Morning Overview

Supreme Court says ISP not liable for users’ bootleg music downloads

The U.S. Supreme Court sided with Cox Communications in a closely watched copyright dispute, ruling that the internet service provider cannot be held liable for its subscribers’ unauthorized music downloads. The decision in Cox Communications, Inc. v. Sony Music Entertainment resolves a question that had divided lower courts for years: whether ISPs must actively police their networks for piracy or risk billions in damages. The ruling carries direct consequences for every major broadband provider in the country and reshapes the legal calculus for music labels seeking to combat online file-sharing.

What the Court Decided in No. 24-171

The case, formally docketed as case No. 24-171, pitted Cox Communications against Sony Music Entertainment and a coalition of major record labels. Sony had argued that Cox profited from subscribers who repeatedly downloaded copyrighted songs through peer-to-peer networks, and that the ISP’s failure to terminate those accounts amounted to contributory and vicarious copyright infringement. Cox countered that it had no legal duty to act as an enforcement arm for the music industry.

The Supreme Court granted certiorari on June 30, 2025, and scheduled oral arguments for its October 2025 term. The justices ultimately agreed with Cox’s core position: that an ISP’s decision not to disconnect paying customers, even those flagged for repeated infringement, does not by itself create liability under federal copyright law. The ruling draws a firm boundary between the obligations of content owners and those of the companies that simply transmit data.

Writing for the majority, the Court held that continued provision of a generic internet connection, without more, does not amount to the kind of “material contribution” necessary for secondary liability. The opinion emphasized that copyright law has traditionally targeted those who directly copy, distribute, or actively facilitate infringement, not those who merely supply a communications pipeline. While the Court acknowledged that Cox had been aware of widespread infringement on its network, it concluded that awareness plus inaction does not transform an access provider into a co-infringer.

A concurring opinion agreed with the outcome but stressed that different facts could support liability, such as an ISP that markets itself as a haven for piracy or technically optimizes its network specifically to promote infringing traffic. A partial dissent argued that Cox’s pattern of ignoring infringement notices effectively encouraged repeat violators and should have triggered responsibility, underscoring how sharply the justices disagreed over the proper role of intermediaries in the digital ecosystem.

Years of Lower-Court Conflict

The path to the Supreme Court was long and contentious. The case had a significant history in the lower courts, where judges reached conflicting conclusions about how far ISP responsibility extends. A jury initially awarded Sony and its co-plaintiffs a massive damages verdict, finding that Cox had turned a blind eye to thousands of infringement notices. The Fourth Circuit Court of Appeals then weighed in with a decision that largely favored the music labels, holding that Cox had materially contributed to infringement by maintaining service for known violators.

That Fourth Circuit ruling created a split with other federal appellate courts that had taken a narrower view of ISP liability. Some circuits held that merely providing internet access, without direct involvement in selecting or distributing infringing content, fell short of the legal standard for secondary copyright infringement. The disagreement left broadband providers across different regions facing contradictory legal obligations, a situation the Supreme Court stepped in to resolve.

In the years leading up to the high court’s review, district judges wrestled with practical questions that the statute did not clearly answer. How many notices must an ISP receive before it is deemed to “know” about infringement? Does a failure to disconnect a subscriber amount to encouragement, or simply a business decision about customer retention? The resulting patchwork of rulings made it difficult for providers to design nationwide compliance programs, since a policy sufficient in one circuit might be deemed inadequate in another.

Safe Harbor and the DMCA’s Limits

Central to the dispute was the Digital Millennium Copyright Act’s safe harbor provision, which shields service providers from damages if they meet certain conditions, including adopting a policy for terminating repeat infringers. Sony argued that Cox had failed to meaningfully enforce such a policy and therefore forfeited its safe harbor protection. Cox maintained that it had a termination policy on the books and that the DMCA did not require any specific enforcement methodology.

The Supreme Court’s analysis focused on what “material contribution” to infringement actually means when the alleged contribution is simply continuing to provide a commercial internet connection. The justices distinguished between active participation in piracy and the passive transmission of data that happens to include infringing files. By drawing that line, the Court effectively told copyright holders that the DMCA’s notice-and-takedown framework, not blanket ISP liability, is the proper mechanism for addressing online piracy.

The majority also declined to read unwritten obligations into the DMCA. While the statute requires a “reasonably implemented” repeat-infringer policy, the Court rejected the idea that this language compels ISPs to adopt any particular threshold for disconnection or to accept rightsholders’ automated accusations at face value. Instead, the opinion suggested that providers retain flexibility to use warnings, bandwidth throttling, or other graduated responses, so long as they are not deliberately shielding obvious bad actors.

This distinction matters for ordinary internet users. Had the Court ruled the other way, ISPs would have faced strong financial incentives to aggressively monitor subscriber activity and cut off service based on unverified infringement allegations. Privacy advocates had warned that such an outcome could lead to widespread surveillance of internet traffic and wrongful disconnections of innocent customers. The ruling, by contrast, reinforces a model in which rights holders bear the burden of targeting specific infringing files and platforms rather than deputizing carriers as copyright police.

What Changes for ISPs and Subscribers

For broadband companies like Cox, Comcast, Charter, and AT&T, the decision removes a legal threat that could have exposed them to damages running into the billions. Under the Fourth Circuit’s earlier reasoning, any ISP that received infringement notices and failed to terminate the accused subscriber risked being treated as a co-infringer. That standard would have forced providers to choose between alienating paying customers and facing ruinous litigation from content owners.

The ruling does not give ISPs a blank check to ignore piracy entirely. The DMCA still requires service providers to maintain a repeat-infringer policy as a condition of safe harbor eligibility. What the Court clarified is that the existence of such a policy, combined with good-faith efforts to address complaints, is sufficient. ISPs are not required to act as judge and jury over their own subscribers based solely on allegations from rights holders.

For subscribers, the practical effect is that internet service is less likely to be abruptly terminated based on automated infringement notices, which are notoriously prone to errors. Automated detection systems used by music labels have in the past flagged legitimate uses of copyrighted material, including licensed streams and fair-use clips. A liability regime that punished ISPs for not acting on every notice would have amplified the harm caused by those false positives, particularly for households that rely on broadband for work, education, and telehealth.

The decision may also influence how ISPs design customer-facing policies. Rather than quietly severing connections, providers are more likely to continue using escalating warning systems, educational notices, and, in extreme cases, targeted account actions. These approaches aim to curb infringement without turning access to the modern internet into a privilege that can be revoked based on untested accusations.

Music Industry Faces a Strategic Setback

Sony Music Entertainment and its fellow plaintiffs now confront a narrower set of legal tools for fighting online piracy. The strategy of targeting ISPs was appealing because broadband providers have deep pockets and direct relationships with the individuals doing the downloading. Going after individual file-sharers, the approach the Recording Industry Association of America pursued aggressively in the mid-2000s, proved expensive, unpopular, and only marginally effective.

With ISP liability off the table as a practical enforcement lever, the music industry will likely increase pressure on Congress to update the DMCA or create new statutory obligations for service providers. Labels may also redirect resources toward technical measures, such as content-identification tools embedded in peer-to-peer protocols, or pursue more aggressive litigation against the platforms and software makers that facilitate file-sharing directly. The Court’s opinion, by emphasizing the distinction between passive carriers and active facilitators, implicitly points rights holders toward those intermediaries that exercise more control over how content is shared.

One assumption worth questioning in the prevailing coverage is that this ruling will trigger a surge in piracy. The economics of music consumption have shifted dramatically since the early file-sharing era. Subscription streaming services now offer legal access to vast catalogs at low monthly prices, reducing the incentive to download bootleg files. The decision removes a legal stick, but it does so in a marketplace where many consumers already see little benefit in hunting down unauthorized copies. For the music industry, the more pressing challenge may be adapting business models and licensing practices to a streaming-dominated landscape, rather than seeking to reassign policing duties to the companies that keep the internet’s lights on.

More from Morning Overview

*This article was researched with the help of AI, with human editors creating the final content.