Piracy Shield: A flawed approach in the fight against online piracy

ISPs understand the need to protect copyright and fight piracy. However, it is critical that the administrative, legal and technical systems deployed to achieve this shared goal are proportionate, efficient, non-discriminatory and not harmful to the proper functioning of the Internet network.

Italy was one of the first EU Member States to be equipped with a filtering platform, called “Piracy Shield”, whose primary objective is to tackle online piracy related to live broadcast sporting events. It was introduced by Law No. 93 of 2023, amended by the so-called Omnibus Decree (DL no. 113 of 9 August 2024) and completed by two AGCOM resolutions that better detail its functioning.

In a nutshell, Piracy Shield is an asynchronous platform designed to allow copyright holders (so-called flaggers) to quickly report domains or IP addresses hosting pirated content. Upon receiving the report on the portal, AGCOM can order Italian ISPs to block access to the sites involved within a maximum of 30 minutes.

Leaving aside the fact that this sort of “mega-firewall” is easily bypassed by means of VPN or by switching from a private DNS to a public DNS, and that it entails considerable costs for ISPs, it goes without saying that, from the very beginning, its functioning has revealed many limitations and criticalities, which have been exacerbated by the recent change in the law:

• there is a high risk of affecting lawful resources, since AGCOM can order the blocking of IP addresses that are predominantly (and not uniquely, as originally intended) used for unlawful activities;

• filtering obligations are potentially unlimited, after the legislator intervened to remove the filtering limits on IP/FQDN addresses agreed between the NRA and the operators during the technical tables;

• ISPs are found to perform filtering and tasks that collide with individual freedoms. This is contrary to European legislation that qualifies fundamental ISPs services as mere-conduit and therefore exempt them from liability. On the contrary, in Italy criminal liability has been expressly established for ISPs;

• marked asymmetry between the blocking procedures that must be carried out in a timely manner and total uncertainty as to the timing for unblocking: Uncertainty that disproportionately affects small operators or foreign providers who – not always being aware of the EU Member State’s regulatory framework – have difficulty enforcing their rights.

While we are witnessing initiatives that aim at combating piracy, it is useful to remember that any system activated at national level has strong impacts outside the borders, as content and resources located in third countries are filtered. In addition, a massive multiplication of asynchronous platforms would pose threats and create vulnerabilities to the proper functioning of the Internet, as intervening with potentially unlimited filtering creates high collateral damage even greater than the social benefit of combating piracy.

There are better tools to fight piracy, including criminal Law, cooperation between States, and digital solutions that downgrade the quality of the signal broadcast via illegal streaming websites or IPtv. European ISPs are ready to play their part in the battle against piracy, but the solution certainly does not lie in filtering and blocking IP addresses.

Dalia Coffetti

EuroISPA Board Member and Head of Regulatory and EU Affairs of AIIP – Association of Italian Internet Providers

EuroISPA General Meeting in Brussels: a recap

Brussels, March 27-28, 2025

Last week, the EuroISPA community convened in Brussels for the first General Meeting of the year, bringing together Council and Forum members, Board Officers and Secretariat, in the EuroISPA offices for a very fruitful exchange.

Our members gathered to recap the activities of the association in 2024 and discuss the next steps in the new mandate of the European institutions, identifying priority areas for EuroISPA to focus on in 2025 and beyond, as well as revamped ways of working.

The agenda included as usually exchanging insights on the strategic way forward of current topics of attention for our Committees’ work:

📌 in the Online Content Committee, we discussed the ongoing developments around child protection and CSAM Regulation negotiations and the ongoing and upcoming activities of the association on piracy, especially in close coordination with the EUIPO.

📌 the Data Economy Committee, focusing on the ongoing and upcoming work of the institutions around, among others, the Internal Security Strategy, the Digital Fairness Act, and debated on the future of the Data Privacy Framework, ePrivacy and AI.

📌 the Cybersecurity & Infrastructure Committee, with updates on critical past and upcoming institutional works such as the DNA, CRA and CSA consultations, NIS2 and the Council Conclusions on reliable and resilient connectivity.  The Committee was delighted to appoint its new Chair – Elisabeth Debar from FFT. We are confident that her experience in cyber policies, both at the French and the European level, will bring invaluable expertise to the Committee.

Read more about the work of our Committees here.

During the two days, EuroISPA had the pleasure of welcoming high-level speakers, with whom members had the opportunity to exchange and debate on relevant matters for the internet industry:

🔹 Kia Slæbæk Jensen, Defence, Cyber and Hybrid Threats Attachée at the Danish Permanent Representation to the EU, on cyber and infrastructure resilience as well as Denmark’s cyber priorities, ahead of the upcoming Danish EU Presidency
🔹 Werner Stengg, Cabinet Expert of Executive-Vice President of the European Commission for Tech Sovereignty, Security and Democracy Henna Virkkunen, on Opportunities and challenges of the new EU institutional mandate
🔹 Katinka Clausdatter Worsøe, Telecom Attachée at the Danish Permanent Representation to the EU on Denmark’s Digital and Telecom Priorities, ahead of the upcoming Danish EU Presidency​

Finally, we had the pleasure of having with us Keilin Tammepärg, Head of Policy and Legal affairs of the Estonian Association of Information Technology and Telecommunications, bringing one more national association’s perspective to the table.

Thank you to all our members who participated actively in the discussions and to our guest speakers for providing valuable insights.

The next EuroISPA General Meeting will be held in Paris in June – stay tuned!

EuroISPA Annual Policy Report 2024 – Brussels Outlook 2025

EuroISPA is delighted to present to you its Annual Policy Report 2024 – Brussels Outlook 2025, which provides an overview of the Association’s main activities in 2024, insights into what’s ahead in 2025, and a deep dive into its key policy focus areas.

In 2024, EuroISPA played a pivotal role in shaping discussions on digital policies affecting European ISPs. The Association and its committees worked on critical areas such as online content, data economy, and cybersecurity & infrastructure, ensuring that the voice of ISPs was heard in EU policymaking.

Beyond a reflection on the past year’s work, this report highlights EuroISPA’s recommendations for a competitive and fair European Internet ecosystem. Additionally, it offers an outlook on the evolving EU policy landscape and its implications for the ISP sector.

Our officers, committee chairs, and members provide expert insights on pressing topics such as combating online piracy, the impact of artificial intelligence, cybersecurity in the EU, the future of digital infrastructure, and the role of ISPs in driving innovation and sustainability.

Once again, EuroISPA is proud to have worked alongside its members to foster a safer, more resilient, and forward-thinking digital environment in Europe.

We hope you enjoy reading our Annual Policy Report 2024 – Brussels Outlook 2025!

Joint industry call for allowing the continuation of current Child Sexual Abuse detention practices

Together with other industry associations, EuroISPA is calling on EU Member States to allow the continuation of current Child Sexual Abuse detection practices.

Building on our previous joint statement welcoming the extension of the temporary ePrivacy Directive derogation, we reaffirm that proactive measures against CSA have been instrumental in protecting children online over the past decade.

EuroISPA on Internet governance

Rising geopolitical tensions threaten the open and global Internet on several levels. We see global fragmentation and threats to the physical infrastructure, global fragmentation at the regulatory level, and increasing cybersecurity threats from bad actors, including states.

At the same time, overly restrictive regulations or centralised control mechanisms could stifle innovation and exclude smaller operators, which also face challenges when it comes to combatting advanced threats such as nation-state actors, ransomware, and distributed denial-of-service (DDoS) attacks.

EuroISPA strongly supports the EU’s commitment to the multi-stakeholder model of Internet governance, which has been instrumental in maintaining an open, free and secure Internet. The EU can strengthen the multistakeholder model through strong participation in and compliance with the processes of the relevant organisations, such as IGF, ICANN, IETF, etc. Future EU legislation should always be assessed in the light of extraterritoriality and its impact on the global competitiveness of the European IT industry.

At the same time, we invite the EU to encourage diversity in operators by cutting red tape and streamline cybersecurity compliance requirements, ensuring they are proportionate to the size and resources of the operators, without compromising security standards. In fact, developing and adhering to open, universally adopted standards would ensure that security measures are interoperable, scalable, and accessible to operators of all sizes.

Building collaborative frameworks that provide shared threat intelligence, affordable mitigation tools, and capacity-building support is essential to levelling the playing field and enhancing the overall security and resilience of the Internet.

EuroISPA also believe it is key to take into account emerging technologies risks, such as quantum computing ad switching, artificial intelligence, and the Internet of Things (IoT). Preparing for quantum-resilient cryptography, securing IoT devices, and ensuring ethical AI use must be priorities to prevent vulnerabilities from compromising the integrity of the Internet.

EuroISPA recently submitted its response to the European Commission’s targeted consultation on its stance on Internet
governance.

EuroISPA signs open letter in response to the Going Dark report

As part of our response to the High-Level Group on Access to Data for Effective Law Enforcement (HLG “Going Dark”), and following our reaction to their 42 recommendations, we raise our concerns about the HLG’s final report, together with a broad coalition of civil society groups, industry and professional associations,

As a matter of fact, the group recently presented recommendations that could pose a substantial threat to digital security and privacy for the EU and its citizens.

An EU security policy fit for the digital age must address the challenges we face today. Secure communications and legal certainty are imperative for citizens and law enforcement alike. In the light of potential threats by criminals, foreign state-sponsored agencies and even some authoritarian actors within the EU, people expect the institutions to prioritise policies that protect their IT-security and fundamental rights. That is why we recommend:

  • Support a safe, trustworthy and diversified digital ecosystem. Citizens need technology that empowers them instead of putting them at risk.
  • Ensure the security and confidentiality of digital spaces because the possibility for people to exercise their fundamental rights depend on it.
  • Uphold the right to privacy and inviolability of protected information. This is required by the Charter of Fundamental Rights and case law of the Court of Justice of the EU and the European Court of Human Rights.

PRESS RELEASE: EuroISPA elects new leadership at General Meeting

Elina Ussa (FiCom) reconfirmed as President, Dalia Coffetti (AIIP) joins Lars Steffen (eco), Alex de Joode (AMS-IX) and Romain Bonenfant (FFTélécoms) as Officer of the EuroISPA Board

Brussels, 21 November 2024EuroISPA, the pan-European association of Internet Services Providers (ISPs) associations, elects new Board configuration during the General Meeting held on November 21, 2024, in Brussels.

EuroISPA is the representative body of over 3,300 Internet Services Providers across the European continent. Since 1997, EuroISPA functions as an ‘umbrella’ association representing ISP associations on policy and legislative issues and facilitates the exchange of best practices between members.

EuroISPA Council members gathered in Brussels for their last General Meeting of 2024, which saw the election of new members of the Board. Dalia Coffetti, of EuroISPA’s Italian member AIIP, was unanimously elected Board Member. She joins Elina Ussa (FiCom, President), Lars Steffen (eco, Vice-President), Alex de Joode (AMS-IX, Treasurer), and Romain Bonenfant (FFTélécoms, Board Member), who have been reconfirmed in their respective roles for another mandate of 2 years. The new Board will be leading the Association’s work until the end of 2026.

Dalia Coffetti, newly elected EuroISPA Board Member on behalf of AIIP, stated: “I am honoured to be chosen to serve in the Board of EuroISPA, to actively contribute to the day-to-day activities of the Association and promote the interests of its members. I am looking forward to sharing the experience, vision and needs of all ISPs daily engaged in the digitalisation of the European Union and who, over the last decades, have contributed to building a competitive and innovative ecosystem that is close to the needs of European consumers”.

EuroISPA is committed to fostering the growth of an innovative and fair European Internet ecosystem, encouraging the continued development of a free and open telecommunications market, as highlighted in the EuroISPA Manifesto for the EU 2024-2029 Mandate. The work of the Association in 2025 will focus on engaging with newly-elected EU policymakers to work together towards achieving a fully functioning internal market, a long-term vision on privacy online, a harmonised European strategy for cybersecurity, and legislative coherence for digital infrastructure.

Elina Ussa, re-appointed President of the Association, said: “I am honoured by the trust that EuroISPA members have decided to put in me once again. I am looking forward to continuing working with this dedicated group of Officers to contribute to the ambitious goals that we have put forward in our Manifesto. Continuity in leadership will be beneficial to the work of the Association in times of changing EU landscape our members are navigating in. I am also delighted to welcome Dalia to the Board of EuroISPA, our members can count on one more expert to lead the Association into 2025 and beyond”.

/

Achieving sustainability in Europe’s digital sector

What steps can be taken so that the telecoms sector is a frontrunner in achieving Europe’s sustainability goals? How can we ensure a sustainable and climate neutral digitalisation in Europe?

EuroISPA puts forward 5 key actions to address sustainability challenges for the digital ecosystem and European economy:

  1. Digital technologies and infrastructures are key to allow the green transition and to achieve greater sustainability.
  2. More can be done to address sustainability challenges.
  3. Sustainability should be embedded in the whole digital supply chain.
  4. Data centres are the cornerstone for untapping the potential of digitalisation to drive decarbonisation.
  5. Promoting investments of data centres located in the European Union would underpin the greening of the EU economy.

/

EuroISPA signs joint industry statement on data processing for AI model training

In a joint statement addressed to the European Data Protection Board (EDPB), EuroISPA and 14 leading European and national trade associations urge the EDPB to adopt a balanced and pragmatic interpretation of GDPR. A thoughtful look into the interplay of the GDPR and the AI Act will be key to make AI “made in Europe” a reality.

EuroISPA reacts to the 42 Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement

EuroISPA welcomes the work and efforts of the European Commission’s High-Level Group (HLG) on access to data for effective law enforcement on promoting a high level of security and an effective approach to fighting
crime and other challenges through the proposed 42 Recommendations.

Earlier this year, the European Commission’s High-Level Group (HLG) on access to data for effective law enforcement out forward 42 recommendations for the further development of EU policies and legislation to enhance and improve access to data for effective law enforcement.

In anticipation of the upcoming discussions of the HLG at the end of the year, EuroISPA would like to take this opportunity to react and give constructive feedback to the recommendations, highlighting some elements that require a careful approach besides further thinking.

EuroISPA welcomes the work and efforts of the Group in promoting a high level of security and an effective approach to fighting crime and other challenges through the proposed 42 Recommendations.

However, EuroISPA is concerned with some proposed recommendations that could weaken encryption, which is a fundamental tool to protect European citizens’ fundamental right to privacy.

Moreover, we underline the need to carefully assess any further measures that can put more burden on European actors, especially the smallest ones.

Finally, any additional measures should take into account the complex value chain that characterises the different ECSs (Electronic Communications Services); any unclear measure might lead to loopholes, further uncertainty when conducting business, as well as threats to the security and the integrity of networks.