Can an Internet Subscriber Be Held Liable for Someone Else’s Copyright Infringement?

Last Updated on July 29, 2026 by Rob Cashman

An IP address may identify an internet connection, but it does not automatically identify the person who committed the alleged copyright infringement. Whether an internet subscriber can be held legally responsible depends on the evidence connecting that individual to the unlawful activity. Subscriber liability does not arise merely because their name appears on the internet account.

Key Takeaway: An IP Address Does Not Automatically Identify the Infringer

Key Points to Understand

✓ An IP address identifies a connection, not a person.
A copyright plaintiff who obtains an IP address may identify the subscriber associated with that internet account, but additional evidence is usually needed to connect a specific individual to the alleged infringement.

✓ Being the internet subscriber does not automatically make you legally responsible.
The fact that an account is registered in your name does not automatically establish that you downloaded or shared copyrighted material.

✓ Shared internet connections create difficulties in connecting the observed unlawful activity to the person who engaged in that activity.
Family members, roommates, guests, employees, customers, and others may use the same internet connection.

✓ Receiving a copyright notice does not mean you have been sued, or that you will be sued.
A subpoena, settlement demand, or infringement notice is part of the legal process, not a final determination of liability.

✓ The facts of each situation matter.
The outcome depends on the evidence, the claims asserted, and the circumstances surrounding the alleged infringement.

The Roadmap of Copyright Infringement Cases: From Observation of an IP Address to Copyright Liability

Almost every copyright infringement lawsuit involving online activities (and many other “online” crimes) follow this same pattern:

1. First, the internet user engages in online activities which is observed by another, usually because that user exposed his IP Address.
   
2. That IP Address (if untampered, obfuscated, or hidden) is assigned to a particular Internet Service Provider (ISP). Most ISPs generally keep records identifying which of its subscribers are assigned which IP address on a particular date and time.
   
3. The ISP records (when requested, usually via an ISP Subpoena) identifies one ISP subscriber — the owner of the internet account who pays the bill.
   
4. Knowing the subscriber’s name is insufficient to conclude that he or she is the one who engaged in the online activities. A plaintiff at this point would need to do an additional investigation to determine who in the household (if anyone) engaged in the online activities.
   
5. Based on the facts of what actually happened, evidence connecting a particular person to the online activity would cause that person to be implicated as the accused Defendant in the lawsuit.
   
6. Facing copyright liability, that accused Defendant will either decide to defend the claims against him in litigation, settle the claims against him to be released from liability, or engage in alternative strategies avoid being named and served, or to avoid a judgement against him.

This is a comprehensive article. I have done “deep-dives” on each of these topics over the years, and I will link to those articles, but I will not re-explain those concepts here.

What you will get from this article is a clear understanding of what situations or circumstances will trigger subscriber liability in a copyright infringement lawsuit.

I will ask the questions for you; I will analyze each of your particular circumstances; and I hope to remove the ambiguities that exist in applying copyright laws to complications and questions that arise from living in a modern world with advanced technology that did not yet exist when the copyright laws were written.

Open Wi-Fi, Shared Internet Connections, and What an IP Address Really Proves

One of the most common questions I hear from people who contact my office after receiving an ISP subpoena or being sued for copyright infringement is deceptively simple:

Sometimes the question involves an adult child or minor child living at home. Sometimes it involves a spouse, roommate, houseguest, or neighbor. Occasionally, someone tells me that years ago they intentionally left their wireless network open without a password. Others wonder whether someone may have inadvertently exposed their wireless network by installing a “smart” device, such as a smart lightbulb, smart plug, wireless extender, or Internet-of-Things (“IoT”) device that created or exposed a secondary wireless network without requiring a password.

Regardless of the specific facts, the underlying concern is usually the same:

The short answer is no.

But the complete answer is considerably more nuanced.

An IP address can be extremely important evidence in a copyright case. In many cases, it is the piece of information that allows a copyright owner to identify the internet subscriber associated with the alleged infringement. However, identifying the subscriber assigned to an IP address is not necessarily the same thing as identifying the individual who actually committed the alleged infringement.

That distinction lies at the heart of many copyright infringement cases involving BitTorrent technology, which is one example of a peer-to-peer (“P2P”) file-sharing protocol operating over a decentralized network architecture.

Unfortunately, much of the information available online discussing “open Wi-Fi” or “unsecured wireless networks” was written more than a decade ago, when consumer networking technology looked very different than it does today. Around 2010, many home wireless routers were installed with little or no security, making unauthorized access a more common topic of discussion. Today, most consumer routers ship with encryption enabled by default and unique factory credentials, making intentionally open residential Wi-Fi networks far less common.

The technology has changed; the legal principles have not.

Copyright plaintiffs continue to identify alleged infringers by first observing an IP address participating in the distribution of copyrighted material. They continue to seek court permission to subpoena Internet Service Providers for subscriber information. And subscribers continue to ask whether being the account holder automatically makes them legally responsible.

The answer depends on much more than the existence of an IP address.

As the United States Court of Appeals for the Ninth Circuit explained in Cobbler Nevada, LLC v. Gonzales, identifying the subscriber assigned to an IP address “solves only part of the puzzle.” An internet subscription identifies the account associated with a particular IP address at a particular time. It does not, standing alone, identify the individual sitting at the keyboard, nor does it establish who actually engaged in the alleged infringement.

That does not mean that IP address evidence lacks value; nor does it mean that subscribers cannot be held liable.

Rather, it means that copyright cases—like virtually every civil lawsuit—depend upon the totality of the evidence. An IP address is often where the investigation begins. It is rarely where the legal analysis ends.

This article explains how courts have approached subscriber identification, what role IP address evidence actually plays in copyright litigation, how modern home wireless networks differ from those of fifteen years ago, and why the legal question is more complicated than many websites suggest.

Whether you are responding to an ISP subpoena, evaluating a settlement demand, or simply trying to understand how copyright plaintiffs identify alleged infringers, understanding the distinction between an internet account and the person using that account is an essential place to begin.

Why This Article Is Different

Most articles discussing open Wi-Fi fall into one of two categories.

Some dramatically overstate the significance of an IP address, suggesting that identifying the subscriber effectively identifies the infringer.

Others go too far in the opposite direction, implying that simply claiming “someone else used my Wi-Fi” is enough to defeat a copyright claim.

Neither approach accurately reflects how copyright litigation works.

This article attempts to avoid both extremes, and rather than advocating slogans (i.e., “an IP Address does not equal a person! (IP ≠ Person)”), it focuses on evidence.

We explain what an IP address can prove, what it cannot prove by itself, and why the legal significance of subscriber information depends on the claims asserted, the governing law, and the additional evidence available in a particular case.

Throughout this article, I also distinguish between technical facts (how internet connections and wireless networks operate), legal principles (what copyright law requires a plaintiff to prove), and practical litigation realities (how these cases are actually investigated and litigated). Although these subjects are related, they are not interchangeable, and confusing one for another often leads to misunderstanding.

Identifying the Infringer

Identifying the Subscriber Is Not the Same as Identifying the Infringer

Copyright plaintiffs generally begin with an anonymous IP address—not a person’s name. Through the use of an ISP subpoena, they may later identify the subscriber associated with that internet connection.

I have discussed both of these topics extensively elsewhere:

• What Does an IP Address Actually Prove?
• Anonymity and ISP Subpoenas

For purposes of this article, however, we will assume that the plaintiff has already identified the subscriber.

That is where the more difficult legal question begins.

Does identifying the subscriber identify the infringer?

The Difference Between Identifying a Subscriber and Proving Legal Responsibility

Once a copyright plaintiff has identified the subscriber associated with an internet connection, the investigation enters a very different phase.

The technical question—which internet connection was allegedly involved?—has largely been answered.

The legal question, however, has not. Instead, the central question becomes:

While this question may sound straightforward, it is often the most important—and sometimes the most contested—issue in the case.

The Difference Between Identification and Attribution

One of the easiest ways to misunderstand a copyright lawsuit is to assume that identifying the internet subscriber automatically identifies the infringer.

It does not.

Thus, in such copyright infringement lawsuits, the purpose of the legal process is not to assume the answer—it is to determine whether the available evidence supports the conclusion that they are the same person.

The “Spinning Car” Analogy (Revisited)

Imagine that a police officer observes a speeding vehicle and records its license plate.

Using the registration records, the officer identifies the vehicle’s registered owner.

This information is highly relevant because it provides an important investigative lead. But it does not necessarily answer who was driving the vehicle at the time:

• The owner may have been driving.
• A spouse may have borrowed the vehicle.
• An adult child may have been using it.
• A friend may have had permission to drive it.
• Or, in unusual circumstances, the vehicle may even have been stolen.

The registration information identifies the owner. Additional evidence is often needed to determine the driver. The same principle applies in many copyright investigations.

The subscriber associated with an internet account is often the logical starting point for determining who used that connection. Whether the subscriber ultimately proves to be the person responsible depends upon the evidence developed during the case.

Readers who would like another way of thinking about this distinction may find my Spinning Car Analogy (and its accompanying YouTube video) helpful, where I explain why identifying the object involved in an event is not necessarily the same as identifying the individual responsible for the conduct.

What Evidence Affects Copyright Liability

Although every case is different, courts generally evaluate the totality of the available evidence rather than relying on a single fact in isolation.

Depending on the circumstances, that evidence may include:

• the subscriber’s relationship to the location where the internet connection was used;
• who had regular access to the network;
• admissions or statements made by the parties;
• the presence or absence of other individuals with authorized access to the connection;
• information obtained during discovery;
• forensic examination of computers, phones, or storage devices, when such evidence exists;
• testimony from other witnesses; and
• any other IP Address evidence tending to make a particular factual conclusion more or less likely.

Notice what is missing from this list.

Instead, courts examine the evidence presented in the particular case.

Cobber Nevada — How We Now See Online Infringement

This distinction is reflected in the Ninth Circuit’s decision in Cobbler Nevada, LLC v. Gonzales.

In that case, the court explained that identifying the subscriber associated with an IP address “solves only part of the puzzle.” That observation has become one of the clearest judicial explanations of why subscriber identification and attribution are separate questions.

The court did not hold that subscriber information is unimportant. To the contrary, subscriber information is often indispensable to the investigation (no investigation can begin without it).

Rather, the court recognized that an internet subscription may be used by more than one person and that additional factual allegations may be necessary to plausibly connect a particular defendant to the alleged infringement.

For that reason, copyright litigation frequently focuses not only on who paid for the internet service, but also on what additional evidence connects a particular individual to the alleged infringing activity.

The Law Does Not Presume The ISP Subscriber is Liable; It Also Does Not Presume The ISP Subscriber is Not Liable Because Someone Else Had Access To Their Internet Account.

One of the reasons these cases can become complicated is that the law generally does not begin with either of two extreme assumptions.

• It does not presume that the internet subscriber must have committed the alleged infringement simply because the subscriber pays for the internet service.
  
• At the same time, it also does not presume that the subscriber avoids liability simply because another person may have had access to the internet connection.

Instead, the legal system asks a different question:

Suppose a subscriber says:

That statement may be relevant to the investigation because it suggests that more than one person could have used the internet connection. But standing alone, it does not answer who actually committed the alleged infringement.

Likewise, if a plaintiff proves only that the defendant subscribed to the internet service, that fact alone may not answer who actually used the connection.

In other words, both sides still have work to do.

• The plaintiff must present evidence supporting the claim that the defendant is legally responsible.
• The defendant may present evidence supporting a different explanation.

The court then evaluates all of the evidence—not just one fact in isolation—to determine whether the plaintiff has met the applicable legal standard. This is why the facts of each case are relevant to the outcome of the case (and the strategy we would employ in the case).

[For a deeper discussion into the applicable legal standard applied in copyright cases filed in the federal courts, you can read this article on “the appropriate mindset of a potential defendant,” skipping to where we discuss the “Burden of Proof” in copyright cases.]

Shared Internet Connections

Multiple People Sharing One Internet Connection

Once a copyright plaintiff has identified the subscriber associated with an internet connection, one of the first practical questions that often arises is whether other people also had access to that connection.

In many households, the answer is yes.

Modern residential internet service is rarely used by just one person. A single internet account may serve an entire family, including spouses, adult children, teenagers, younger children, roommates, relatives, houseguests, and visitors. Smartphones, laptops, desktop computers, gaming consoles, streaming devices, tablets, and other Internet-connected devices may all share the same wireless network.

For that reason alone, the fact that an individual subscribes to an internet account does not necessarily establish that the subscriber personally engaged in every activity occurring over that connection.

At the same time, the mere existence of multiple users does not automatically prevent a copyright plaintiff from proving its case.

As with many questions in civil litigation, the presence of additional users is a fact that may become relevant. It is not, by itself, the legal conclusion.

A Shared Internet Connection Is Not Unusual

Sometimes people contact my office almost apologetically.

They tell me:

They often worry that these facts somehow make their situation unusual.

In reality, they describe how most households function.

The law does not presume that every internet connection has only one user.

Nor does it presume that every person who lives in a household uses the internet in the same way.

The fact that multiple people have legitimate access to a residential internet connection is neither suspicious nor uncommon. It is simply one part of the factual background that may become relevant in determining who, if anyone, engaged in the alleged infringing conduct.

Legal Questions That Naturally Follow from Shared Internet Use

Once it becomes apparent that more than one person used the internet connection, investigators, attorneys, and sometimes courts naturally begin asking additional questions.

For example:

• Who regularly used the computers or devices in the home?
• Did multiple adults have independent access to the network?
• Were there teenagers or adult children living in the household?
• Did roommates share the residence?
• Were guests routinely given the Wi-Fi password?
• Were there separate user accounts on the computers?
• Is there any evidence linking a particular individual or device to the alleged activity?

Notice that none of these questions assumes the answer.

Instead, they seek additional information that may help determine whether the available evidence points toward a particular individual or supports a particular legal theory.

Arguing “Other People Also Have Access” Does Not Absolve Guilt

It is sometimes said that if several people had access to the internet connection, “reasonable doubt” exists. “Reasonable doubt” is not the correct legal standard in a civil copyright case.

Civil cases generally require proof by a preponderance of the evidence, not proof beyond a reasonable doubt. In practical terms, the question is whether the evidence makes a particular conclusion more likely than not.

Accordingly, the fact that several people used the same internet connection does not automatically defeat a copyright claim. So too, the fact that one person paid the internet bill does not automatically establish that the account holder is the infringer.

The relevant inquiry is not only how many people had access, but what the evidence shows about who actually engaged in the alleged conduct or who may otherwise be legally responsible under the applicable law.

Access To An Internet Connection vs. Copyright Liability For What Happened On It

This distinction is worth emphasizing because it appears repeatedly throughout copyright litigation.

• Having access to an internet connection is not the same thing as using it to infringe a copyright, and
• Paying for internet service is not necessarily the same thing as being legally responsible for what happens over that connection.

The law generally requires a closer examination of the facts than either of those assumptions would allow.

As we will see in the following sections, the analysis may differ depending on the relationship between the subscriber and the other users of the network.

• A spouse presents different considerations than an adult child.
  
• A roommate may present different considerations than a houseguest.
  
• An intentionally open wireless network raises different questions than a password-protected network that was allegedly accessed without authorization.

Each scenario involves its own factual and legal considerations, even though they all begin with the same basic question:

Analysis of Common Shared Internet Connection Scenarios

Once the distinction between attribution and excuse is understood, many of the questions people ask about copyright lawsuits begin to make more sense.

• What if several family members use the same Wi-Fi?
• What if adult children still live at home?
• What if roommates share the internet account?
• What if guests have the Wi-Fi password?
• What if the wireless network was intentionally left open?
• What if someone accessed the network without permission?

These are all variations of the same underlying question:

The remainder of this article examines those situations one by one, beginning with the most common scenario: a household in which multiple people legitimately share the same internet connection.

Each of the scenarios below illustrates how the same legal principles may apply differently depending on the surrounding facts.

Spouses, Children, and Other Family Members Sharing the Same Internet Connection

Perhaps the most common situation in residential copyright cases is also the least surprising: multiple members of the same family legitimately share the household’s internet connection.

Unlike a public Wi-Fi hotspot or an intentionally open wireless network, a family home is expected to have multiple authorized users. A husband and wife may each own several computers, tablets, smartphones, gaming systems, and streaming devices. Adult children may still live at home. Teenagers often have independent access to computers and mobile devices. Even younger children increasingly use internet-connected devices for school, entertainment, and communication.

For most families, sharing an internet connection is not the exception—it is the norm.

That practical reality is one reason why courts generally recognize that identifying the subscriber associated with an internet account does not automatically identify every person who may have used that connection.

When the Subscriber Is Not Necessarily the Only Authorized User

When an Internet Service Provider identifies the subscriber assigned to a particular IP address, it identifies the individual responsible for maintaining the account with the ISP.

It does not create a list of everyone who had permission to use that internet connection.

In many households, several family members may know the Wi-Fi password, use the same network every day, and have unrestricted access to the internet.

These facts are neither unusual nor suspicious — they reflect how modern households typically function.

Accordingly, the existence of multiple authorized users is often part of the factual background that both sides may consider during the litigation.

Family Members “Also Using the Internet” Neither Establishes nor Refutes Liability

• Sometimes people assume that because they pay the internet bill, they must automatically be legally responsible for everything that occurs over the connection. [Not true.]
  
• Others assume the opposite—that identifying another family member with internet access automatically defeats the claim. [Also not true.]

Neither assumption accurately reflects how civil litigation generally works.

For example, the mere fact that an adult child lives in the home and regularly uses the household Wi-Fi does not, by itself, establish that the child committed the alleged infringement. Likewise, the mere fact that the parent is the subscriber does not, by itself, establish that the parent committed it.

Instead, those facts become part of the broader evidentiary picture.

Depending on the circumstances, the parties may dispute who used particular devices, who had access to specific computers, who was present at relevant times, what information is revealed through discovery, or what additional evidence supports or contradicts the competing explanations.

The legal inquiry remains focused on the evidence rather than assumptions based solely on family relationships.

Different Types of Households Change the Analysis

No two households are exactly alike.

• A retired couple living alone presents a different factual picture than a family with four teenagers.
  
• A home occupied by one subscriber and three unrelated adult children presents different considerations than a married couple with no children.
  
• Some households have a single shared family computer.
  
• Others have a dozen internet-connected devices owned by different individuals.

For this reason, courts generally avoid broad rules based solely on the existence of a family relationship. Instead, they evaluate the particular facts of the case before them.

Why This Is Relevant

Understanding that multiple family members legitimately share a residential internet connection helps explain why identifying the subscriber is often only the beginning of the factual inquiry.

The subscriber is an important starting point for the investigation. But additional facts may become relevant when determining who actually engaged in the alleged conduct or whether the evidence supports holding a particular family member legally responsible for the claims asserted in the lawsuit.

This distinction becomes even more apparent when we move beyond family members and consider other common situations, such as roommates, houseguests, and visitors who also have legitimate access to the same internet connection.

Roommates and Housemates Who Share Internet

Not every shared internet connection exists within a traditional family household.

Many subscribers share their internet service with roommates, friends, relatives, significant others, or other adults living in the same residence. In apartments, rental homes, college housing, military housing, and other shared living arrangements, it is common for one person to establish the internet account while several unrelated adults regularly use the same connection.

Although the living arrangement may differ from a family home, the legal question remains remarkably similar:

As discussed earlier, the answer depends on the evidence—not merely on who pays the monthly internet bill.

A Shared Internet Account Does Not Result In Shared Responsibility

In many shared households, only one resident opens the internet account with the Internet Service Provider.

That person becomes the subscriber.

The decision about whose name appears on the account is often based on convenience rather than ownership or control. Perhaps one roommate already had an established account. Perhaps one person had better credit. Perhaps the account was transferred when another roommate moved out.

In some rental properties, the internet service may even be included as part of the housing arrangement, meaning the subscriber of record may be a landlord, property manager, or another individual who is not one of the people actually using the connection.

This distinction becomes particularly important when several adults maintain separate bedrooms, separate computers, separate online accounts, and largely independent digital lives while sharing the same residential internet service.

Courts Generally Look Beyond the Subscriber’s Name

If a copyright plaintiff learns only that a particular individual subscribed to the internet account, that information identifies an important witness—and potentially a defendant—but it does not necessarily resolve who used the internet connection during the alleged infringement.

As with any civil case, the parties may seek additional information during discovery to better understand the relevant facts.

Depending on the circumstances, those facts may include:

• how many adults lived at the residence;
• whether each person owned separate computers or devices;
• who had access to particular devices;
• whether the alleged subscriber regularly used BitTorrent software;
• whether any admissions were made by individuals living in the residence; and
• what other evidence tends to support or contradict the competing explanations offered by the parties.

No single fact automatically determines the outcome.

Rather, these facts help provide context for evaluating the plaintiff’s claims and the subscriber’s response.

Why Roommate Cases Change the Analysis

Unlike most family households, unrelated adults often have fewer shared devices and greater independence. Each roommate may maintain separate computers, separate user accounts, separate passwords, separate work schedules, and separate online activities.

In some situations, roommates may know very little about each other’s internet usage beyond sharing the same Wi-Fi network.

In other situations, additional technical information may become relevant. For example, depending on the type of network equipment involved, available records may provide information about particular devices that connected to the network during a relevant period of time.

This type of information may include router logs, device information, forensic evidence, or other technical data.

However, even identifying a particular device does not necessarily identify the person who was using that device at the time of the alleged infringement.

These practical differences can influence the factual issues explored during the litigation, even though the underlying legal principles remain the same.

For example, evidence that might be expected in a household with one shared family computer may be much less significant in a residence where each roommate maintains separate devices and uses the internet independently.

Again, these observations do not establish liability or defeat it. But they do illustrate why courts generally examine the specific facts of each living arrangement and what data is presented to it rather than applying a one-size-fits-all rule.

Every Shared Household Is Different

No two roommate situations are exactly alike.

Some homes contain a single shared desktop computer. Others contain multiple gaming systems, personal laptops, home offices, and dozens of internet-connected devices belonging to different individuals.

Some roommates are lifelong friends who regularly borrow each other’s computers.

Some are strangers who happen to share rent while leading entirely separate lives.

Others involve temporary guests, relatives, international visitors, or friends who stay in the household for extended periods of time. In some situations, the subscriber may know the identity of the person who used the connection but may face practical, personal, or privacy concerns regarding whether and how to identify that individual—particularly if that person is no longer living in the household or has returned to another country by the time the lawsuit is filed months later.

The passage of time can also create practical challenges. A copyright plaintiff may identify an IP address months after the alleged activity occurred, and the lawsuit may not be filed or served until additional months have passed. By that time, devices may have changed, router logs may no longer exist, individuals may have moved, and memories may have faded.

For each of these reasons, courts generally evaluate the particular evidence presented in each case rather than assuming that all shared households operate in the same manner.

The ultimate question remains the same:

That inquiry does not change simply because unrelated adults happen to share the same iternet connection.

Guests, Visitors, and Unknown Internet Users From Outside the Home

Not every person who uses an internet connection is a permanent member of the household.

Sometimes a subscriber provides Wi-Fi access to a visiting family member, a friend, a business associate, a tenant, a short-term guest, or another person who temporarily needs internet access.

In today’s connected world, sharing Wi-Fi access has become routine. Many people provide their wireless password to guests without giving much thought to the fact that internet activity occurring through that connection may later be associated with the subscriber’s account.

Many Internet Service Providers now provide routers that include a “guest network” feature, allowing subscribers to create a separate wireless network that guests or other authorized users can access. In some cases, internet providers have also experimented with or offered community Wi-Fi features that allow other users to access portions of a subscriber’s internet connection.

The legal question, however, remains the same:

The answer depends on the evidence.

Temporary Access Changes the Liability Analysis

Unlike a family member or roommate who regularly uses the same internet connection, a temporary user may have only occasional access.

A guest may connect for:

• a few hours during a visit;
• several days while staying with family;
• weeks or months while temporarily living in the home;
• a business-related visit;
• a vacation or holiday stay.

The subscriber may know who had access at the time.

Or, by the time a lawsuit is filed, the circumstances may have changed significantly.

• The guest may have returned home.
• A family member may have moved away.
• A visitor may have left the country.
• A temporary tenant may no longer be reachable.

These practical realities can create challenges in determining what happened months or even years earlier.

“Who Had Access” Is Not the Same as Knowing What Happened

A common question from subscribers is:

Not necessarily.

Knowing that someone had access to the internet connection is an important fact. But having internet access alone does not establish what that person did while connected.

Similarly, a subscriber may not know whether a guest used the connection for ordinary activities such as browsing websites, checking email, streaming licensed content, or downloading files.

Problems From the Passage of Time

One of the practical difficulties in copyright litigation is that the alleged activity and the lawsuit often occur at very different times.

A copyright owner may identify an IP address based on activity allegedly observed months earlier, and it might wait months or years to file the lawsuit. Once filed, the ISP subpoena process may take additional time. By the time the subscriber receives notice that he is implicated as being a possible defendant in the lawsuit, circumstances surrounding who is living there, and how the internet is being used and by whom may have changed.

• Devices may have been replaced.
• Router records may no longer exist.
• People may have moved.
• Relationships may have changed.
• Memories may have faded.

A subscriber may truthfully remember that “someone was visiting” but may not have the information necessary to identify exactly who used the connection, what device they used, or what activity occurred.

These issues do not automatically resolve the case in favor of either side, but they demonstrate why the factual investigation can become more complicated as time passes.

“Not Being a Rat” – Being Accurate About Another’s Internet Use

When another person may have used a subscriber’s internet connection, accuracy matters.

No need to be a “rat” to shift the implication of guilt from you to someone else:

• A subscriber should not identify a person as being the possible infringer merely because that person also had access.
  
• At the same time, a subscriber should not ignore or dismiss the possibility that another authorized user may have been involved.

If the other person also had access to the internet and may have been the one engaging in the unlawful activity (and it wasn’t you who did it), this piece of information is relevant — not to blame the other, but to consider who actually did it.

As with family members and roommates, the central question remains:

Open Wi-Fi Networks and Unsecured Wireless Routers

One of the most common questions asked by subscribers facing a copyright infringement allegation is:

This question has become less common than it was during the earliest years of BitTorrent litigation, but it remains an important issue because it highlights the distinction between identifying an internet connection and identifying the person responsible for activity occurring over that connection.

An open wireless network is a network that allows devices to connect without requiring the user to enter a password or other authentication credential.

Historically, some individuals intentionally operated open wireless networks because they believed internet access should be freely available to members of the community. Others left networks unsecured unintentionally because they did not understand the importance of configuring wireless security settings, or they did not understand how to change the setting in the router.

Regardless of the reason, an unsecured wireless network creates a factual question:

Open Wi-Fi Creates Merely a Possible Alternate Explanation

When a copyright plaintiff identifies an IP address associated with alleged infringement, the initial information usually identifies the internet connection assigned by the ISP.

If that connection belongs to a subscriber who maintained an open wireless network, several possibilities may exist:

• the subscriber may have used the connection;
• a family member or authorized user may have used the connection;
• a guest or visitor may have used the connection;
• a nearby person may have connected to the wireless network;
• an unknown person may have accessed the network without authorization.

The existence of these possibilities may become relevant to the factual analysis.

Comparing the Analysis: Open Wi-Fi vs. Shared Households

A family member or roommate using the internet connection is usually a known person.

The subscriber may know:

• who lives in the home;
• who has access to the Wi-Fi password;
• which devices belong to which individuals;
• who regularly uses the network.

An open Wi-Fi network creates a different problem.

The subscriber may not know:

• who connected;
• when they connected;
• what device they used;
• whether the person was nearby;
• whether the person ever accessed the network before or after the alleged infringement.

This uncertainty can make it more difficult to connect the infringing activity with a particular internet user.

Factual Considerations in Different Kinds of Open Wi-Fi Situations

When discussing open Wi-Fi, it is important to distinguish several different situations.

A subscriber may have:

• intentionally operated an unsecured network;
• accidentally failed to configure a password;
• provided access through a guest network;
• shared a password widely;
• had an improperly configured router;
• experienced unauthorized access despite having security measures in place.

These situations may appear similar from the perspective of the copyright investigation, but they can involve different factual considerations.

For example, a subscriber who intentionally created an open public wireless network may present different facts than a subscriber whose password-protected network was allegedly compromised by an unknown person.

The question is not simply:

The question is:

Open Wi-Fi Does Not Eliminate the Need for Evidence

One misconception about open wireless networks is that they create automatic protection from copyright claims. They do not.

A subscriber cannot necessarily avoid responsibility simply by stating:

At the same time, a plaintiff cannot necessarily establish responsibility simply by stating:

As with all of the scenarios discussed in this article, the ultimate issue remains whether the evidence supports holding a particular individual legally responsible for the alleged infringement.

Unauthorized Access: What If Someone Used My Wi-Fi Without Permission?

A related but different situation occurs when a subscriber claims that someone accessed their internet connection without authorization.

Unlike an intentionally open wireless network, where access may have been available to anyone within range, unauthorized access involves a person connecting to the network without the subscriber’s knowledge or permission.

Examples may include:

• someone obtaining a wireless password without permission;
• someone exploiting a security weakness in a router;
• someone connecting through a compromised device;
• someone using a previously shared password after permission was withdrawn; or
• someone gaining access through another technical means.

The question in these situations becomes more specific:

Reiterating the Difference Between Possibility and Evidence

Many subscribers understandably ask whether someone could have accessed their network. The answer often is yes. Wireless signals travel beyond the physical walls of a home. Networks can sometimes be accessed by people nearby. Devices can sometimes be compromised. Passwords can sometimes be shared or obtained by others.

Courts generally evaluate evidence, not speculation. For example, relevant evidence may include:

• router logs or device connection records;
• security settings and network configuration;
• evidence of compromised devices;
• information showing other devices connected to the network;
• testimony from individuals with knowledge of the network; or
• other technical evidence relevant to the alleged activity.

A Subscriber’s Lack of Knowledge – Does This Absolve Guilt?

A common question is:

This question goes back to the central theme of this article.

The subscriber’s lack of knowledge may be an important fact. But the legal analysis generally requires examining all of the circumstances.

For example, there is a difference between:

• a subscriber who maintained reasonable security measures but may have been victimized by unauthorized access;
• a subscriber who knowingly shared access with another person;
• a subscriber who intentionally operated an unsecured wireless network;
• a subscriber who ignored repeated evidence that another person was using the connection.

These situations involve different facts.

The purpose of examining those facts is not to assume responsibility; it is to determine what the evidence actually shows.

Modern Internet Devices: These Complicate the Analysis

Modern homes contain far more internet-connected devices than they did when many early BitTorrent lawsuits began.

A single household may now include:

• smart televisions;
• security cameras;
• smart speakers;
• smart appliances;
• thermostats;
• lighting systems;
• gaming devices;
• tablets;
• phones; and
• computers.

Each connected device may create additional questions.

• Was the device actually connected during the relevant time period?
• Who controlled the device?
• Was the device compromised?
• Did the device itself perform the alleged activity, or was it simply connected to the same network?

As technology becomes more complicated, the simple question of “who had the Wi-Fi password?” may no longer tell the entire story.

“My Wi-Fi Was Hacked” Requires More Than a Possibility

One phrase that frequently appears in internet-related disputes is:

This might be true, but exactly “how the wi-fi was hacked” can describe many different situations.

It may mean:

• someone actually bypassed security protections;
• someone knew or guessed the password;
• a former guest continued using the network;
• a neighbor connected to an unsecured network;
• a device was compromised;
• or simply that the subscriber does not know who used the connection.

These are not identical situations, and thus a careful investigation will try to determine which of these situations actually occurred.

The Correct Analysis: Who is Responsible, Not Which Device Was Observed

Whether the issue involves an open network, a family member, a roommate, a guest, or unauthorized access, the underlying question remains consistent:

An IP address merely identifies the subscriber.

A router merely provides information about connected devices.

A connected device may provide information about what activity occurred.

But ultimately, copyright liability concerns the responsibility of a person who engaged in that unlawful activity—not merely the existence of an internet connection, an account holder, a particular device, or the activity itself having occurred or not.

Guest Networks, Smart Devices, and Modern Internet Connections

The way people access the internet has changed dramatically since the earliest years of BitTorrent copyright litigation. A residential internet connection is no longer limited to one computer connected to one modem.

Today, a typical household may include dozens of internet-connected devices, including:

• smartphones;
• laptops;
• tablets;
• smart televisions;
• gaming consoles;
• security cameras;
• smart speakers;
• thermostats;
• lighting systems;
• smart plugs;
• appliances; and
• other internet-connected devices.
• [For fun, I would even add “AI Bots,” “autonomous programs,” “robots,” and any other future technologies which I can forecast will be part of the “home ecosystem” of devices that connect to the internet, communicate with other individuals, programs, or bots, and which may take actions on their own accord that might inadvertently (or explicitly) infringe the rights or harm another individual.]

Many of these devices may connect automatically and communicate with online services without requiring the subscriber to actively open a web browser, run a script or a program, or download a file. As a result, identifying the subscriber associated with an IP address may represent only the first step in understanding what actually occurred, by whom, and who should be held liable for that unlawful activity.

The more difficult question remains:

Modern Routers, Multiple Networks

Many Internet Service Providers now provide routers with features designed to allow easier sharing of internet access.

For example, many modern routers include a “guest network” feature that allows a subscriber or the ISP itself to create a separate wireless network for visitors (sometimes without the express knowledge that this has occurred).

A guest network may allow someone to access the internet while limiting access to the subscriber’s personal devices and files. However, it is not always clear:

• whether the guest network is using the same IP address as the subscriber, or a different IP address assigned to the other subscriber,
  
• to which subscriber the activity that occurs on that internet connection will be attributed to.

Thus, the “guest network” feature creates issues that are inherently different from the questions we discussed regarding an intentionally open wireless network.

A subscriber may have:

• a private household network protected by a password;
• a separate guest network for visitors;
• smart devices connected to a different wireless network;
• multiple wireless access points throughout the home.

From the perspective of a copyright investigation, these distinctions may become important.

The question is not simply:

The question is:

Smart Devices and the Challenge of Connecting Observed Activity to a Particular Person

The growth of smart devices creates additional questions that did not commonly arise during the early years of BitTorrent litigation.

For example:

• Did a particular device actually communicate over the internet during the relevant time period?
• Was the device capable of performing the alleged activity?
• Was the device controlled by the subscriber or another person?
• Was the device compromised?
• Was the device merely connected to the same network, and did it (or an unauthorized user) actually perform the activity being investigated using that device?

These questions demonstrate an important distinction:

Mere Access to the Internet vs. Human Conduct

Technology can provide valuable information.

It can show:

• that a device connected to a particular network;
• that data traveled through a particular connection;
• that certain activity occurred at a particular time;
• that certain technical identifiers were associated with that activity.

But copyright infringement cases ultimately concern human conduct.

The legal question is not:

The legal question is:

This distinction is why courts generally examine the totality of the available evidence rather than relying on a single technical identifier.

Multiple Devices Are Connected, More Complications

A subscriber who receives a copyright complaint may reasonably ask:

The answer depends on the evidence available in the particular case.

Relevant evidence may include:

• device records;
• router information;
• forensic examination;
• account information;
• user testimony;
• timing information; and
• other facts developed or statements made during investigation or discovery.

As with every scenario discussed in this article, the facts must be evaluated together.

The Internet Connection Is Not the Same Thing as the Person Using It

Perhaps the most important lesson from modern internet connections is that the relationship between an IP address and a human being is becoming increasingly indirect.

The internet connection may identify:

• an ISP account.

The ISP account may identify:

• a subscriber.

The network may identify:

• connected devices.

But each step still requires careful analysis before reaching the ultimate question:

Public Wi-Fi, Businesses, and Internet Connections Used by Many People

Although this article focuses primarily on residential internet subscribers, it is worth briefly discussing businesses and other locations that provide internet access to multiple users.

Some examples of these businesses may include:

• coffee shops;
• restaurants;
• hotels;
• universities;
• libraries;
• offices; and
• other locations offering Wi-Fi access to customers, employees, students, or visitors.

These situations present a different factual question than a typical residential internet account.

A residential subscriber may have a limited group of potential users:

• family members;
• roommates;
• guests; or
• other individuals with access to the home network.

A public or business network may have dozens, hundreds, or even thousands of potential users.

The practical challenge for a copyright plaintiff suing a business is obvious:

This is one reason why copyright infringement cases involving BitTorrent activity have historically focused much more often on residential ISP subscribers than on public Wi-Fi providers. These exist, but their involvement is usually accidental (when a business is implicated as being a potential defendant in a lawsuit, the copyright holder usually only knows the IP address; not that this IP address maps to a business).

A business may be able to identify the account holder associated with an internet connection. However, the account holder may have little or no information regarding which of their many customers, employees, visitors, or devices actually used the connection at the relevant time.

The same principle discussed throughout this article still applies:

An IP address identifies an internet connection. It does not automatically identify the person who used that connection.

For this reason, while public and business Wi-Fi environments raise interesting legal and technical questions, they generally involve a different “who did it” problem than the residential subscriber cases that are the focus of this article.

How Courts Evaluate Attribution

Attribution: What Evidence Actually Connects a Subscriber to the Alleged Infringement?

A copyright plaintiff who identifies an internet subscriber associated with an IP address has obtained an important piece of information. However, the subscriber’s identity is generally only one part of the investigation.

The more difficult question is:

This distinction is central to understanding internet-related copyright cases.

• An internet account may have one subscriber.
• That same internet connection may have multiple users.
• Those users may operate multiple devices.
• Those devices may be used by multiple people.

The legal analysis requires examining how the available evidence connects each part of that chain.

The Difference Between Identification of a Device or a Subscriber vs. Attributing Liability To a Person Who Used That Device

One of the most common misunderstandings in internet-related lawsuits is confusing identification of the account holder or the mechanism which was used to infringe another’s copyright rights with attributing liability to a person who used that device when the infringing activity was observed.

Identification asks:

Attribution asks:

Those are different questions.

For example:

An ISP may identify a subscriber associated with an IP address. This might allow a copyright plaintiff to identify a potential defendant.

But the subscriber may then explain:

• other people had access to the network;
• multiple devices connected to the internet account;
• another person may have used the connection;
• the subscriber did not personally engage in the alleged activity.

At that point, the issue becomes one of evidence.

The IP Address = the Beginning of the Investigation, Not the End

As discussed elsewhere in my articles, an IP address can be valuable evidence.

It may help a copyright plaintiff identify the internet connection from which alleged activity was observed.

However, an IP address generally does not reveal:

• the name of the person using the device;
• who was physically present;
• who controlled the computer;
• who operated the software;
• whether another person had authorized or unauthorized access;
• whether the subscriber was even using the internet at that time.

The IP address answers an important question:

It does not necessarily answer:

That distinction is why the remainder of the investigation becomes important.

Multiple Types of Evidence Considered in a Lawsuit

Depending on the facts of a particular case, evidence may exist at several different levels.

1. Internet Account Evidence

The first level usually involves information from the Internet Service Provider.

This may include:

• the subscriber’s identity;
• the account information;
• the address associated with the account;
• records showing that the IP address was assigned to that account during the relevant time period.

This information is often what allows a plaintiff to identify a potential defendant. However, it generally identifies only the account holder—not necessarily the person who performed the alleged activity.

2. Network and Device Evidence

The next level may involve information about the network itself.

Depending on the circumstances, relevant information may include:

• router records;
• connected devices;
• computer information;
• network configuration;
• forensic examination;
• other technical information.

This evidence may help answer questions such as:

• How many devices connected to the network?
• Were multiple users present?
• Did a particular device appear connected during the relevant period?
• Was there evidence of the alleged software or activity?

However, even technical evidence may require additional interpretation.

• A device is not automatically a person.
• A computer may be shared.
• A device may be borrowed.
• A wireless password may be known by multiple people.

Technical evidence narrows the possibilities, but it does not always complete the “who did it” analysis by itself.

3. Human Evidence

Ultimately, copyright infringement cases concern human conduct.

That means evidence about people may become important.

Examples may include:

• testimony from household members;
• statements made by users;
• admissions;
• communications;
• employment or travel information;
• knowledge of software or activity;
• other facts relevant to who may have engaged in the alleged conduct.

No Single Piece of Evidence Exists in Every Case

One mistake that people often make is assuming there is always one piece of evidence that answers the entire question.

For example:

or:

Neither statement accurately describes how evidence is evaluated.

Different cases may involve different information.

Some cases may involve:

• only an IP address and subscriber information.

Other cases may involve:

• multiple users;
• multiple devices;
• forensic evidence;
• admissions;
• conflicting explanations;
• additional technical records.

The strength of the evidence depends on the total picture.

The Central Question Still Remains: “Who Did It?”

After all of the technical information is collected, the fundamental legal question remains:

That question is why identifying the subscriber is important—but also why identifying the subscriber is not necessarily the final step.

• The internet connection may identify where activity occurred.
• Additional evidence may identify devices.
• Additional facts may identify users.

The ultimate question is whether the evidence establishes responsibility by a particular person.

The Role of BitTorrent Evidence and Monitoring Companies

In many copyright infringement cases involving BitTorrent technology, the investigation begins before the copyright plaintiff knows the identity of the person associated with the internet connection.

The plaintiff may initially observe activity associated with an anonymous IP address participating in a BitTorrent swarm.

This process generally involves identifying technical information associated with the alleged infringement, such as:

• the IP address participating in the swarm;
• the date and time of the observed activity;
• the digital identifier associated with the copyrighted work;
• the Internet Service Provider associated with the IP address; and
• other information collected during the monitoring process.

This information may then be used to file a lawsuit and request information from the Internet Service Provider to identify the subscriber associated with the IP address.

However, the information collected during this process must be understood correctly.

The monitoring evidence generally answers an important question:

Understanding What BitTorrent Monitoring Actually Observes

BitTorrent is a peer-to-peer technology.

Unlike traditional downloading from a single server, BitTorrent users exchange pieces of files with multiple participants in a network known as a “swarm.”

A monitoring company participating in that swarm may observe information about other participants.

Depending on the technology used, the evidence may include:

• IP addresses;
• timestamps;
• file identifiers;
• portions of transmitted data;
• network activity associated with the swarm.

This information can provide evidence that a particular internet connection was observed participating in the distribution of a particular file.

However, like other forms of technical evidence, it represents one part of the overall analysis.

The Difference Between Observing Activity and Identifying a Person

One of the most important distinctions in these cases is the difference between observing internet activity and identifying the individual responsible for that activity.

A monitoring company may observe:

The ISP may identify:

But another question remains:

That question is the attribution issue discussed throughout this article.

Technical Evidence: What It Can AND Cannot Establish

Technical evidence can be powerful.

It can help establish:

• that a particular IP address was observed;
• that activity occurred at a particular time;
• that the activity was associated with a particular digital identifier;
• that data was exchanged through a peer-to-peer network.

However, technical evidence does not automatically reveal:

• who was physically present;
• who controlled the device;
• who operated the software;
• whether another person had authorized access;
• whether the subscriber personally performed the activity.

This is why technical evidence and “who did it” evidence are related—but not identical.

Difference: a Possible User vs. a Responsible User

Throughout this article, one theme has appeared repeatedly:

• An internet connection may have multiple possible users.
• A family member may have access.
• A roommate may have access.
• A guest may have access.
• An unknown person may have accessed an open or unsecured wireless network.

These facts may all be relevant.

This distinction is one of the most important concepts to understand when evaluating copyright infringement claims involving shared internet connections.

The Existence of Another Possible User—Not an Automatic Defense

A common response from subscribers is:

Sometimes that statement may be highly relevant.

For example, if several people had legitimate access to the same internet connection, the existence of those other users may raise important questions about who actually engaged in the unlawful activity.

However, the statement alone does not necessarily resolve the case.

Courts generally evaluate evidence, not possibilities.

Difference: A “Reasonable” Possibility vs. Supporting Evidence

Consider two different situations.

In the first situation, a subscriber lives with several other adults. Multiple people know the Wi-Fi password. Each person has separate devices. The subscriber can identify who lived in the home during the relevant period.

In that situation, the existence of other users may provide meaningful factual information.

In the second situation, a subscriber simply states:

without identifying who that person was, whether that person had access, or any facts supporting that explanation.

Those two situations are very different.

The first provides additional facts for evaluating who is liable.

The second raises only a possibility.

This distinction matters because litigation requires evidence—not merely explanations that are theoretically possible.

A Subscriber Is Not Expected To Know Everything

Another common misunderstanding is that a subscriber must identify the “real infringer” before disputing liability. This is not necessarily how evidence works.

The importance of any explanation depends on the evidence available and the legal issues involved.

The Importance of Credibility

Many internet-related copyright disputes ultimately involve questions of credibility.

For example:

• Was there another person with access?
• Was that person actually present?
• Did that person have access to a device?
• Was the subscriber the only person who regularly used the connection?
• Are the explanations consistent with the available technical evidence?

Two cases involving the same IP address could reach very different results because the surrounding facts are different.

The technology may look similar, but the human circumstances might not be.

The Subscriber Is Not Required to Know Everything About their Network

Modern internet connections are complicated.

A subscriber might not know:

• every device connected to the network;
• every person who used the Wi-Fi;
• every application running on every device;
• every activity performed by household members or guests.

That reality is one reason why analyzing “who did it” cannot be reduced to a single technical identifier.

At the same time, a subscriber’s relationship to the network and the people using it may become relevant.

Someone who maintains the account, controls the household network, and regularly uses the internet connection may have different factual circumstances than someone whose name appears on an account but who has no meaningful connection to the location or users.

The Central Question Remains the Same

The purpose of examining possible users is not to create automatic excuses.

It is to answer the actual legal question:

An IP address may identify an internet connection.

A subscriber record may identify an account holder.

A device record may identify equipment.

A person’s testimony may provide additional context.

The ultimate question is whether those pieces of information, considered together, support holding a particular individual legally responsible.

How Plaintiffs Actually Prove (and Defendants Defend) Copyright Cases

Understanding the technical issues involved in internet copyright cases is important. However, technology is only one part of the litigation process.

A copyright plaintiff may begin with technical evidence identifying an IP address, a BitTorrent swarm, and an internet subscriber. But a lawsuit does not end by just identifying an internet connection.

The parties must still address the central question:

That question is often answered through a combination of technical evidence, documents, testimony, and the statements made by the parties during litigation.

Before the Lawsuit: What Evidence Do They Obtain

In many BitTorrent copyright cases, a copyright plaintiff begins with information collected from monitoring activity on a peer-to-peer network.

That information may identify:

• an IP address;
• a date and time;
• a file identifier;
• an Internet Service Provider.

The plaintiff may then file a lawsuit against an unknown defendant (a “John Doe” Defendant), and ask the court to allow it to issue an ISP subpoena process to identify the subscriber associated with that IP address.

At that stage, however, the plaintiff may not know:

• who was using the internet connection;
• who operated the device;
• whether other people had access;
• whether the subscriber personally participated in the alleged activity.

The ISP records identify the subscriber.

They do not necessarily answer the other questions the plaintiff must answer to determine who actually did it.

Discovery in Litigation Adds to Evidence Available to Both Sides

Once litigation begins (once a defendant has been named and served), both parties may have opportunities to obtain additional information.

Depending on the circumstances, discovery may involve:

• written questions called interrogatories;
• requests for documents;
• requests for admission;
• depositions;
• router or device records or logs;
• technical information;
• other evidence relevant to the claims and defenses.

These procedures exist because lawsuits are not decided solely on the information available before filing. The parties usually need to develop additional evidence as the case proceeds.

A Defendant’s Own Statements Can Become Important Evidence

One of the realities of copyright litigation is that the parties themselves often become a source of important evidence.

A subscriber may be asked questions such as:

• Who lived at the residence?
• Who had access to the internet connection?
• Who used the computers or devices?
• Did anyone else have permission to use the network?
• Was BitTorrent software installed?
• Was the subscriber aware of the alleged activity?

The answers to these questions may become part of the evidence considered in the case.

This is why accuracy matters.

A subscriber who provides a truthful explanation supported by the facts may present a very different situation from a subscriber whose statements are inconsistent with other available evidence.

Admissions of Guilt, Statements, and Testimony Under Oath

Technology may identify an internet connection.

For example, a case may involve questions such as:

• Did the subscriber personally use BitTorrent software?
• Did the subscriber recognize the file or software involved?
• Did another person in the household have access?
• Were there circumstances explaining how another user could have engaged in the activity?

In some cases, the most important evidence is not a technical record.

It may be what a person says under oath.

That is why defendants should carefully consider the importance of discovery responses, declarations, and deposition testimony.

Fear-Based Considerations: Why Cases Resolve Before Trial

Many internet copyright cases resolve without a trial.

There are many possible reasons.

• Some defendants may believe the cost and burden of litigation outweigh the benefit of continuing to fight.
• Some defendants may have facts that make settlement practical.
• Some defendants may have defenses that create uncertainty for the plaintiff.
• Some cases may resolve because both sides evaluate the risks and decide that settlement is preferable to continued litigation.

Settlement decisions are often practical decisions based on risk, expense, time, and uncertainty.

Fear of Litigation

One reason these cases can be challenging for subscribers is that the process often begins with uncertainty.

A person may receive a notice that:

• their internet account was identified;
• copyrighted material was allegedly downloaded;
• legal action may follow.

At that moment, the subscriber may not yet know:

• what evidence exists;
• whether another person was involved;
• whether technical information is accurate;
• what defenses may apply.

That uncertainty is one reason many subscribers seek legal advice before a lawsuit is even filed.

Understanding the difference between:

• an allegation,
• evidence,
• attribution,
• and legal responsibility

is critical before making decisions about how to respond.

Why Providing Internet Access Does Not Automatically Make Someone a Copyright Infringer

One concern frequently raised by internet subscribers is whether they can be held responsible simply because another person used their internet connection.

The concern is understandable.

A subscriber may think:

The answer is no.

A subscriber may:

• pay the internet bill;
• own the router;
• maintain the wireless network;
• provide access to family members, roommates, or guests;

without necessarily being the person who engaged in a specific act of copyright infringement.

The central question remains the same:

Owning the Internet Account Is Different From Committing the Act

A simple analogy is helpful.

Owning a vehicle does not automatically prove who was driving it at a particular time.

Similarly, owning or being the account holder of an internet connection does not automatically establish who used that connection for a particular activity.

The internet connection may be an important piece of evidence.

The subscriber information may be an important piece of evidence.

But those facts must still be connected to the individual person allegedly responsible for the activity claimed in the lawsuit.

Focus: Participation and Evidence

In ordinary residential internet situations, the important questions generally involve issues such as:

• who used the connection;
• who controlled the device;
• who engaged in the alleged activity;
• what evidence exists connecting a person to that activity.

The mere existence of a shared internet connection does not automatically answer those questions.

This is why connecting the internet account to the person who used it to engage in the unlawful activities remains the central issue throughout these cases.

Common Misconceptions About IP Addresses and Open Wi-Fi

Misconception #1: The IP Address Proves Who Downloaded the File

One of the most common misunderstandings in internet copyright cases is the belief that an IP address identifies the individual person who committed the alleged infringement.

An IP address can be important evidence.

It may identify the internet connection associated with observed activity.

It may allow a copyright plaintiff to request information from an Internet Service Provider to identify the subscriber associated with that connection.

However, an IP address generally does not identify:

• who was sitting at the computer;
• who controlled the device;
• who operated the software;
• who had access to the network;
• whether another person used the connection.

The distinction is simple:

An IP address may identify the connection; it does not automatically identify the person.

That difference is why copyright cases involving shared internet connections often become an analysis of trying to determine who engaged in the unlawful activity.

Misconception #2: An IP Address Proves Nothing

The opposite argument is also incomplete.

Sometimes people hear that an IP address does not identify a person and conclude that an IP address has no value.

That is not accurate.

An IP address can be meaningful evidence.

It may establish that:

• a particular internet connection was associated with observed activity;
• a particular subscriber was assigned that connection at a specific time;
• a particular internet connection was observed participating in a BitTorrent swarm or other internet activity.

The issue is not whether an IP address alone can prove guilt in a copyright infringement lawsuit; it cannot.

The issue is what evidence and useful information to identify the person engaging in the unlawful activity the IP address actually provides.

An IP address may answer:

It may not answer:

Both statements can be true at the same time.

Misconception #3: If My Wi-Fi Was Open, I Cannot Be Held Responsible

An open or unsecured wireless network may create an important factual issue because it may allow other people to access the internet connection.

However, open Wi-Fi does not create an automatic legal exemption or a defense to a copyright claim.

The existence of an open network may raise questions such as:

• Who could access the connection?
• Who actually accessed the connection?
• Was anyone else present?
• Was the network intentionally left unsecured?
• What other evidence exists?

As with every situation discussed in this article, the question remains:

Misconception #4: If Someone Else Had Access to My Wi-Fi, the Case Is Over

Another common misunderstanding is that identifying another possible user automatically defeats a copyright claim.

That is not necessarily true.

The existence of another possible user may be important in the plaintiff’s investigation.

For example, a subscriber who shares internet access with:

• a spouse;
• children;
• roommates;
• guests;

may have facts that are very different from someone who was the only person using the account.

However, there is a difference between:

and:

The first statement identifies a possibility. The second statement addresses who did it (connecting the evidence to a particular person).

Copyright cases are decided based on evidence, not merely on theoretical possibilities.

Misconception #5: The Person Whose Name Is on the Internet Account Is Automatically Responsible

The person listed on an internet account is often the person a copyright plaintiff initially identifies as the possible “John Doe” Defendant in a lawsuit. This is because the Internet Service Provider maintains records connecting an account to a subscriber.

However, account ownership and personal responsibility are not always identical.

In many households:

• one spouse opens the account;
• one roommate establishes service;
• one family member handles the bills;
• one person manages household services.

The person whose name appears on the account may be important to the investigation.

But the account holder’s identity alone does not necessarily answer every question about who performed a particular activity.

Misconception #6: If I Did Not Personally Download Anything, I Have Nothing to Worry About

This statement requires some caution.

A subscriber who did not personally engage in the alleged activity may have important facts supporting a defense.

A subscriber who receives such a letter from his ISP should carefully consider:

• what evidence exists;
• who had access to the connection;
• what devices were used;
• whether records or information should be preserved;
• what deadlines may apply.

The distinction between “I did not do this” and “I can explain why the evidence does not identify me as the person who did this” can become important during litigation.

Misconception #7: I Changed My Wi-Fi Password, So That Proves Someone Else Did It

After receiving notice about a copyright complaint implicating their internet account as being associated with unlawful activity, some subscribers immediately change their Wi-Fi password or modify their network settings.

A password change merely prevent future unauthorized access.

It may not establish:

• who used the network previously;
• whether another person accessed the connection;
• whether the alleged infringement occurred.

Future security measures and resolution of accusations for possible past unlawful acts are separate questions.

What If You Received an ISP Subpoena Notice?

If you are reading this article because you recently received an ISP subpoena notification from your internet Service Provider, remember that the purpose of this article has been to explain how courts distinguish between identifying an internet subscriber and identifying the person who allegedly committed copyright infringement.

Understanding that distinction is only one part of responding to a copyright claim.

Questions such as:

• What does an ISP subpoena actually require?
• Should you respond to your ISP?
• Can you challenge the subpoena?
• When should you speak with an attorney?
• What happens after your identity is disclosed?

involve separate procedural issues that deserve their own discussion.

For a detailed explanation of the ISP subpoena process, see my articles:

• Understanding ISP Subpoenas in Copyright Infringement Lawsuits
• When Is the Best Time to Hire an Attorney?
• Named and Served as a Defendant
• Who Is Strike 3 Holdings? What Defendants Must Know

Those articles focus on the litigation process itself. This article focuses on the separate question of whether identifying an internet subscriber also identifies the person legally responsible for the alleged infringement.

Frequently Asked Questions About IP Address Liability and Copyright Infringement

The General Rule: What to Take From This Article

Many of the misunderstandings surrounding internet copyright cases come from treating one piece of information as if it answers every question. No one piece of information establishes liability.

An IP address is relevant, but not determinative of who used it.

An open Wi-Fi network creates doubt, but is not a defense to a claim of copyright infringement.

A subscriber’s name is not automatic proof that the subscriber is the infringer.

Another person’s access is not automatic proof of innocence.

The answer whether someone can be held legally responsible for an unlawful act in a copyright case depends on the complete factual picture of whether it is more likely than not that they engaged in the unlawful activity.

The central question throughout this article remains: