Piracy Shield: A flawed approach in the fight against online piracy

ISPs understand the need to protect copyright and fight piracy. However, it is critical that the administrative, legal and technical systems deployed to achieve this shared goal are proportionate, efficient, non-discriminatory and not harmful to the proper functioning of the Internet network.

Italy was one of the first EU Member States to be equipped with a filtering platform, called “Piracy Shield”, whose primary objective is to tackle online piracy related to live broadcast sporting events. It was introduced by Law No. 93 of 2023, amended by the so-called Omnibus Decree (DL no. 113 of 9 August 2024) and completed by two AGCOM resolutions that better detail its functioning.

In a nutshell, Piracy Shield is an asynchronous platform designed to allow copyright holders (so-called flaggers) to quickly report domains or IP addresses hosting pirated content. Upon receiving the report on the portal, AGCOM can order Italian ISPs to block access to the sites involved within a maximum of 30 minutes.

Leaving aside the fact that this sort of “mega-firewall” is easily bypassed by means of VPN or by switching from a private DNS to a public DNS, and that it entails considerable costs for ISPs, it goes without saying that, from the very beginning, its functioning has revealed many limitations and criticalities, which have been exacerbated by the recent change in the law:

• there is a high risk of affecting lawful resources, since AGCOM can order the blocking of IP addresses that are predominantly (and not uniquely, as originally intended) used for unlawful activities;

• filtering obligations are potentially unlimited, after the legislator intervened to remove the filtering limits on IP/FQDN addresses agreed between the NRA and the operators during the technical tables;

• ISPs are found to perform filtering and tasks that collide with individual freedoms. This is contrary to European legislation that qualifies fundamental ISPs services as mere-conduit and therefore exempt them from liability. On the contrary, in Italy criminal liability has been expressly established for ISPs;

• marked asymmetry between the blocking procedures that must be carried out in a timely manner and total uncertainty as to the timing for unblocking: Uncertainty that disproportionately affects small operators or foreign providers who – not always being aware of the EU Member State’s regulatory framework – have difficulty enforcing their rights.

While we are witnessing initiatives that aim at combating piracy, it is useful to remember that any system activated at national level has strong impacts outside the borders, as content and resources located in third countries are filtered. In addition, a massive multiplication of asynchronous platforms would pose threats and create vulnerabilities to the proper functioning of the Internet, as intervening with potentially unlimited filtering creates high collateral damage even greater than the social benefit of combating piracy.

There are better tools to fight piracy, including criminal Law, cooperation between States, and digital solutions that downgrade the quality of the signal broadcast via illegal streaming websites or IPtv. European ISPs are ready to play their part in the battle against piracy, but the solution certainly does not lie in filtering and blocking IP addresses.

Dalia Coffetti

EuroISPA Board Member and Head of Regulatory and EU Affairs of AIIP – Association of Italian Internet Providers

EuroISPA General Meeting in Brussels: a recap

Brussels, March 27-28, 2025

Last week, the EuroISPA community convened in Brussels for the first General Meeting of the year, bringing together Council and Forum members, Board Officers and Secretariat, in the EuroISPA offices for a very fruitful exchange.

Our members gathered to recap the activities of the association in 2024 and discuss the next steps in the new mandate of the European institutions, identifying priority areas for EuroISPA to focus on in 2025 and beyond, as well as revamped ways of working.

The agenda included as usually exchanging insights on the strategic way forward of current topics of attention for our Committees’ work:

📌 in the Online Content Committee, we discussed the ongoing developments around child protection and CSAM Regulation negotiations and the ongoing and upcoming activities of the association on piracy, especially in close coordination with the EUIPO.

📌 the Data Economy Committee, focusing on the ongoing and upcoming work of the institutions around, among others, the Internal Security Strategy, the Digital Fairness Act, and debated on the future of the Data Privacy Framework, ePrivacy and AI.

📌 the Cybersecurity & Infrastructure Committee, with updates on critical past and upcoming institutional works such as the DNA, CRA and CSA consultations, NIS2 and the Council Conclusions on reliable and resilient connectivity.  The Committee was delighted to appoint its new Chair – Elisabeth Debar from FFT. We are confident that her experience in cyber policies, both at the French and the European level, will bring invaluable expertise to the Committee.

Read more about the work of our Committees here.

During the two days, EuroISPA had the pleasure of welcoming high-level speakers, with whom members had the opportunity to exchange and debate on relevant matters for the internet industry:

🔹 Kia Slæbæk Jensen, Defence, Cyber and Hybrid Threats Attachée at the Danish Permanent Representation to the EU, on cyber and infrastructure resilience as well as Denmark’s cyber priorities, ahead of the upcoming Danish EU Presidency
🔹 Werner Stengg, Cabinet Expert of Executive-Vice President of the European Commission for Tech Sovereignty, Security and Democracy Henna Virkkunen, on Opportunities and challenges of the new EU institutional mandate
🔹 Katinka Clausdatter Worsøe, Telecom Attachée at the Danish Permanent Representation to the EU on Denmark’s Digital and Telecom Priorities, ahead of the upcoming Danish EU Presidency​

Finally, we had the pleasure of having with us Keilin Tammepärg, Head of Policy and Legal affairs of the Estonian Association of Information Technology and Telecommunications, bringing one more national association’s perspective to the table.

Thank you to all our members who participated actively in the discussions and to our guest speakers for providing valuable insights.

The next EuroISPA General Meeting will be held in Paris in June – stay tuned!

EuroISPA on Internet governance

Rising geopolitical tensions threaten the open and global Internet on several levels. We see global fragmentation and threats to the physical infrastructure, global fragmentation at the regulatory level, and increasing cybersecurity threats from bad actors, including states.

At the same time, overly restrictive regulations or centralised control mechanisms could stifle innovation and exclude smaller operators, which also face challenges when it comes to combatting advanced threats such as nation-state actors, ransomware, and distributed denial-of-service (DDoS) attacks.

EuroISPA strongly supports the EU’s commitment to the multi-stakeholder model of Internet governance, which has been instrumental in maintaining an open, free and secure Internet. The EU can strengthen the multistakeholder model through strong participation in and compliance with the processes of the relevant organisations, such as IGF, ICANN, IETF, etc. Future EU legislation should always be assessed in the light of extraterritoriality and its impact on the global competitiveness of the European IT industry.

At the same time, we invite the EU to encourage diversity in operators by cutting red tape and streamline cybersecurity compliance requirements, ensuring they are proportionate to the size and resources of the operators, without compromising security standards. In fact, developing and adhering to open, universally adopted standards would ensure that security measures are interoperable, scalable, and accessible to operators of all sizes.

Building collaborative frameworks that provide shared threat intelligence, affordable mitigation tools, and capacity-building support is essential to levelling the playing field and enhancing the overall security and resilience of the Internet.

EuroISPA also believe it is key to take into account emerging technologies risks, such as quantum computing ad switching, artificial intelligence, and the Internet of Things (IoT). Preparing for quantum-resilient cryptography, securing IoT devices, and ensuring ethical AI use must be priorities to prevent vulnerabilities from compromising the integrity of the Internet.

EuroISPA recently submitted its response to the European Commission’s targeted consultation on its stance on Internet
governance.