W. Drew Kastner

Principal

Intellectual Property

Knowing Isn’t Enough: The Supreme Court Redefines ISP Liability for Piracy

April 27, 2026

By W. Drew Kastner, Edward Baxter, Stephenie Wingyuen Yeung 楊穎苑, and LuAnne Morrow

Knowing Isn’t Enough: The Supreme Court Redefines ISP Liability for Piracy

When users pirate music, movies, or other creative works online, the internet service provider (“ISP”) supplying their connection may know more than you might think. Companies like Cox Communications receive thousands of automated notices identifying exactly which subscriber accounts are associated with illegal downloading — in Cox’s case, such notices accrued over a period of two years. In Cox Communications v. Sony Music Entertainment, decided March 25, 2026, the Supreme Court confronted a deceptively simple question: if an ISP knows a subscriber is using its service to steal copyrighted content and keeps providing that service anyway, is the ISP itself liable? A jury of the lower court said “yes,” issuing relief to the tune of roughly $1 billion. The Supreme Court has now unanimously reversed the jury’s decision, although the Justices aren’t in agreement with respect to their rationale and extent.

Writing for the majority, Justice Thomas held that an ISP can only be liable for contributing to its users' infringement if it intended that the provided service be used for in­fringement, particularly in two narrow circumstances: 1) if the ISP actively encouraged the illegal activity, or 2) if the service itself was essentially designed for piracy. The Court found that Cox never promoted piracy and, in fact, issued warnings to and suspended infringing accounts. The majority made clear that simply knowing about infringement and failing to cut off service to every potential infringing account (and, indeed, the record suggests that Cox did not know with total particularity which accounts engaged in infringement) is not enough. Justice Sotomayor, concurring, agreed Cox was not liable but warned that the majority had gone too far in strictly defining only two theories of “intent.” She argued that the ruling diminishes the DMCA safe harbor, which was specifically designed to give ISPs an incentive to crack down on repeat infringers in exchange for legal protection. If ISPs can't be held liable regardless of the very strictly defined theories of intent, that no longer has material effect. Justice Jackson joined Justice Sotomayor in her concurrence.

For technology providers, implementing procedures to warn against infringement, and even taking action such as suspending service, may successfully ward off secondary liability. For copyright holders, particularly in the music, film, and entertainment industries, this decision has the potential to present a significant setback for IP enforcement, as avenues for pressuring ISPs to police their networks have been substantially narrowed. Going forward, rights holders may need to focus enforcement efforts more directly on individual infringers or on platforms that actively facilitate piracy, rather than on the companies providing the underlying internet connections. While the decision is a major win for ISPs, the Sotomayor concurrence reasoning could signal that future litigation (or future legislation) may set new standards.

  • Biography
  • Publications & News
  • Blog Posts
  • Featured Works

Firm Highlights

  • Events
    The 2026 Economic, Tax, and Accounting Updates
    We are looking forward to the Mid-Atlantic CFO Roundtable's next event on November 13, 2026. This is a program with topics built for Finance Executives. We are extremely fortunate to have three excellent speakers: Dr. Daraius Irani, Vice President of Business and Public Engagement at Towson University; Mike Stankus, Tax Office Managing Principal at BDO; and Daniel Wahlberg, Managing Partner of Acclare Solutions. The economy is rapidly changing with various factors driving it. The November 3rd midterm elections may also have an impact. Our three expert presenters will discuss the ramifications of the election, and the current year updates to GAAP financial reporting and Federal and State income taxes. Please join us for what will surely be an informative and timely discussion. Meet Our Speakers: Daraius Irani, Ph.D. • Towson University Vice President, Business & Public Engagement Dr. Daraius Irani serves as Vice President of Business and Public Engagement at Towson University as well as the chief economist for the Regional Economic Studies Institute (RESI) at Towson University, a policy group providing economic, fiscal impact, and policy analysis to public and private entities.  Dr. Irani is often called upon to provide economic presentations to organizations across Maryland. He has appeared on numerous television programs and in local and regional print media. Dr. Irani holds a Ph.D. in economics from University of California, Santa Barbara. Dan Wahlberg • Acclare Solutions Managing Partner With over 28 years of experience, Dan Wahlberg is a recognized leader in audit and assurance for the Mid-Atlantic’s middle market business community. As a licensed CPA in Maryland and Virginia, Dan has led assurance practices at top regional firms, including serving as Baltimore Audit Managing Partner and Assurance Practice Leader at BDO USA in Baltimore and as Partner and member of the Management Committee at Hertzbach & Company P.A which merged into BDO in 2020. His expertise centers on delivering clarity, strategic guidance, and proactive solutions to middle-market businesses across Baltimore and beyond. His entrepreneurial spirit has led him to begin a new CPA firm this year with four other CPAs serving the business community. Dan holds a Bachelor of Science in Accounting from Rutgers University and began his career at PWC in New York. He is also deeply engaged in the community, previously serving as President of ACG Maryland and current Board member and as Audit Committee Member for The Associated: Jewish Federation of Baltimore.  Mike Stankus • BDO USA LLP Tax Office Managing Principal Mike Stankus is the Tax Office Managing Principal for the firm’s Baltimore office. He has more than 16 years of experience providing tax planning and preparation and management advisory services for his clients. Mike focuses on advising privately held businesses and their owners on effective growth and tax strategies. He also performs various engagements for mergers and acquisitions and complex cost accounting projects and projections. In addition, he represents various government contracting clients before the DCAA and assists with FAR compliance. Mike’s areas of concentration include working with government contractors, professional service firms, construction companies, and homebuilders.
  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.