never appeared.
At trial, the People proceeded on the charges of unlawful use of personal
identifying information (§ 530.5, subd. (a)) under three theories: That Bollaert, without
authorization, willfully obtained the victims' personal identifying information via the
design, maintenance and operation of the Web site UGotPosted.com for the unlawful
purpose of annoying or harassing via electronic communication device under section
653m, subdivision (a).6 Or, that Bollaert, without authorization, willfully obtained the
victims' personal identifying information for the unlawful purpose of an invasion of
privacy either via public disclosure of private facts, or intrusion into private affairs.
Bollaert defended in part on grounds his Web site was an interactive computer service or
access software provider expressly immunized under subdivision (f) of section 530.5
6
Section 653m, subdivision (a), provides: "Every person who, with intent to annoy,
telephones or makes contact by means of an electronic communication device with
another and addresses to or about the other person any obscene language or addresses to
the other person any threat to inflict injury to the person or property of the person
addressed or any member of his or her family, is guilty of a misdemeanor. Nothing in
this subdivision shall apply to telephone calls or electronic contacts made in good faith."
" 'The purpose of section 653m is to deter people from making harassing telephone calls
with the intent to annoy and thus, to secure an individual's right to privacy against
unwanted intrusion.' " (People v. Powers (2011) 193 Cal.App.4th 158, 164.)
6

 because there was no evidence of intent to defraud, and was also protected under the
CDA. The court instructed the jury on these theories and Bollaert's defense at Bollaert's
request.7
DISCUSSION
I. Convictions for Unlawful Use of Personal Identifying Information (§ 530.5)
Bollaert contends the evidence is insufficient to support his convictions under
section 530.5 under any of the prosecution's theories. He continues to maintain that his
Web site is an interactive computer service or access software provider subject to
immunity under the CDA and section 530.5, subdivision (f), and that the People
presented no evidence he possessed any personal information with the intent to defraud.
He further argues that he cannot be an information content provider under the CDA
(§ 230, subd. (f)) because in operating the Web site, he "took no action that amounted to
developing or creating the content," similar to the defendants who were held immune
from tort liability in Zeran v. America Online, Inc. (4th Cir. 1997) 129 F.3d 327 (Zeran),

7
In addition to CALCRIM No. 2040 as to unauthorized use of personal identifying
information, the court instructed the jury with special instruction No. 1 at Bollaert's
request. That special instruction reads in part as follows: "The defendant has been
prosecuted for the unauthorized use of personal identifying information under three
separate theories: (i) violation of Penal Code section 653m; (ii) public disclosure of
private facts; and (iii) intrusion into private affairs. Each theory has different
requirements as set forth in these instructions. [¶] You may not find the defendant guilty
of unauthorized use of personal identifying information unless all of you agree that the
People have proved that the defendant committed that crime under at least one of these
theories. You do not all need to agree on the same theory." The court also specified the
three unlawful purposes required for the unauthorized use of personal identifying
information via special instruction No. 2 (violation of section 653m), CACI No. 1800
(intrusion into private affairs) and CACI No. 1801 (public disclosure of private facts).
7

 Carafano v. Metrosplash.com Inc. (9th Cir. 2003) 339 F.3d 1119 (Carafano), and Jones
v. Dirty World Entertainment Recordings LLC (6th Cir. 2014) 755 F.3d 398 (Jones).) He
additionally argues that with regard to actions not protected by the CDA, there is no
evidence he willfully obtained someone else's personal identifying information without
that person's consent and used it for an unlawful purpose.
A. Standard of Review
The principles governing sufficiency of the evidence claims are "clear and well
settled." (People v. Abilez (2007) 41 Cal.4th 472, 504.) " 'The proper test . . . is whether,
on the entire record, a rational trier of fact could find the defendant guilty beyond a
reasonable doubt. [Citations.] On appeal, we must view the evidence in the light most
favorable to the People and must presume in support of the judgment the existence of
every fact the trier could reasonably deduce from the evidence.' " (People v. Perez
(2010) 50 Cal.4th 222, 229; People v. Rangel (2016) 62 Cal.4th 1192, 1212-1213
[relevant question is " ' "whether, after viewing the evidence in the light most favorable to
the prosecution, any rational trier of fact could have found the essential elements of the
crime beyond a reasonable doubt" ' "].) " ' " 'Circumstantial evidence may be sufficient to
connect a defendant with the crime and to prove his guilt beyond a reasonable doubt.' " ' "
(People v. Abilez, at p. 504.) "If the circumstances reasonably justify the trier of fact's
findings, reversal of the judgment is not warranted simply because the circumstances
might also reasonably be reconciled with a contrary finding." (People v. Lindberg (2008)
45 Cal.4th 1, 27.) We may reverse for lack of substantial evidence only if " ' "upon no

8

 hypothesis whatever is there sufficient substantial evidence to support" ' the jury's
verdict." (People v. Zamudio (2008) 43 Cal.4th 327, 357.)
B. Section 530.5 and CDA Immunity
Section 530.5, subdivision (a), proscribes the unauthorized use of personal
identifying information (conduct often referred to as "identity theft"). (People v. Barba
(2012) 211 Cal.App.4th 214, 226; People v. Hagedorn (2005) 127 Cal.App.4th 734, 743744.) It provides: "Every person who willfully obtains personal identifying information,
as defined in subdivision (b) of Section 530.55, of another person, and uses that
information for any unlawful purpose . . . is guilty of a public offense . . . . " (§ 530.5,
subd. (a).) Personal identifying information includes "any name, address [and] . . . date
of birth" as well as "unique electronic data including information identification number
assigned to the person, address or routing code . . . ." (§ 530.55, subd. (b).) "The
elements of the crime defined by the language of the statute may be summarized as
follows: (1) that the person willfully obtain personal identifying information belonging
to someone else; (2) that the person use that information for any unlawful purpose; and
(3) that the person who uses the personal identifying information do so without the
consent of the person whose personal identifying information is being used." (People v.
Barba, at p. 223; see also People v. Tillotson (2007) 157 Cal.App.4th 517, 533.)

9

 Subdivision (f) of section 530.5 provides: "An interactive computer service or
access software provider as defined in subsection (f) of [the CDA]8 shall not be liable
under this section unless the service or provider acquires, transfers, sells, conveys, or
retains possession of personal information with the intent to defraud."
In the CDA, Congress declared that "[n]o provider or user of an interactive
computer service shall be treated as the publisher or speaker of any information provided
by another information content provider." (§ 230, subd. (c)(1).) The CDA further states:
"No cause of action may be brought and no liability may be imposed under any State or
local law that is inconsistent with this section." (§ 230, subd. (e)(3).) These provisions
have been held to confer broad immunity against defamation and other civil liability for
those who use the Internet to publish information originating from another source. (See
Barrett v. Rosenthal (2006) 40 Cal.4th 33, 39; Doe II v. MySpace Inc. (2009) 175
Cal.App.4th 561, 568; Fair Housing Counsel of San Fernando Valley v. Roommates.com,
LLC (9th Cir. 2008) 521 F.3d 1157, 1162 (Roommates) (en banc); Carafano, supra, 339

8
Under the CDA, an interactive computer service includes an access software
provider, though it defines the two separately. The CDA defines an interactive computer
service as "any information service, system, or access software provider that provides or
enables computer access by multiple users to a computer server, including specifically a
service or system that provides access to the Internet and such systems operated or
services offered by libraries or educational institutions." (§ 230, subd. (f)(2).) It defines
an access software provider as "a provider of software (including client or server
software), or enabling tools that do any one or more of the following: [¶] (A) filter,
screen, allow, or disallow content; [¶] (B) pick, choose, analyze, or digest content; or
[¶] (C) transmit, receive, display, forward, cache, search, subset, organize, reorganize, or
translate content." (§ 230, subd. (f)(4).) The People do not dispute that the Web site
UGotPosted.com is an interactive computer service.
10

 F.3d at p. 1122; Batzel v. Smith (9th Cir. 2003) 333 F.3d 1018, 1026; Zeran, supra, 129
F.3d at pp. 330-331.)
Section 530.5, subdivision (f) sets forth an exemption for interactive computer
services or access software providers within the meaning of the CDA, but the California
Legislature limited that exemption to interactive computer services that do not act with
the intent to defraud. Thus, if an interactive computer service acquires or retains personal
identifying information with the intent to defraud, it will be criminally liable under the
statute. Under the CDA, however, an interactive computer service likewise loses its
immunity if it also functions as an "information content provider" for the portion of the
statement or publication at issue. (Roommates, supra, 521 F.3d at p. 1162; Carafano,
supra, 339 F.3d at pp. 1123, 1125; Doe II v. MySpace Inc., supra, 175 Cal.App.4th at
p. 568.) The CDA defines an information content provider as "any person or entity that
is responsible, in whole or in part, for the creation or development of information
provided through the Internet or any other interactive computer service." (§ 230, subd.
(f)(3).)
C. The Evidence Demonstrates Bollaert Willfully Obtained the Victims' Personal
Identifying Information and Used It for an Unlawful Purpose
Before we reach the question of CDA immunity, we address Bollaert's challenge
to the evidence supporting the elements of section 530.5 liability. He first argues the
evidence does not support a finding that he willfully obtained any personal identifying
information of the alleged victims. He points out it was the third parties—ex-boyfriends
or personal enemies—who submitted the personal information and maintains he only
11

 "provided the opportunity for third parties to post the information of their choice."
According to Bollaert, imposing liability for his conduct would "criminalize the business
practice of merely hosting a website." Bollaert further contends there is no evidence he
used the identifying information for an unlawful purpose. As we explain, the contentions
are meritless.
1. Willful Conduct
" 'The word "willfully," when applied to the intent with which an act is done or
omitted, implies simply a purpose or willingness to commit the act, or make the omission
referred to.' In other words, '[t]he word "willfully" as generally used in the law is a
synonym for "intentionally," ' [citation], and ' ". . . implies no evil intent; ' "it implies
that the person knows what he is doing, intends to do what he is doing and is a free
agent." ' " ' " (In re Rolando S. (2011) 197 Cal.App.4th 936, 941.) In Rolando S., the
Court of Appeal upheld a petition finding a minor willfully obtained personal identifying
information of another in violation of section 530.5—the victim's e-mail account
password—even though the minor had received the password in an unsolicited text
message, and then accessed the victim's Facebook page to write "sexually explicit and
vulgar comments on the victims' [sic] friends' walls, accessible by the victims' [sic]
friends and acquaintances," thereby "clearly expos[ing] the victim to hatred, contempt,
ridicule and obloquy . . . ." (Id. at p. 947.) The court held the minor willfully obtained
the password when he chose to remember it and affirmatively used it to gain access to the
victim's electronic accounts: "Appellant freely accepted the password information
provided in the text message" and "no evidence suggests [he] was forced to remember the
12

 password or otherwise keep a record of it so that he could use it later, as he admitted to
doing. . . . [A]ppellant willfully obtained the password information from the text
message, knowing that he was continuing to possess the password, intending to do so,
and was a free agent when securing the password for his future use." (Id. at pp. 941.)
Here, the evidence shows Bollaert designed the UGotPosted Web site for the
specific purpose of eliciting nude photographs and private information of other persons;
the information was not provided to him by the victims depicted in the photographs
whose names and locations were used. Because Bollaert "freely accepted" all of the
victims' personal information, intended to continue to possess it, and used it for his own
purposes, i.e., for display on his Web site and receipt of advertising income as well as
payments from ChangeMyReputation.com, Bollaert willfully obtained the information
for purposes of section 530.5. (In re Rolando S., supra, 197 Cal.App.4th at p. 941.)
2. Unlawful Purpose
We further conclude substantial evidence demonstrates Bollaert obtained and
retained the information for an unlawful purpose, namely, to invade the victims' privacy.
In In re Rolando S., the court was faced with the minor's claim that he did not use the
victim's information for an unlawful purpose, because at most he " 'possibly defamed' the
victim" and such civil torts did not meet that standard. (In re Rolando S., supra, 197
Cal.App.4th at p. 942.) In addressing that contention, the court examined the legislative
history of section 530.5, specifically the 1998 amendment to the statute that added the
phrase "any unlawful purpose" (Stats. 1998, ch. 488, § 1, p. 3531) and observed that the
Legislature "clearly intended to greatly expand the scope of unlawful conduct underlying
13

 the identity theft offense." (Rolando S., at pp. 944-945.) The court applied the California
Supreme Court's definition of "unlawful," stating: "Our Supreme Court has defined the
term 'unlawful' to include wrongful conduct which is not criminal. In determining the
scope of the term, it held that an act is 'unlawful . . . if it is proscribed by some
constitutional, statutory, regulatory, common law, or other determinable legal standard.
[Citations.]' [Citation.] Under this definition, unlawful conduct includes acts prohibited
by the common law or nonpenal statutes, such as intentional civil torts." (Rolando S., at
p. 946, citing Korea Supply Co. v. Lockheed Martin Corp. (2003) 29 Cal.4th 1134, 1159
& fn. 11; see also Edwards v. Arthur Andersen, LLP (2008) 44 Cal.4th 937, 944.)
Thus, the term "unlawful" as used in section 530.5 includes intentional civil torts,
including those relied upon by the People here: invasion of privacy by means of intrusion
into private affairs and public disclosure of private facts. (See Shulman v. Group W
Productions, Inc. (1998) 18 Cal.4th 200, 214, 231 (Shulman) [discussing elements of
both causes of action].) Bollaert does not, in his opening brief, separately address the
torts, but rather sets out only the elements of the intrusion tort as the elements of
"invasions of privacy." Because he does not address the public disclosure tort or its
elements—(1) public disclosure (2) of a private fact (3) that would be offensive and
objectionable to the reasonable person and (4) which is not of legitimate public concern
(Shulman, at p. 214)—on the public disclosure tort theory of unlawful use alone we may
affirm Bollaert's 530.5 convictions.
Nevertheless, we conclude substantial evidence supports the jury's verdicts on a
theory of invasion of privacy based on intrusion into private affairs. "A privacy violation
14

 based on the common law tort of intrusion has two elements. First, the defendant must
intentionally intrude into a place, conversation, or matter as to which the plaintiff has a
reasonable expectation of privacy. Second, the intrusion must occur in a manner highly
offensive to a reasonable person." (Hernandez v. Hillsides, Inc. (2009) 47 Cal.4th 272,
286; see Shulman, supra, 18 Cal.4th at p. 231 [" '[o]ne who intentionally intrudes,
physically or otherwise, upon the solitude or seclusion of another or his private affairs or
concerns, is subject to liability to the other for invasion of his privacy, if the intrusion
would be highly offensive to a reasonable person' "].) "To prove actionable intrusion, the
plaintiff must show the defendant penetrated some zone of physical or sensory privacy
surrounding, or obtained unwanted access to data about, the plaintiff." (Shulman, at
p. 232, italics added.)
Bollaert suggests that liability for this tort would attach only to the third parties
who "of their own free will" posted the offensive content without the victim's permission;
that he is not responsible because he "could not tell from the submissions whether the
people submitting the photos were submitting photos of themselves or other people
without their permission." Interpreting this challenge as directed to the intent element,
we reject it. As the People point out, the tort is proven where the defendant obtains
unwanted access to private data about the plaintiff (Shulman, supra, 18 Cal.4th at
p. 232), and evidence of Bollaert's willful receipt of the intimate photographs from others
without the victims' consent meets that standard. Additionally, the evidence contradicts
Bollaert's assertions concerning his lack of knowledge, as the evidence shows he required
users to post both their own e-mail address, as well as the full name of the victim and the
15

 victim's Facebook link. The People's forensic computer expert testified that Bollaert
viewed the Facebook pages of victims on 2,300 occasions, permitting the jury to
conclude that Bollaert indeed sought to verify the identity of the persons in the
photographs.
Bollaert further suggests the plaintiffs did not have an objectively reasonable
expectation of privacy in their photographs, because "[m]ost, if not all of the alleged
victims admitted they knowingly took or allowed to be taken the photos which they then
in turn shared with other people." He maintains "there was no evidence the victims
retained their right to the images once they willingly distributed them over the Internet or
gave them to third parties." These arguments ignore evidence that two of the victims did
not knowingly permit the pictures to be taken but were photographed unbeknownst to
them or while they were in a compromised state. It also ignores evidence that Bollaert
required users of his site to also post other private information in conjunction with the
photos: the victims' full name and location together, information that many persons would
reasonably expect to remain private and not exposed on a public Internet Web site.
As for the victims' photographs themselves, the People correctly point out that
complete confidentiality or privacy is not required. The California Supreme Court has
recognized limited privacy interests in private communications to others that the press
had intercepted for wider dissemination, and its holdings by extension compel the
conclusion in this case that the victims' acts of sharing their intimate photographs with a
limited number of persons did not extinguish their expectation of privacy as to the
Internet or the outside world in general. (See Sanders v. American Broadcasting
16

 Companies (1999) 20 Cal.4th 907, 911 [an intrusion cause of action "is not defeated as a
matter of law simply because the events or conversations upon which the defendant
allegedly intruded were not completely private from all other eyes and ears"]; Hernandez
v. Hillsides, Inc., supra, 47 Cal.4th at p. 289.) In Hernandez, the court, summarizing and
quoting its holding in Sanders, stated that "privacy expectations can be reasonable even if
they are not absolute. '[P]rivacy, for purposes of the intrusion tort, is not a binary, all-ornothing characteristic. There are degrees and nuances to societal recognition of our
expectations of privacy: the fact that the privacy one expects in a given setting is not
complete or absolute does not render the expectation unreasonable as a matter of law.' "
(Hernandez, at p. 289.) Thus, in Sanders, where a reporter secretly videotaped and
recorded a plaintiff's interactions with other persons in an area that was closed to the
public but where coworkers could be seen and heard nearby, the court held the plaintiff
could nevertheless have a cause of action for invasion of privacy by intrusion based on
the reporter's covert videotaping. (Sanders, 20 Cal.4th at pp. 914, 917-918, 923.)
"Defendants' claim, that a 'complete expectation of privacy' is necessary to recover for
intrusion, . . . fails as inconsistent with case law as well as with the common
understanding of privacy. Privacy, for purposes of the intrusion tort must be evaluated
with respect to the identity of the alleged intruder and the nature of the intrusion. . . .
[A]n employee may, under some circumstances, have a reasonable expectation of visual
or aural privacy against electronic intrusion by a stranger to the workplace, despite the
possibility that the conversations and interactions at issue could be witnessed by
coworkers or the employer." (Id. at pp. 917-918; see also id. at p. 923 ["the possibility of
17

 being overheard by coworkers does not, as a matter of law, render unreasonable an
employee's expectation that his or her interactions within a nonpublic workplace will not
be videotaped in secret by a journalist"].)
In this case, there is no question based on the evidence concerning the inherently
personal nature of the images, the testimony of the victims who sent their images only to
another person or select others, the victims' generally shocked and horrified reaction to
the display of those images on Bollaert's Web site, and their attempts to get them
removed, that the jury could conclude each of those victims reasonably expected his or
her images to be private as to that person or persons to whom they were sent.
Given the foregoing conclusions, we need not decide whether the evidence is
likewise sufficient to support Bollaert's section 530.5 conviction on the theory he acted
with the unlawful purpose to annoy or harass the victims by means of an electronic
communication device in violation of section 653m, subdivision (a). Even if we were to
assume arguendo the People's theory of unlawful purpose under section 653m,
subdivision (a) was unsupported by the evidence, we may uphold Bollaert's convictions
on the other two theories. This court has stated: "[I]f a jury is presented with multiple
theories supporting conviction on a single charge and on review one theory is found
unsupported by sufficient evidence, reversal is not required if sufficient evidence
supports the alternate theory and there is no affirmative basis for concluding the jury
relied on the factually unsupported theory because it is presumed jurors would not rely on
a factually deficient theory." (People v. Llamas (1997) 51 Cal.App.4th 1729, 1740, citing
People v. Guiton (1993) 4 Cal.4th 1116, 1128-1129.) The California Supreme Court in
18

 Guiton explained that "[i]f the inadequacy of proof is purely factual, of a kind the jury is
fully equipped to detect, reversal is not required whenever a valid ground for the verdict
remains, absent an affirmative indication in the record that the verdict actually did rest on
the inadequate ground." (Guiton, 4 Cal.4th at p. 1129.) Bollaert has not pointed to any
such affirmative indication in the record, and we find none.
D. The Evidence Is Sufficient to Support Bollaert's Convictions Under 530.5 Regardless
of CDA Immunity Because There Is Evidence from Which the Jury Could Reasonably
Find Bollaert Retained or Acquired Personal Information with the Intent to Defraud
Bollaert contends the People presented no evidence supporting their claim that he
possessed personal information with the intent to defraud by operating the
ChangeMyReputation Web site so as to deceive victims into thinking they were paying
money to a Web site unconnected with UGotPosted. Bollaert points out that his
UGotPosted Web site contained a link to ChangeMyReputation.com, showing he was not
hiding the connection between the sites, and that one victim testified it was "obvious" to
her that the same person was behind both sites. He maintains the victims paid money
because they wanted their pictures removed, not because they were deceived.
"An intent to defraud is an intent to deceive another person for the purpose of
gaining a material advantage over that person or to induce that person to part with
property or alter that person's position by some false statement or false representation of
fact, wrongful concealment or suppression of the truth or by any artifice or act designed
to deceive." (People v. Pugh (2002) 104 Cal.App.4th 66, 72, citing People v. Booth
(1996) 48 Cal.App.4th 1247, 1253.) In Booth, the court further explained: " ' "Intent to
19

 defraud is an intent to commit a fraud." [Citation.] " 'Fraud' and 'dishonesty' are closely
synonymous. Fraud is defined as 'a dishonest stratagem.' [Citation.] It 'may consist in
the misrepresentation or the concealment of material facts' [citation], or a statement of
fact made with 'conscious[ness] of [its] falsity.' " ' " (Booth, at p. 1253.) This court has
recently held that to "defraud" means " 'to injure someone in their pecuniary or property
rights.' " (People v. Isom (2015) 240 Cal.App.4th 1146, 1150, quoting Lewis v. Superior
Court (1990) 217 Cal.App.3d 379, 393-394.)
Specific intent to defraud is often proven by circumstantial evidence; it is thus
typically inferred from all of the facts and circumstances. (People v. Williams (2013) 218
Cal.App.4th 1038, 1066, citing People v. Abilez, supra, 41 Cal.4th at p. 508; People v.
Smith (1998) 64 Cal.App.4th 1458, 1469; People v. Wilkins (1972) 27 Cal.App.3d 763,
773; People v. Hambleton (1963) 218 Cal.App.2d 479, 482 ["The intent to defraud can be
inferred from all the facts and need not be proved by direct evidence"].) Furthermore,
"[p]roof of a false factual representation need not be by words alone; it may be implied
from conduct; it may be made either expressly or by implication; the form of the words in
which the pretense is couched is immaterial; if the words or conduct are intended to
create the impression that defendant is making a representation as to a present fact, the
pretense is within the statute." (People v. Brady (1969) 275 Cal.App.2d 984, 996; see
also People v. Reed (1961) 190 Cal.App.2d 344, 353.)
Here, the evidence showed that when many of the victims e-mailed the webmaster
contact at UGotPosted.com and pleaded to have their personal information removed, they
received no response. For at least one victim, Bollaert used a false name when he acted
20

 as the UGotPosted contact person. But victims who contacted and paid
ChangeMyReputation.com were successful in their efforts. One victim, Brian,
communicated with the e-mail associated with ChangeMyReputation.com to remove his
photos and asked whether he could submit payment after his photographs were removed;
he received a response telling him, "[W]e can't remove it until you pay." When he
expressed his suspicion that the Web sites involved "most likely the same people," the
only response he received was a message telling him, "Once it is removed it will not be
reposted or we will remove it again." His information was removed after he made his
payment. Another victim testified that after receiving no response to her e-mails to
UGotPosted, she sent an e-mail to ChangeMyReputation.com and "within minutes"
received a response containing payment instructions. Her photographs were removed
minutes after she submitted payment. According to another victim,
ChangeMyReputation.com purported to remove content from all Web sites, not just
UGotPosted.com. She testified she and her ex-boyfriend made two separate payments to
ChangeMyReputation.com; after he made the first payment, her photographs appeared
again on other Web sites and she then paid an additional amount to have those
photographs removed.
We conclude based on all of these facts, that the circumstantial evidence was
sufficient for a jury to find Bollaert acquired and retained all of the victims' personal
identifying information with the intent to defraud. That is, Bollaert purposely set up
UGotPosted.com so that it directed victims to an entirely separate Web site where they
could remove the content for a fee; he named the Web sites differently and used different
21

 e-mail addresses, suggesting he intended to conceal the fact the Web sites were operated
by the same person and induce victims to believe they were making the payment to a
different entity; he at times used a pseudonym and never disclosed the Web sites were
operated by the same person despite at least one victim expressing his suspicion that such
was the case; and he thereby duped the victims into paying money to him, the very same
operator of the UGotPosted Web site, unbeknownst to them. It was only after payment
that he would remove the offensive content. It is of no moment that one victim was not
fooled, but believed correctly that the Web sites were operated by the same person, as the
evidence must demonstrate only Bollaert's fraudulent intent, not actual success in his
efforts. (People v. Reed, supra, 190 Cal.App.2d at p. 353 [intent to defraud does not
require reliance by the person intended to be defrauded as does actual fraud].) The fact
there is evidence from which a finder of fact could decide to the contrary does not require
a different result on our review for substantial evidence.
Under section 530.5, subdivision (f), Bollaert's status as an interactive computer
service or access software provider is irrelevant if Bollaert acted with the intent to
defraud. Thus, the jury's finding that Bollaert acted with the intent to defraud renders it
unnecessary for us to proceed to the question of CDA immunity, including to decide
whether Bollaert's actions make him an information content provider, taking him outside
CDA immunity. We in any event address that question under this unique set of facts, the
resolution of which requires us to uphold the jury's verdicts on Bollaert's section 530.5
convictions.

22

 E. The Evidence Is Sufficient to Support the Jury's Finding That Bollaert Is an
Information Content Provider Not Immunized by the CDA
At both parties' request, the court instructed the jury that section 530.5,
subdivision (f) would not apply to Bollaert if he were also an information content
provider. The jury was additionally instructed at Bollaert's request that "[a]n interactive
computer service or access software provider can become an 'information content
provider' to the extent a website is designed to require users to post illegal or actionable
content as a condition of use." Also at Bollaert's request the jury was told that certain
actions—"[c]hoosing which third party submissions to publish or not publish on a
website," "[e]diting third party submissions," "[a]dopting or ratifying third party
submissions," or "[e]ncouraging defamatory or actionable third party submissions"—
would not by themselves make a person an information content provider. Bollaert
concedes on appeal that an information content provider does not receive CDA
immunity.9
In arguing he cannot be an information content provider subject to liability,
Bollaert compares his conduct to that of the defendants in Zeran, supra, 129 F.3d 327,
Carafano, supra, 339 F.3d 1119 and Jones, supra, 755 F.3d 398, who were held to fall

9
Given Bollaert's concession below that an information content provider is not an
interactive computer service, rendering it subject to liability for unlawful use of personal
identifying information under section 530.5, we have no occasion to address whether the
California Legislature intended to incorporate "information content provider" liability
within section 530.5 regardless of the existence of evidence of the defendant's intent to
defraud.
23

 within the scope of CDA immunity. As we explain, we reject these comparisons, and
hold that Bollaert's design and operation of UGotPosted.com—which required users who
wished to use the Web site to provide content that violated other persons' privacy—does
not entitle him to statutory immunity under the CDA. We base our conclusion on the
reasoning of the Ninth Circuit Court of Appeals in Roommates, supra, 521 F.3d 1157,
which Bollaert mentions but does not discuss in any detail in his opening brief.
In Roommates, supra, 521 F.3d 1157, the defendant Web site, Roommate.com
(Roommate), matched potential landlords and renters, while collecting a profit from
advertisers and subscribers. (Id. at p. 1161.) As the Ninth Circuit en banc majority
described it: "Before subscribers can search listings or post housing opportunities on
Roommate's website, they must create profiles, a process that requires them to answer a
series of questions. In addition to requesting basic information—such as name, location
and e-mail address—Roommate requires each subscriber to disclose his sex, sexual
orientation and whether he would bring children to a household. Each subscriber must
also describe his preferences in roommates with respect to the same three criteria: sex,
sexual orientation and whether they will bring children to the household. The site also
encourages subscribers to provide 'Additional Comments' describing themselves and their
desired roommate in an open-ended essay. After a new subscriber completes the
application, Roommate assembles his answers into a 'profile page.' The profile page
displays the subscriber's pseudonym, his description and his preferences, as divulged
through answers to Roommate's questions." (Id. at p. 1161.) The plaintiff sued
defendant for violations of the Fair Housing Act (FHA) and California's fair housing laws
24

 prohibiting discrimination on the basis of race, familial status or national origin (see Doe
II v. MySpace, Inc., supra, 175 Cal.App.4th at p. 574), but the district court dismissed the
federal claims on summary judgment, ruling the defendant was immune under section
230(c) of the CDA. (Roommates, 521 F.3d at pp. 1161-1162 & fn. 1.)
On appeal, the plaintiff argued that the defendant violated the FHA and analogous
California law by posing illegal questions during the registration process, and also by
requiring the subscribers to answer the questions as a condition of using defendant's
services. (Roommates, supra, 521 F.3d at pp. 1164, 1165.) The Ninth Circuit agreed that
Roommate was an "information content provider" within the meaning of the CDA as to
the questions it posed: the defendant "created the questions and choice of answers, and
designed its website registration process around them" and thus could not claim CDA
immunity for posting the questions on its Web site or for forcing subscribers to answer
them as a condition of using its services. (Id. at p. 1164.) The court pointed out that a
party responsible for putting information online may be subject to liability even if the
information originated with a user. (Id. at p. 1165, citing Batzel v. Smith, supra, 333 F.3d
at p. 1033.) It explained, "By requiring subscribers to provide the information as a
condition of accessing its service, and by providing a limited set of pre-populated
answers, Roommate becomes much more than a passive transmitter of information
provided by others; it becomes the developer, at least in part, of that information. And
section 230 provides immunity only if the interactive computer service does not 'creat[e]

25

 or develop[]' the information 'in whole or in part.' " (Roommates, at p. 1166.)10 It held
the defendant was "sufficiently involved with the design and operation of the search and
e-mails systems—which are engineered to limit access to housing on the basis of the
protected characteristics elicited by the registration process—so as to forfeit any
immunity to which it was otherwise entitled under section 230." (Id. at p. 1170.)
In reaching its conclusions, the Ninth Circuit majority declined to read the
statutory term "development" so narrowly as to apply only to content that originated
entirely with the Web site. (Roommates, supra, 521 F.3d at p. 1167.) "We believe that
both the immunity for passive conduits and the exception for co-developers must be
given their proper scope and, to that end, we interpret the term 'development' as referring
not merely to augmenting the content generally, but to materially contributing to its
alleged unlawfulness. In other words, a Web site helps to develop unlawful content, and
thus falls within the exception to section 230, if it contributes materially to the alleged
illegality of the conduct." (Id. at pp. 1167-1168, italics added.)
It also clarified its reasoning in Carafano, supra, 339 F.3d 1119, which Bollaert
sees as analogous. In Carafano, the question was whether the defendant dating service
Web site was statutorily immune under the CDA for false content in a dating profile

10
The Ninth Circuit majority rejected the dissent's view that defendant merely
provided a " 'form with options for standardized answers' " and thus did not develop the
information: "[Defendant] does much more than provide options. . . . [I]t asks
discriminatory questions that . . . are not entitled to CDA immunity. . . . The FHA makes
it unlawful to ask certain discriminatory questions for a very good reason: Unlawful
questions solicit (a.k.a. 'develop') unlawful answers. Not only does [defendant] ask these
questions, [it] makes answering the discriminatory questions a condition of doing
business." (Roommates, supra, 521 F.3d at p. 1166.)
26

 provided by someone posing as the celebrity plaintiff. (Id. at p. 1120.) The dating Web
site gave users a "detailed questionnaire" that included multiple-choice questions wherein
"members select answers . . . from menus providing between four and nineteen options,"
including some sexually suggestive answers. (Id. at p. 1121.)11 The profile at issue
included the plaintiff's home address and telephone number, causing the plaintiff to
receive sexually explicit and threatening messages and calls. (Id. at pp. 1120-1121.)
The Ninth Circuit in Carafano held the defendant could not be considered an
information content provider and thus was immune under the CDA. (Carafano, supra,
339 F.3d at pp. 1124-1125.) The court pointed out that the CDA immunized an
electronic newsletter operator even though the operator selected for publishing a
defamatory e-mail under the CDA (id. at p. 1123, discussing Batzel v. Smith, supra, 333
F.3d at pp. 1030-1032), and "so long as a third party willingly provides the essential
published content, the interactive service provider receives full immunity regardless of
the specific editing or selection process." (Carafano, at p. 1124.) As to the dating
service defendant in Carafano, "[t]he fact that some of the content was formulated in
response to [defendant's] questionnaire does not alter this conclusion. Doubtless, the
questionnaire facilitated the expression of information by individual users. However, the
selection of the content was left exclusively to the user. The actual profile 'information'
consisted of the particular options chosen and the additional essay answers provided.
11
Notably, the service's policies prohibited members from posting last names,
addresses, phone numbers, or e-mail addresses within a profile, and also reviewed the
photographs, but not the profiles, for impropriety before posting them. (Carafano, supra,
339 F.3d at p. 1121.)
27

 [Defendant] was not responsible, even in part, for associating certain multiple choice
responses with a set of physical characteristics, a group of essay answers and a
photograph. [Defendant] cannot be considered an 'information content provider' under
the statute because no profile has any content until a user actively creates it." (Ibid.)
Pointing to the breadth of the latter statement in Carafano, supra, 339 F.3d 1119,
the majority in Roommates disavowed any suggestion that Carafano had held an
information content provider automatically immune so long as the content originated
with another information content provider. (Roommates, supra, 521 F.3d at p. 1171, fn.
31.) It explained, "[E]ven if the data are supplied by third parties, a website operator may
still contribute to the content's illegality and thus be liable as a developer. Providing
immunity every time a website uses data initially obtained from third parties would
eviscerate the exception to section 230 for 'develop[ing]' unlawful content 'in whole or in
part.' " (Id. at p. 1171.) The Ninth Circuit clarified that in Carafano, the defendant was
immune because "[t]he allegedly libelous content there—the false implication that [the
plaintiff] was unchaste—was created and developed entirely by the malevolent user,
without prompting or help from the website operator." (Roommates, at p. 1171.) Though
the defendant provided "neutral tools" used by the poster, it "did absolutely nothing to
encourage the posting of defamatory content—indeed, the defamatory posting was
contrary to the website's express policies. . . . With respect to the defamatory content,
the website operator was merely a passive conduit and thus could not be held liable for
failing to detect and remove it." (Id. at pp. 1171-1172.)

28

 Carafano's conclusion, the Ninth Circuit held, could not apply to the defendant in
Roommates: "By contrast, Roommate both elicits the allegedly illegal content and makes
aggressive use of it in conducting its business. Roommate does not merely provide a
framework that could be utilized for proper or improper purposes; rather, Roommate's
work in developing the discriminatory questions, discriminatory answers and
discriminatory search mechanism is directly related to the alleged illegality of the site.
Unlike Carafano . . . Roommate is directly involved with developing and enforcing a
system that subjects subscribers to allegedly discriminatory housing practices."
(Roommates, supra, 521 F.3d at p. 1172.) Furthermore, the Web site in Roommates was
unlike that in Carafano because it was "designed to force subscribers to divulge protected
characteristics and discriminatory preferences, and to match those who have rooms with
those who are looking for rooms based on criteria that appear to be prohibited by the
FHA." (Ibid.)
The Ninth Circuit in Roommates likewise distinguished Zeran, supra, 129 F.3d
327, on which Bollaert relies. Zeran involved the plaintiff's negligence action against
America Online ("AOL") alleging that AOL had "unreasonably delayed in removing
defamatory messages posted by an unidentified third party, refused to post retractions of
those messages, and failed to screen for similar posting thereafter." (Zeran, supra, 129
F.3d at p. 328.) The Ninth Circuit in Roommates observed that the Fourth Circuit in
Zeran held AOL immune under the CDA for the defamatory and harassing message
board postings, pointing out that "AOL did not solicit the harassing content, did not
encourage others to post it, and had nothing to do with its creation other than through
29

 AOL's role as the provider of a generic message board for general discussions."
(Roommates, supra, 521 F.3d at p. 1172, fn. 33.) We agree there is no indication that
AOL in that case acted as anything other than a passive conduit for the allegedly harmful
content.
Here, the evidence shows that like the Web site in Roommates, Bollaert created
UGotPosted.com so that it forced users to answer a series of questions with the damaging
content in order to create an account and post photographs. That content—full names,
locations, and Facebook links, as well as the nude photographs themselves—exposed the
victims' personal identifying information and violated their privacy rights. As in
Roommates, but unlike Carafano or Zeran, Bollaert's Web site was "designed to solicit"
(Roommates, supra, 521 F.3d at p. 1170, italics added) content that was unlawful,
demonstrating that Bollaert's actions were not neutral, but rather materially contributed to
the illegality of the content and the privacy invasions suffered by the victims. In that
way, he developed in part the content, taking him outside the scope of CDA immunity.
Bollaert would have us follow the Sixth Circuit's decision in Jones, supra, 755
F.3d 398, involving a "user-generated, online tabloid" where users could anonymously
post comments, photographs and video, which the operator selected and published along
with his own editorial comments. (Id. at pp. 401-402.) But Jones supports our
conclusions. There, the Sixth Circuit adopted the Ninth Circuit's material contribution
test to determine whether a Web site operator is " 'responsible, in whole or in part, for the
creation or development of [allegedly tortious] information' " within the meaning of the
CDA. (Id. at p. 413.) The court held that unlike the Web site in Roommates, the Web
30

 site operator in that case "did not require users to post illegal or actionable content as a
condition of use," but instead instructed users to " '[t]ell us what's happening' " and
" 'who, what, when, where, why.' " (Id. at p. 416.) It also provided "neutral tools"—
labels by which to categorize the submission—as to what third parties submit. (Id. at
p. 411.) These tools, the Sixth Circuit held, did not constitute a material contribution to
any defamatory speech that was uploaded. (Ibid.) Nothing in Jones changes our
conclusion that the evidence in this case supports the jury's finding that Bollaert's design
and operation of UGotPosted.com made him an information content provider, taking him
outside CDA immunity.
II. Sufficiency of Evidence of Extortion
Bollaert contends the evidence is insufficient to support his convictions for
extortion. He reiterates the People's extortion theory: that he threatened to injure the
victims by publishing their images on his UGotPosted Web site and used the postings to
illegally obtain money via ChangeMyReputation.com by having the photos removed.
Bollaert does not challenge evidence of his specific intent to extort; rather, he maintains
that as an interactive computer service provider and access software provider, he was
under no legal obligation to remove third party postings from his Web site even if they
were negative, but instead "merely offered a service to remove the photos." According to
Bollaert, he was "engaging in standard business practice," and not extortion, similar to
the practices approved by the Ninth Circuit in Levitt v. Yelp!, Inc. (9th Cir. 2014) 765
F.3d 1123 (Levitt). Bollaert also contends there is no evidence he directly or impliedly
threatened any of the victims, and that the information, which was already publicly
31

 available and exposed on his Web site, cannot constitute a secret for purposes of
extortion.
The People respond that Bollaert used the implicit threat of continued exposure of
the victims' pictures and information to extort money from them, and because his Web
site contained, and indeed required, posters to provide the victims' personal identifying
information, he was obligated to remove the content. Relying on People v. Peniston
(1966) 242 Cal.App.2d 719, the People further respond that a secret can remain a secret
despite being made known to others, even many others, as long as there are some who do
not know it. They distinguish the circumstances here from those in Levitt, supra, 765
F.3d 1123 and assert the Ninth Circuit's analysis in that case is not controlling or
persuasive on the question of whether Bollaert should be immune from liability under the
CDA.
A. Trial Evidence
At trial, victim Rebecca testified that after her manager at work had been told one
of his employees "was doing suspicious activity on the Internet," she discovered that
intimate photographs of herself and her ex-fiancée, as well as her full name, work
location, Facebook link and age, were posted on UGotPosted.com without her consent.
Rebecca felt "extremely violated" by the situation, which was very hurtful and
embarrassing to her. She e-mailed the Web site and demanded the photographs be taken
down, but received no response. She also e-mailed ChangeMyReputation.com, and
within minutes received a response directing her to pay $249.99 via PayPal. Rebecca
paid the money because she felt the images were disgusting and, though her manager and
32

 others had already seen them, she was worried the images would be exposed to more
people.
Victim Jennifer testified that after she discovered nude pictures of her had been
posted to UGotPosted.com without her consent (in addition to her full name and work
location) she e-mailed the Web site and demanded the content be removed. Based on the
e-mails she had sent, as well as the link on UGotPosted.com, she became aware of
ChangeMyReputation.com, which Jennifer described as a PayPal account where one
could pay money to have the content removed within 48 hours. Jennifer then paid
$249.99, and her photographs were removed. Jennifer was subjected to racial slurs
directed at her as a result of the posting, and she felt "horrible," "dirty," and afraid that
someone was going to find her. She was afraid to leave her apartment and missed two
weeks of school.
Victim Alaina testified that after she discovered her own nude pictures, full name,
age, city and school were posted on UGotPosted.com without her consent, she sent five
to 10 messages to the Web site in an effort to have the content removed without response.
Alaina testified she then "paid the blackmail fee of $350" to ChangeMyReputation.com,
which stated it would take photographs down upon payment. The content was removed
the next day. Alaina was "devastated" by the situation; she changed her appearance
because she lived in a small town, was afraid of being stalked, and still suffered
psychological trauma at the time of trial.
Victim Jasmine testified that she was surprised to find nude pictures of her, her
first and last name, and "all of [her] social media" had been placed on UGotPosted.com.
33

 She worked for a large retailer at the time; her employer called to tell her that the
company had been informed about her pictures and she would be fired if they were not
taken down. Jasmine felt "really embarrassed and ashamed" when she saw the photos,
and it was a frightening experience for her because she "didn't want anybody to know."
Jasmine paid $249.99 to ChangeMyReputation.com and the content was removed
from UGotPosted.com, but her ex-boyfriend had to pay another $249.99 to
ChangeMyReputation.com to have the photographs removed from other Web sites where
the information later appeared. Nobody from UGotPosted.com ever contacted her about
the photographs.
Victim Manuel testified that he was shocked to discover that nude photographs of
himself that he had sent to one individual, as well as his full name, town, and Facebook
link, had been placed on UGotPosted.com. The situation was upsetting because he was
gay and had not informed family or friends to whom the photographs were sent.
Strangers submitted commentary and were tracking him, causing him fear and concern.
Manuel found the link to ChangeMyReputation.com via a victim's forum and also
through UGotPosted.com, submitted a required photograph and a picture of his driver's
license, and paid $250 to have the content removed.
Victim Brian testified he was astounded, angry and embarrassed to find his nude
pictures, full name, hometown, and Facebook link posted on UGotPosted.com without
his consent. He was immediately scared for his job and that his parents would find out
about the situation, though they never did learn about it. He e-mailed the Web site
administrator at UGotPosted.com. He also e-mailed ChangeMyReputation.com, and
34

 received a response stating: "Once you pay, they will be removed immediately. If not,
you can request a refund through PayPal." Brian asked whether he could pay after he
was notified the photographs were removed, and received an e-mail stating: "No, we
can't remove until you pay." After he expressed concern over possibly sending money to
the same operator of UGotPosted.com, he received a response telling him, "Make a
payment, and we will remove the content, thanks." After Brian paid $250, the content
was removed. The situation caused him shame, embarrassment and stress, as he knew his
high school classmates saw the posting and he was worried about who else would see it
in the future.
B. Legal Principles
"Extortion is the obtaining of property from another, with his consent . . . induced
by a wrongful use of force or fear . . . ." (§ 518.) Fear, for purposes of extortion "may be
induced by a threat of any of the following: [¶] . . . [¶] . . . To accuse the individual
threatened . . . of a crime"; or "[t]o expose, or impute to him . . . a deformity, disgrace or
crime" or "expose a secret affecting him [or her]." (§ 519; see Flatley v. Mauro (2006)
39 Cal.4th 299, 326.)
"In order to establish extortion, 'the wrongful use of force or fear must be the
operating or controlling cause compelling the victim's consent to surrender the thing to
the extortionist.' " (Chan v. Lund (2010) 188 Cal.App.4th 1159, 1171, quoting People v.
Goodman (1958) 159 Cal.App.2d 54, 61.) "The 'secret' referred to in the statute is a
matter 'unknown to the general public, or to some particular part thereof which might be
interested in obtaining knowledge of the secret; the secret must concern some matter of
35

 fact, relating to things past, present or future; the secret must affect the threatened person
in some way so far unfavorable to the reputation or to some other interest of the
threatened person, that threatened exposure thereof would be likely to induce him
through fear to pay out money or property for the purpose of avoiding the exposure.'
[Citation.] Whether a threatened exposure would have this effect on the victim is a
factual question and depends on the nature of the threat and the susceptibility of the
victim." (Philippine Export & Foreign Loan Guarantee Corp. v. Chuidian (1990) 218
Cal.App.3d 1058, 1978; see also Cross v. Cooper (2011) 197 Cal.App.4th 357, 387.)
The threat may be implied from all of the circumstances: " 'No precise or
particular form of words is necessary in order to constitute a threat under the
circumstances. Threats can be made by innuendo and the circumstances under which the
threat is uttered and the relations between [the defendant] and the [target of the threats]
may be taken into consideration in making a determination of the question involved.'
[Citations.] . . . 'The more vague and general the terms of the accusation the better it
would subserve the purpose of the accuser in magnifying the fears of his victim, and the
better also it would serve to protect him in the event of the failure to accomplish his
extortion and of a prosecution for his attempted crime.' " (Stenehjem v. Sareen (2014)
226 Cal.App.4th 1405, 1424; see also People v. Choynski (1892) 95 Cal. 640, 642
[persons guilty of extortion "seldom possess the hardihood to speak out boldly and
plainly, but deal in mysterious and ambiguous phrases"].)

36

 Extortion is a specific intent crime, and thus guilt depends on the intent of the
person who makes the threat and not the effect the threat has on the victim. (People v.
Umana, supra, 138 Cal.App.4th at p. 641.)
C. The Evidence Is Sufficient to Establish Both a Threat and a Secret Within the
Meaning of the Extortion Statute
We first reject Bollaert's contentions concerning the absence of evidence of any
threat or secret for purposes of extortion. Whether the evidence shows Bollaert engaged
in the requisite threat by referring victims who desired to remove the offensive content to
ChangeMyReputation.com for the purpose of having them pay to remove it, must be
analyzed in the entire factual context. (Stenehjem v. Sareen, supra, 226 Cal.App.4th at p.
1424; People v. Massengale (1968) 261 Cal.App.2d 758, 765.) We conclude the threats
were inherent and implied in the very structure and content of Bollaert's Web sites, which
Bollaert himself created and operated. When victims were directed via UGotPosted.com
to the ChangeMyReputation.com Web site, they were informed either via the Web site or
e-mail they could have their photos removed for a fee, from which victims could infer
that if they did not pay, the offensive content would remain on the site in further public
view. Those victims who communicated with Bollaert before they paid were told the
content would only be removed upon payment, and Bollaert only removed the content
when the victims paid the requested fee, which eventually was deposited in Bollaert's
personal account. There is no question based on the victims' testimony that the display of
their private images and information subjected them to shame, disgrace and
embarrassment as to their reputation and character, and would continue to be exposed to
37

 other people if the content was not removed. The fact Bollaert did not take affirmative
action to seek out or contact the victims, but merely responded to the victims' pleas to
remove their content, does not render the threat element unsupported by the evidence.
Further, as we explain more fully below, Bollaert's act in removing the victims' personal
identifying information from his Web site, which he expressly solicited in the first place,
did not give him a lawful right to collect a fee.
In sum, there is ample evidence from which the jury could conclude Bollaert's
joint operation and connection of the two Web sites in this manner, as well as his
communications to the victims, was a means to obtain their money by wrongful use of
fear, namely the threat to "impute to [them] . . . disgrace" (§ 519) by continued display of
their private nude images and further humiliation, embarrassment, and damage to their
reputation, unless they paid.
We further conclude alternatively there is substantial evidence that the victims'
photographs and personal identifying information constituted a secret within the meaning
of the crime of extortion, notwithstanding its posting on the Internet and viewing by some
individuals. We are guided by People v. Peniston, supra, 242 Cal.App.2d 719. In
Peniston, the victim, during her relationship with the defendant, gave the defendant
partially nude photographs of herself. (Id. at p. 721.) After the relationship ended and
she married her husband, the defendant returned and asked her to give him money or he
would take the pictures to her husband and parents. (Ibid.) She paid him, but the
defendant contacted her again and when she asked him to return her pictures, he asked for
more money, prompting her to go to police. (Ibid.) On appeal from his extortion and
38

 attempted extortion convictions, the defendant challenged the evidence supporting the
finding that he had threatened to expose a secret, pointing to evidence that the pictures
were only some of a number of modeling pictures taken of the victim that had been
circulated throughout the West Coast. (Id. at p. 722.) The victim had testified her
husband knew some pictures existed but not their nature, and neither he nor her mother
were aware of her modeling activities. (Ibid.) She testified that she was on probation
from a prostitution charge and her parents had threatened to remove her children from her
if she got into more trouble. (Ibid.) She did not want her husband or parents to see the
photographs and other motion pictures, which unbeknownst to her had been exhibited in
arcades in San Fernando Valley. (Ibid.)
The Peniston court pointed out that to suffice for extortion, the " 'thing held in
secret must be unknown to the general public, or to some particular part thereof which
might be interested in obtaining knowledge of the secret' " in addition to affecting the
threatened person in some way so far unfavorable to the reputation, or to some other
interest of the threatened person, that threatened exposure would be likely to induce the
victim through fear to pay money so as to avoid the exposure. (People v. Peniston,
supra, 242 Cal.App.2d at p. 722, italics added, quoting People v. Lavine (1931) 115
Cal.App. 289, 295; see also Cross v. Cooper, supra, 197 Cal.App.4th at p. 387.) It held
based on the evidence, a trier of fact could reasonably infer the victim feared that
disclosure of the pictures to her husband and parents might lead to adverse probation
consequences and the loss of her children, making the evidence sufficient to establish a
secret within the meaning of section 519. (Peniston, at p. 722.) In response to the
39

 defendant's further claim that the motion pictures were not a secret to the general public,
the Peniston court stated: "We think the trial judge correctly focused on the true issues in
the case, whether [the victim's] husband and parents knew about the pictures and whether
the threat of disclosure to them put [her] in fear." (Id. at p. 723.)12
As in Peniston, where dissemination of the victim's images to the general public
via arcades or other means did not render the evidence insufficient to establish a secret
for purposes of extortion because the victim's family had not seen them, here, the fact the
victims' photographs were placed on the Internet and exposed to the public did not mean
that some other "particular part [of the public]" (People v. Peniston, supra, 242
Cal.App.2d at p. 722)—namely, family members, classmates, coworkers, or employers
who might be interested—had seen them. The People presented direct testimony from
some of the six victims concerning their fear that others would see their images if they
did not pay to have them removed, as well as evidence as to all of the victims that they
quickly paid for removal, from which the jury could readily infer the victims were fearful
of continued exposure. The jury could reasonably conclude the photographs therefore
remained a secret to persons who had not viewed the Web site, and reasonably found it

12
The appellate court also rejected the defendant's contention that there was no
evidence of a threat for purposes of his conviction for attempted extortion. It observed
that the People had charged him with extortion for his demand for money in November
1963 and attempted extortion in February 1964, and held the latter threat was implied
when the defendant told the victim he would return the pictures for $1000: "Although
there was no testimony of a direct threat in February, we think both parties understood
the consequence of nonpayment to be disclosure to husband and parents. The threat was
reasonably inferable from the circumstances." (People v. Peniston, supra, 242
Cal.App.2d at pp. 723-724.)
40

 was the victims' fear that others would see the content, causing further humiliation or
damage to their reputation, that compelled them to pay Bollaert's fee.
Bollaert relies on Cross v. Cooper, supra, 197 Cal.App.4th 357 for the proposition
that "information publicly available on Web sites 'to anyone interested in knowing about
it' " does not constitute a secret within the meaning of the extortion statute. But Cross
was decided in the context of an anti-SLAPP (Code Civ. Proc., § 425.16) motion, where
conclusive evidence of illegal conduct—conduct that is illegal as a matter of law—
precludes anti-SLAPP relief. (Id. at p. 384.) The court there merely held that the record
in that case did not establish as a matter of law that the location of a registered sex
offender was a secret for purposes of the crime of extortion, partly based on evidence that
the information was publicly available on a Web site; plaintiffs' declarations showed she
and her neighbors knew of the information; and the plaintiff—who alleged the defendants
had interfered with a residential home sale—had conceded she had a duty to disclose to
any potential buyer, renter or potential lessee the existence of the Web site containing
information about registered sex offenders living in the area. (Id. at pp. 387-388.) Cross
in fact expressly adopted the principle stated in Peniston and Lavine that a secret may
either be unknown to the general public or "to some particular part thereof which might
be interested in obtaining knowledge of the secret." (Id. at p. 387, quoting Philippine
Export & Foreign Loan Guarantee Corp v. Chuidian, supra, 218 Cal.App.3d at p. 1078
and citing Peniston, supra, 242 Cal.App.2d at p. 430 & People v. Lavine, supra, 115
Cal.App. at p. 295.) Cross does not assist Bollaert.

41

 D. Bollaert Was Not Engaged in a Legitimate Service or Business Practice
We further reject Bollaert's claim that he was engaged in a lawful or legitimate
business practice and not extortionate conduct. His claim is based on the factual premise,
which we have rejected ante, that he acted merely as an interactive computer service and
thus was not legally required to remove the offensive content, as well as on the Ninth
Circuit's decision in Levitt, supra, 765 F.3d 1123, which he claims discussed "extortion
as it relates to Internet service providers [sic]."
In Levitt, the plaintiff small businesses sued Yelp! Inc. (Yelp), an online forum for
persons to express opinions about businesses, claiming it extorted or attempted to extort
advertising payments from them including by manipulating or removing positive usergenerated reviews about their business. (Levitt, supra, 765 F.3d at pp. 1126, 1134.) They
brought claims for violation of California's Unfair Competition Law (UCL), civil
extortion and attempted civil extortion, on the theory Yelp wrongfully threatened them
with economic loss. (Id. at p. 1127.) Pointing out both the Hobbs Act (18 U.S.C.
§ 1951(b)(2)) and California law require the obtaining of property with consent induced
by a wrongful use of force or fear, the Ninth Circuit held the plaintiffs failed to state a
claim. It applied a "claim-of-right" defense under which a defendant cannot commit
extortion by threatening economic harm to induce a person to pay for a "legitimate
service." (Id. at pp. 1130 [threat of economic harm made to obtain property from another
is not generally considered wrongful where the alleged extortioner has a legitimate claim
to the property obtained through such threats], 1133 ["to state a claim of economic
extortion under both federal and California law, a litigant must demonstrate either that he
42

 had a pre-existing right to be free from the threatened harm, or that the defendant had no
right to seek payment for the service offered"].) The court had previously held, for
example, that a mobile home park operator does not commit extortion by telling tenants
who refused to sign leases that they would have to pay their own utility bills and be
subject to future rent increases. (Id. at p. 1132, citing Rothman v. Vedder Park
Management (9th Cir. 1990) 912 F.2d 315.) "[T]he tenants did not allege that the park
owner 'may not raise the rent of those who have not signed the lease or that it may not
refuse to pay their utility bills,' " and thus they had no "pre-existing right to be free of
such threats." (Levitt, supra, 765 F.3d at p. 1132.) According to the Ninth Circuit, "[a]ny
less stringent standard would transform a wide variety of legally acceptable business
dealings into extortion." (Id. at p. 1133.) Thus, in Levitt, the court held in part that the
plaintiffs did not allege facts showing Yelp intended to induce payment through an
implicit threat of economic harm or the exploitation of economic fears. (Ibid.) Plaintiff
"had no pre-existing right to have positive reviews appear on Yelp's website"; she did not
allege a "contractual right pursuant to which Yelp must publish positive review, nor does
any law require Yelp to publish them." (Ibid., fn. omitted.)
Bollaert mischaracterizes Levitt, which we do not follow in any event. Contrary to
Bollaert's suggestion, Levitt's holding did not turn on Yelp's status as an interactive
computer service or CDA immunity, which the Ninth Circuit expressly did not address.
(Levitt, supra, 765 F.3d at p. 1129.) The question was whether Yelp's alleged actions
were extortionate and thus unlawful under California's UCL. (Id. at p. 1130.) Even

43

 assuming arguendo Levitt is consistent with California law,13 as Levitt itself pointed out,
California does not recognize a claim-of-right defense where a defendant does not
threaten "economic loss" or make a threat that involves " 'the exploitation of [economic]
fears . . . .' " (Levitt, supra, 765 F.3d at p. 1133 & fn. 3 [threat to accuse a person of a
crime not subject to a claim-of-right defense].) Here, Bollaert's threat was continued
exposure of private personal information resulting in a violation of the victims' privacy
rights and emotional distress, not a threat to cause them economic harm. Though some
victims expressed fear of losing their jobs, Bollaert's threat was not directed to the
victims' workplaces or in any way related to their continued employment. Finally,
Bollaert's conduct is nothing like the legitimate albeit "hard bargaining" business tactics
discussed in Levitt. Bollaert, who did not merely decline to remove harmful content but
solicited and developed the unlawful content, did not have a lawful right to collect a fee
to remove the victims' personal information. And unlike the plaintiffs in Levitt who
did not have a preexisting right to have positive reviews appear on Yelp's Web site (id.
at p. 1133), the plaintiff victims here had a preexisting right—under privacy law—to be
free of Bollaert's threatened harm and not have their personal identifying information
solicited and placed on UGotPosted.com without their consent.

13
The California Supreme Court has pointed out that extortion may criminalize a
" 'perfectly legal' " threat. (Flatley v. Mauro, supra, 39 Cal.4th at p. 326; see also People
v. Beggs (1918) 178 Cal. 79, 84 [belief that the victim owes a debt is not a defense to the
crime of extortion; "[i]t is the means employed [to obtain the property of another] which
the law denounces"].)
44

 III. Instruction with CACI Nos. 1800 and 1801
Bollaert contends the trial court erred when it instructed the jury with CACI No.
1800 pertaining to the tort of invasion of privacy by intrusion into private affairs, and
CACI No. 1801 regarding an invasion of privacy by public disclosure of private facts.
He argues that because these instructions are based on civil liability and actions arising
from civil law obligations, the court "effectively elevated these alleged possible civil
wrongs into an unlawful (criminal) purpose to become crucial elements of . . . section
653m[, subdivision] (a)," thereby permitting the jury to consider a lower standard than
the beyond-a-reasonable-doubt standard applicable to a criminal offense. He maintains
the error was prejudicial because there is no way to determine whether the jury relied on
either theory for its convictions on the identity theft counts.
The People respond that Bollaert invited any error regarding these instructions as
his counsel requested they be given for a tactical reason. In reply, Bollaert does not
challenge the People's position other than to point out that his counsel requested the
CACI instruction in response to the court's expressed intention to give some type of civil
jury instruction as to the violation of section 653m.
We agree Bollaert's instructional challenge is barred because he invited any
assumed error. "Under the invited error doctrine, a defendant cannot complain that the
court erred in giving an instruction that he requested. [Citation.] The invited error
doctrine applies when the defense has made a ' " ' "conscious and deliberate tactical
choice" ' " ' in asking for the instruction in question." (People v. Merriman (2014) 60
Cal.4th 1, 104; see also People v. Scott (2015) 61 Cal.4th 363, 400 ["Invited error . . . will
45

 only be found if counsel expresses a deliberate tactical purpose in resisting or acceding to
the complained-of instruction"].) The rule is designed to prevent a defendant from
gaining reversal on appeal because of an error he or she intentionally caused the trial
court to make. (People v. Coffman (2004) 34 Cal.4th 1, 49.) It will not apply if counsel
acted out of ignorance or mistake. (Ibid.) If defense counsel takes affirmative action, a
clearly implied tactical purpose will suffice to invoke the doctrine. (Ibid.)
The record shows that during the jury instruction conference, Bollaert's counsel
objected to the People's proposed use of BAJI Nos. 7.20 and 7.21 respectively on the
elements of intrusion into private affairs and public disclosure of private facts, but she
had submitted the CACI jury instructions and asked the court to use CACI No. 1800 in
lieu of BAJI No. 7.20, and CACI No. 1801 in lieu of BAJI No. 7.21. She did so for an
expressly tactical purpose, pointing out that the instructions were similar except that
CACI No. 1800 contained one element not present in the BAJI instruction: "[W]ith
respect to intrusion into private affairs, it contains an element that I wish to argue as the
first prong that is not present in the BAJI, which is that the victim had a reasonable
expectation of privacy." The People unsuccessfully objected to the use of CACI No.
1800 as overbroad and not in accord with the principles expressed in Sanders, supra, 20
Cal.4th 909. As for CACI No. 1801, Bollaert's counsel explained that for purposes of
appellate review, she wanted to be consistent and have the most up-to-date version of the
instruction. The People expressed no objection to the use of CACI No. 1801. Because
Bollaert made a tactical choice to request the CACI instructions, he cannot now be heard
to challenge them.
46

 In any event, our agreement with In re Rolando S., supra, 197 Cal.App.4th 936
disposes of the premise of Bollaert's challenge, which is that civil wrongs cannot be
equated with a "criminal wrong—an unlawful purpose." Rolando S. explained in a
reasoned analysis that "unlawful conduct includes acts prohibited by the common law or
nonpenal statutes, such as intentional civil torts." (Rolando S., at p. 946.)
Bollaert's instructional challenge similarly fails on grounds he has not
demonstrated that the instructions as a whole were misleading or improper, or that the
instructions, the People, or the court somehow suggested or informed the jury that a
lesser standard applied. Our role is to determine the correctness of the jury instructions
" 'from the entire charge of the court, not from a consideration of parts of an instruction
or from a particular instruction.' " (People v. Castillo (1997) 16 Cal.4th 1009, 1016.)
Here, the trial court instructed the jury accordingly: that they "should not single out or
place added emphasis on a particular instruction" but must "consider the instructions as a
whole, a complete statement of what the Court considers to be the applicable law." It
instructed the jury as to the presumption of innocence and its requirement that the People
prove "the truth of what they have alleged" beyond a reasonable doubt. It instructed the
jury that the People were required to prove each of the elements of the crime of
unauthorized use of personal identifying information beyond a reasonable doubt
including the element that Bollaert "willfully used that information for an unlawful
purpose"; that Bollaert was being prosecuted for that crime under the People's three
separate theories, that "[e]ach of these is a separate theory, legal theory, as to how
[Bollaert] committed the crime"; and "[e]ach of them has its own elements, its own
47

 requirements which must be proved beyond a reasonable doubt." Under the
circumstances, the jury could not have understood from the instructions given that they
were to apply any lesser standard than proof beyond a reasonable doubt to the element of
use of personal identifying information for an unlawful purpose, and the various elements
of both invasion of privacy theories. Bollaert has not demonstrated instructional error.
DISPOSITION
The judgment is affirmed.
O'ROURKE, J.
WE CONCUR:

McCONNELL, P. J.

HUFFMAN, J.

48