Cox v. Sony Music: When a Service Provider Is Liable for Users’ Copyright Infringement
A business can know that customers are misusing its service without automatically becoming liable for their copyright infringement. In Cox Communications, Inc. v. Sony Music Entertainment, decided March 25, 2026, the U.S. Supreme Court drew that line sharply: contributory copyright liability requires proof that the provider intended its service to be used for infringement. Knowledge of infringement, combined with a failure to terminate service, was not enough.
The decision reversed a judgment that had exposed Cox to a $1 billion statutory-damages award. It matters well beyond residential internet access. Online platforms, marketplaces, software companies, hosting providers, employers, universities, and other businesses routinely receive complaints that users or customers have copied protected material. After Cox, the legal question is not simply whether the business knew about infringement. The focus is whether the service provider induced infringement or supplied a service tailored to infringement.
How a billion-dollar copyright case reached the Supreme Court
Cox provided internet service to approximately six million subscribers. Its customer agreements prohibited infringement, and Cox used warnings, temporary suspensions, and account terminations as part of its response process. Sony Music and other copyright owners hired MarkMonitor to identify unauthorized uploading and downloading of recorded music and trace that activity to IP addresses.
During the roughly two-year period at issue, MarkMonitor sent Cox 163,148 notices identifying subscriber IP addresses associated with alleged infringement. Sony sued Cox rather than the individual users, asserting that Cox was secondarily liable because it continued supplying internet service to subscribers connected to repeated infringement notices.
A jury found Cox liable for contributory and vicarious infringement, found the infringement willful, and awarded $1 billion in statutory damages. The Fourth Circuit rejected the vicarious-liability theory but upheld contributory liability, reasoning that supplying a service with knowledge that recipients would use it to infringe could be enough.
The Supreme Court granted review only on contributory liability. It reversed, holding that the Fourth Circuit’s knowledge-based theory went beyond the forms of secondary liability recognized in the Court’s copyright precedents.
Direct, contributory, and vicarious infringement are different claims
Section 501 of the Copyright Act makes a person who violates a copyright owner’s exclusive rights an infringer. That is direct infringement: the defendant itself copied, distributed, displayed, performed, or otherwise invaded an exclusive right without authorization or a valid defense.
Secondary liability concerns responsibility for someone else’s direct infringement. The Copyright Act does not expressly create a general secondary-liability provision, but Supreme Court precedent recognizes contributory and vicarious copyright liability.
Contributory liability asks whether the defendant is sufficiently responsible for encouraging or enabling another person’s infringement. Vicarious liability is analytically different and generally concerns the right and ability to supervise infringing conduct together with a direct financial interest in it. Because the Supreme Court reviewed only contributory liability in Cox, businesses should not read the decision as eliminating other properly supported claims.
The distinction also affects litigation strategy. Tucker Law’s copyright infringement practice evaluates the identity of the direct actor, ownership of the asserted rights, the intermediary’s conduct, and available defenses before treating every participant as the same kind of defendant.
The Supreme Court required intent—not notice alone
The Court held that a service provider is contributorily liable only if it intended the service to be used for infringement. The majority identified two ways to establish that intent under its precedents.
First, a provider may induce infringement through affirmative acts. In Metro-Goldwyn-Mayer Studios Inc. v. Grokster, Ltd., file-sharing services marketed and promoted their software as a tool for obtaining copyrighted works. Product messaging, instructions, targeted advertising, internal communications, and a business model built around infringing use can supply evidence of inducement.
Second, a provider may offer a product or service tailored to infringement—one that is not capable of substantial or commercially significant noninfringing uses. This principle traces to Sony Corp. of America v. Universal City Studios, Inc., where the Betamax recorder had substantial lawful uses even though customers could also use it to make unauthorized copies.
Cox fit neither category. It did not promote infringement, and its internet-access service plainly supported extensive lawful activity. The Court also noted that Cox discouraged infringement through warnings, suspensions, and terminations. Continuing to provide a general-purpose service after receiving notices did not itself establish the required intent.
Why an IP address did not identify the infringer
The Court’s analysis was grounded in the limits of the information Cox possessed. An internet provider can associate an IP address with a subscriber account, but one connection may serve a family, coffee shop, dormitory, hospital, military base, business, or downstream internet provider. A notice identifying an IP address does not necessarily reveal which person used the connection or whether that person will infringe again.
That evidentiary gap helped defeat the inference that Cox intended to facilitate particular infringements. The decision does not say that specific evidence can never establish intent. It says that generalized knowledge that some users will misuse a broadly lawful service is not enough by itself.
For copyright owners, this changes the proof analysis. Repeated notices may remain relevant, but notice volume alone does not establish inducement. Evidence that a provider recruited infringing users, promoted unauthorized uses, designed features for infringement, gave infringers special assistance, or operated a service without substantial lawful uses is more closely tied to the intent standard the Court adopted.
The ruling does not erase the DMCA safe harbors
One of the most important parts of Cox concerns the relationship between secondary liability and the Digital Millennium Copyright Act. Under 17 U.S.C. § 512, qualifying service providers may receive limitations on monetary and injunctive relief if they satisfy the applicable safe-harbor requirements. Those requirements can include a designated agent and notice process, expeditious removal or disabling of access in specified circumstances, and adoption and reasonable implementation of a policy for terminating repeat infringers in appropriate circumstances.
Sony argued that the repeat-infringer requirement would have little effect if supplying service to known infringers did not itself create liability. The Supreme Court disagreed. It characterized the DMCA as creating defenses from liability, not a new source of liability. Section 512(l) expressly provides that failure to qualify for a safe harbor does not count against a service provider’s separate argument that its conduct was not infringing.
That means two questions must remain separate:
- Is the provider liable under substantive copyright law? After Cox, contributory liability requires intent shown through inducement or a service tailored to infringement.
- If liability could otherwise exist, does a DMCA safe harbor limit the available remedies? That depends on the provider, activity, notices, policies, and compliance with the applicable subsection of Section 512.
A business should not abandon its notice-and-takedown or repeat-infringer procedures simply because knowledge alone is insufficient. Safe-harbor eligibility remains valuable, and a disciplined response process can also generate evidence that the company did not promote or intend infringement. Tucker Law’s DMCA takedown practice addresses notices, counter-notices, and platform procedures in that separate statutory framework.
What online businesses should document after Cox
The practical value of Cox lies in the record a business creates before litigation begins. Terms of use should prohibit infringement in language consistent with actual operations. The company should identify who receives notices, how complaints are validated and tracked, when content is disabled, and when accounts are warned, suspended, or terminated. A written policy that is ignored in practice may create problems even if the policy looks sound on paper.
Product design and marketing deserve equal attention. A general-purpose service with substantial lawful uses occupies a different position from a tool designed, promoted, or optimized for unauthorized copying. Advertising claims, tutorials, feature requests, moderation decisions, sales presentations, and internal messages can become evidence of the company’s objective.
Businesses should also distinguish a copyright notice from proof. Notices may contain errors, refer to shared connections, target authorized or fair uses, or fail to identify the content adequately. A documented review process helps the business respond consistently without assuming that every accusation conclusively proves infringement. When a claim is disputed, Tucker Law’s copyright infringement defense practice evaluates ownership, copying, licenses, exceptions, and evidentiary weaknesses.
What copyright owners should investigate
Copyright owners pursuing an intermediary should begin with direct infringement: identify protected works, registrations, exclusive rights, infringing acts, and the people or accounts responsible. Registration timing can affect available remedies, so the owner’s copyright registration record should be reviewed early.
The secondary-liability investigation should then focus on intent evidence rather than treating unanswered notices as the entire case. Relevant evidence may include how the service was marketed, whether its features were adapted for unlawful sharing, whether employees provided special help to infringers, whether the business depended on infringing demand, and whether substantial lawful uses genuinely existed.
The Supreme Court’s ruling strengthens the distinction between indifference and intent, but it does not immunize a company that actively builds or promotes infringement. Nor does it prevent claims against the people who directly copy or distribute protected works. The forum, defendants, remedies, and evidence should be selected together. Tucker Law’s copyright litigation practice helps rights owners and accused businesses evaluate those choices.
Cox narrows one path to liability, not copyright enforcement itself
Cox v. Sony Music rejects contributory liability based only on knowledge that customers will misuse a service and a failure to prevent that misuse. The controlling inquiry is intent, established through inducement or a service tailored to infringement. At the same time, direct liability, vicarious liability, DMCA procedures, contractual remedies, and claims supported by stronger intent evidence remain distinct parts of the analysis.
If your business operates a platform or service that has received copyright complaints—or if your protected work is being distributed through an intermediary—contact Tucker Law to evaluate the notices, policies, product design, registrations, and evidence before choosing an enforcement or response strategy.
This article provides general information and is not legal advice. Copyright liability and DMCA protection depend on the specific service, conduct, notices, policies, works, and evidence involved.
