Marquee Background
Marquee Background

Offit Kurman Blogs

Intellectual Property

Knowing Isn’t Enough: The Supreme Court Redefines ISP Liability for Piracy

April 27, 2026

By W. Drew Kastner, Edward Baxter, Stephenie Wingyuen Yeung 楊穎苑, and LuAnne Morrow

Knowing Isn’t Enough: The Supreme Court Redefines ISP Liability for Piracy

When users pirate music, movies, or other creative works online, the internet service provider (“ISP”) supplying their connection may know more than you might think. Companies like Cox Communications receive thousands of automated notices identifying exactly which subscriber accounts are associated with illegal downloading — in Cox’s case, such notices accrued over a period of two years. In Cox Communications v. Sony Music Entertainment, decided March 25, 2026, the Supreme Court confronted a deceptively simple question: if an ISP knows a subscriber is using its service to steal copyrighted content and keeps providing that service anyway, is the ISP itself liable? A jury of the lower court said “yes,” issuing relief to the tune of roughly $1 billion. The Supreme Court has now unanimously reversed the jury’s decision, although the Justices aren’t in agreement with respect to their rationale and extent.

Writing for the majority, Justice Thomas held that an ISP can only be liable for contributing to its users' infringement if it intended that the provided service be used for in­fringement, particularly in two narrow circumstances: 1) if the ISP actively encouraged the illegal activity, or 2) if the service itself was essentially designed for piracy. The Court found that Cox never promoted piracy and, in fact, issued warnings to and suspended infringing accounts. The majority made clear that simply knowing about infringement and failing to cut off service to every potential infringing account (and, indeed, the record suggests that Cox did not know with total particularity which accounts engaged in infringement) is not enough. Justice Sotomayor, concurring, agreed Cox was not liable but warned that the majority had gone too far in strictly defining only two theories of “intent.” She argued that the ruling diminishes the DMCA safe harbor, which was specifically designed to give ISPs an incentive to crack down on repeat infringers in exchange for legal protection. If ISPs can't be held liable regardless of the very strictly defined theories of intent, that no longer has material effect. Justice Jackson joined Justice Sotomayor in her concurrence.

For technology providers, implementing procedures to warn against infringement, and even taking action such as suspending service, may successfully ward off secondary liability. For copyright holders, particularly in the music, film, and entertainment industries, this decision has the potential to present a significant setback for IP enforcement, as avenues for pressuring ISPs to police their networks have been substantially narrowed. Going forward, rights holders may need to focus enforcement efforts more directly on individual infringers or on platforms that actively facilitate piracy, rather than on the companies providing the underlying internet connections. While the decision is a major win for ISPs, the Sotomayor concurrence reasoning could signal that future litigation (or future legislation) may set new standards.

Firm Highlights

  • Blog Posts
    Law, Love, and Life's Battles: Facing Breast Cancer
      What happens to a marriage and a family when a breast cancer diagnosis changes everything? In this episode of Love Ends, Law Begins, hosts Fara Rodriguez and Stephanie Lehman have a deeply personal conversation about breast cancer, marriage, family, and the challenges that can come with a serious illness. This episode is especially meaningful for Fara, who shares her own recent breast cancer diagnosis and journey. She opens up about discovering a lump, receiving her diagnosis, undergoing a double mastectomy and subsequent treatments, and navigating the emotional impact of cancer while continuing to work and care for her family. Fara and Stephanie discuss how a cancer diagnosis can affect a marriage in unexpected ways—from changing family roles and creating new caregiving responsibilities to putting pressure on finances, health insurance, and household responsibilities. They explore how illness can either bring couples closer together or create additional challenges, particularly when one spouse becomes the primary caregiver or when the family is dealing with fear and uncertainty. The conversation also addresses the unique challenges of parenting during an illness, including how to talk to children about a cancer diagnosis and how divorced parents may need to adjust parenting schedules and responsibilities when one parent becomes sick. From navigating medical expenses and insurance coverage to balancing work, parenting, caregiving, and intimacy, Fara and Stephanie offer a candid look at the ways illness can reshape relationships and family dynamics. In recognition of Breast Cancer Awareness Month, this episode provides an honest and personal conversation about facing cancer while navigating marriage, family, and the many practical challenges that come with a serious diagnosis. In this episode, you'll hear about: • Fara's personal breast cancer diagnosis and journey • How a cancer diagnosis can affect a marriage • The challenges of becoming a caregiver to your spouse • How illness can bring couples closer together—or create new challenges • Talking to children about a parent's cancer diagnosis • How divorced parents can navigate parenting responsibilities when one parent becomes ill • The financial impact of illness and the loss of household income • Health insurance and medical coverage considerations • How medical expenses can create additional financial strain • The importance of support from family, friends, and caregivers • Balancing work, parenting, treatment, and recovery • How illness can affect intimacy and marital dynamics • The importance of supporting children through a parent's illness • Why communication and cooperation matter during a health crisis • Breast Cancer Awareness Month and the importance of mammograms
  • Events
    AIA Tri-State Conference
    Princeton will serve as the backdrop for three days of connection, learning, and design leadership. From keynotes to tours to the Tri-State Design Awards, this year’s conference is designed to go far beyond education sessions. Kick off the week with pre-conference intensives and individual state component Design Award celebrations, followed by three days of education, inspiration, networking, and design excellence at the 2026 AIA Tri-State Conference—featuring pre-conference intensives, three keynote speakers, 25 education sessions, curated tours, an expo, spec academies, and the AIA Tri-State Design Awards—bringing together architects and design professionals from New Jersey, New York, and Pennsylvania to connect, learn, and celebrate the best of the profession. G2. Designing Secure Practices: Cybersecurity, Data Privacy, Contractual Provisions, and Insurance Risks for Architects (4:00 PM - 5:30 PM) Architects and design professionals increasingly rely on cloud platforms, BIM software, and digital tools to manage sensitive data, creating cybersecurity and privacy risks. A single incident can trigger liability claims, regulatory obligations, reputational harm, and insurance challenges. Yet many firms underestimate how contracts, insurance, and internal practices intersect during a breach. This program offers legal and insurance perspectives on cyber risk in architecture, examining liability exposure, risky contract provisions, and mitigation strategies. A cyber insurance expert will explain policy responses, coverage gaps, coordination with professional liability, and best practices for aligning insurance with contractual risk and protecting firms from evolving cyber threats. Learning Objectives: Identify key cybersecurity and data privacy risks faced by architecture firms and explain how these risks can impact professional liability and project outcomes. Analyze common contractual provisions to determine which clauses may increase exposure to cyber incidents and propose strategies to mitigate these risks. Evaluate the scope and limitations of cyber insurance policies, including coordination with professional liability coverage, to determine how a policy would respond in a breach scenario. Develop actionable risk management strategies by integrating legal, contractual, and insurance considerations to protect sensitive client and project data.