Copyright Enforcement and the DMCA: A Roadmap and Research Guide

Intellectual Property > Copyright Enforcement | Published 6 July 2024 - Updated 29 August 2024 | UpLaw - uplaw.us

A single takedown notice looks entirely different depending on which chair you sit in. This guide maps the whole enforcement system at once, from the moment a work is found where it does not belong to the day a federal judge signs a damages judgment, and hands you the authorities to work each stage.

Keywords: copyright enforcement, DMCA takedown, counter-notice, Section 512 safe harbor, online service provider, repeat infringer policy, red flag knowledge, Section 512(f), Lenz, Viacom v. YouTube, BMG v. Cox, registration prerequisite, statutory damages, fair use, Warhol v. Goldsmith, Section 1201 anti-circumvention, copyright management information, generative AI, Copyright Claims Board

Three chairs at one table

Most writing about the Digital Millennium Copyright Act picks a side. A rights-holder guide teaches you to fire off notices; a platform guide teaches you to process them without losing your immunity; a user guide teaches you to fight back. The problem is that the same paragraph of the statute governs all three, and a move that helps one party often creates the very exposure another party is trying to avoid. Enforcement is a negotiation conducted through statutory forms, and you cannot play your hand well without seeing every hand at the table.

So this guide seats three parties at once. The rights holder wants infringing material gone and, sometimes, wants the infringer to pay. The online service provider (OSP) — a host, a marketplace, a social platform, a search engine, an internet access provider — wants to keep the safe harbor that Congress offered in exchange for cooperation. And the accused user or business wants a wrongly removed post restored without walking into a lawsuit. Understanding all three is not academic; it is how you avoid the amateur mistakes that turn a routine removal into a misrepresentation claim or a lost safe harbor.

The statutory bargain sits at 17 U.S.C. § 512, the second title of the DMCA, sometimes called the Online Copyright Infringement Liability Limitation Act. In one sentence: a qualifying OSP escapes monetary liability for infringements committed by its users, provided it promptly removes infringing material on proper notice, stays ignorant of specific infringement it could easily see, does not profit directly from infringement it can control, and terminates repeat infringers. Rights holders get a fast, cheap removal mechanism that does not require filing suit. Users get a counter-notice valve to challenge mistaken or abusive takedowns. Each protection is conditional, and the conditions are where the litigation lives.

If you are newer to the underlying law, anchor first in the complete copyright overview and the plain-language copyright FAQs. Because registration is a prerequisite to suit and the trigger for the best remedies, keep the copyright registration toolkit within reach as you work through the stages below.

The enforcement map

Read the map before you read the terrain. An enforcement matter generally moves through these stages, though real matters skip, loop, and double back:

1. Detection and evidence. Find the unauthorized use; preserve it in a form a court will accept.
2. The takedown notice. Send a compliant § 512(c)(3) notice to the platform's designated agent, having first weighed fair use.
3. The counter-notice. The user's route back to restoration, and the fork that forces the rights holder to sue or stand down.
4. Safe harbor. What the platform must do to qualify and, harder, to stay qualified.
5. The registration gate. Confirming you can actually file, and whether you can claim the good remedies.
6. Litigation. Claims, defendants, proof, and the remedies menu.
7. Fair use. The defense that swallows or saves the case, and the duty that constrains every notice.
8. Anti-circumvention and CMI. The separate claims under §§ 1201–1202 that do not depend on proving infringement at all.
9. Generative AI. The open frontier of training-data and output disputes.
10. The small-claims lane. The Copyright Claims Board, when full litigation is uneconomic.

Two authorities span the whole map. The statute — § 512 for the notice system, and §§ 501–513 for infringement and remedies — and the U.S. Copyright Office's official DMCA resources, including its searchable designated-agent directory and its 2020 report, Section 512 of Title 17, a 200-plus-page study of how the system has worked in practice. Both are free. For the mechanics of drafting and answering notices in narrative form, the companion piece is DMCA takedowns and counter-notices: both sides of the system.

---

Part 1 — Finding the infringement and locking down proof

Enforcement starts with evidence, and evidence on the internet is perishable. A page that shows your photograph today may be edited, geoblocked, or gone tomorrow, and a screenshot you cannot authenticate is close to worthless when the other side denies the page ever said what you claim. The detection phase and the preservation phase are really one phase: the instant you find an apparent infringement, capture it before you do anything that might tip off the infringer.

Detection ranges from the mundane to the industrial. A solo photographer runs reverse-image searches. A studio uses content-fingerprinting and hashing services that match uploads against a reference library. A brand-protection vendor crawls marketplaces and app stores. A rights holder with a large catalog often relies on automated systems that generate notices at scale — which, as we will see, is precisely where the fair use duty and misrepresentation exposure bite hardest.

Preservation is a discipline of its own. Capture the full URL, the visible content, the date and time, and enough surrounding context to prove what the page was and where it lived. Save the page, not just a cropped image. For historical uses, the Internet Archive's Wayback Machine can supply a dated snapshot, and courts have grown comfortable admitting Wayback captures when a proper foundation is laid. The foundation is the part people skip. Under Federal Rule of Evidence 901, a proponent must produce evidence sufficient to support a finding that the item is what it is claimed to be, and Rules 902(13) and 902(14), added in 2017, let certain electronic records and copies verified by hash value be self-authenticating with a written certification, avoiding a live witness. The methodical way to do this is set out in authenticating website screenshots and web evidence in federal court, with an operational version in the getting website evidence admitted checklist.

Hypothetical. Marisol, an independent illustrator, discovers that a home-goods retailer has printed her registered floral pattern on a line of throw pillows sold through a large marketplace. Before she contacts anyone, she captures the product listings, the seller's storefront, and the marketplace's cached description, and she hashes the files so their integrity can be certified later. That five minutes of discipline is what will let her, months on, prove the listing existed exactly as she says — even after the seller quietly relists under a new SKU. If the matter grows into a broader online problem, the strategic picture is drawn in defending a brand on the internet.

---

Part 2 — The takedown notice, element by element

When infringing material sits on a third-party platform, the fastest and cheapest remedy is not a lawyer's letter and certainly not a lawsuit; it is a takedown notice under 17 U.S.C. § 512(c)(3). Done right, it costs nothing, moves in hours to days, and requires no court. Done wrong, it accomplishes nothing — or worse, it exposes the sender to damages.

The six statutory ingredients

Section 512(c)(3)(A) lists what a notification of claimed infringement must contain. A compliant notice includes: (1) a physical or electronic signature of the owner or someone authorized to act for the owner; (2) identification of the copyrighted work claimed to be infringed (or a representative list, if many works on one site); (3) identification of the infringing material and information reasonably sufficient to let the provider locate it — a specific URL is the gold standard; (4) contact information for the complaining party; (5) a statement of a good-faith belief that the use is not authorized by the owner, its agent, or the law; and (6) a statement, under penalty of perjury, that the information is accurate and that the sender is authorized to act on the owner's behalf.

Two features of that list repay attention. First, the statute demands only substantial compliance, § 512(c)(3)(B), but a notice that fails to substantially comply "shall not be considered" in deciding whether the provider had knowledge of infringement — meaning a sloppy notice does not just fail to trigger takedown, it fails even to put the platform on notice. Second, "information reasonably sufficient to locate" is doing real work. A notice that gestures at a whole website, or names a work without pointing to where it appears, invites the provider to ignore it. Precision is not politeness; it is the difference between a notice that counts and one that does not.

Walk the elements one at a time with the sending a DMCA takedown notice checklist, which builds each statutory requirement into a fillable sequence and flags the fair use step discussed next.

The Lenz duty and the § 512(f) trap

Element five — the good-faith belief — is not a formality, and this is the single most misunderstood point in takedown practice. Before sending a notice, the sender must actually consider whether the use is a fair use. In Lenz v. Universal Music Corp., 815 F.3d 1145 (9th Cir. 2016) — the "dancing baby" case, in which a mother's 29-second home video of her toddler bouncing to a Prince song drew a takedown — the Ninth Circuit held that fair use is authorized by law, so a copyright owner who fails to form a subjective good-faith belief that the use is not fair may be liable under § 512(f) for material misrepresentation. The court did not require a full fair use adjudication before every notice, and it left room for automated systems that account for fair use in some fashion. But it foreclosed the reflexive, fair-use-blind notice.

Section 512(f) is the enforcement teeth. It imposes liability on any person who "knowingly materially misrepresents" that material is infringing (or, on the other side, that material was removed by mistake). The standard is demanding — the Ninth Circuit in Rossi v. Motion Picture Ass'n of America, Inc., 391 F.3d 1000 (9th Cir. 2004), read the good-faith belief as subjective, so honest mistakes generally do not trigger liability — but recklessness toward obvious fair use, or notices that misidentify who owns what, can. The practical lesson: automated, boilerplate notices that ignore plainly transformative or de minimis uses are a liability generator, not a labor-saving device.

Where it goes: the designated agent

A notice is only effective if it reaches the platform's designated agent for receiving DMCA notices. Every provider that wants the hosting or linking safe harbor must register an agent with the Copyright Office and keep the registration current through the Office's electronic system, and must also post the agent's contact information somewhere publicly accessible on its service. The Copyright Office maintains a searchable directory of these agents; most platforms also publish a "copyright" or "legal" page with a web form. Sending your notice to a generic support inbox instead of the designated agent is a common own-goal — the clock and the obligations run from receipt by the agent, not by whoever happens to open the company's general mail.

---

Part 3 — The counter-notice and the ten-day clock

The system is not one-directional. Congress built in a check for the accused, because takedowns are sometimes wrong, sometimes abusive, and sometimes aimed at speech the sender simply dislikes. A user whose material has been removed may file a counter-notification under § 512(g).

A valid counter-notice, like the original, has statutory elements: the subscriber's signature; identification of the removed material and its former location; a statement under penalty of perjury of a good-faith belief that the material was removed as a result of mistake or misidentification; the subscriber's contact information; and — the consequential part — consent to the jurisdiction of the federal district court for the subscriber's district (or, for a foreign subscriber, any district in which the provider may be found), and to accept service from the complaining party.

Here is the mechanism that gives the counter-notice its force. When a provider receives a valid counter-notice, § 512(g)(2)(C) requires it to restore the material in not less than 10, nor more than 14, business days — unless the original complainant first notifies the provider that it has filed a court action seeking to restrain the infringing activity. In plain terms, the counter-notice starts a clock and forces the rights holder to a decision: sue now to keep the material down, or let it come back. There is no third option and no polite extension.

That fork cuts against frivolous filings on both sides. A user who files a counter-notice has just consented to being sued in federal court and has sworn to a good-faith belief under penalty of perjury; a bad-faith counter-notice carries its own § 512(f) exposure. So the decision to counter-notice is a genuine risk assessment, not a form-filling exercise, and it should be made with eyes open to the possibility of litigation. The elements, the perjury exposure, and the jurisdiction consent are worked through in the filing a DMCA counter-notice checklist.

Hypothetical. Return to Marisol. She sends a clean § 512(c)(3) notice to the marketplace's designated agent, and the pillow listings vanish. Nine days later, the seller files a counter-notice swearing it licensed the pattern from a design collective. Marisol now has a hard deadline: if she does nothing, the listings return in a few business days. Because she registered her pattern within three months of first publication (Part 5), she can file suit immediately, notify the marketplace, and keep the listings down while she tests the "license" defense in discovery. Had she not registered in time, that lawsuit would be far harder to file and much less valuable — which is why registration timing quietly governs enforcement leverage.

---

Part 4 — Safe harbor: what a platform must do to stay immune

Now switch chairs. If you operate a service that hosts, transmits, caches, or links to user content, the § 512 safe harbors are not a nicety; they are the difference between processing notices and defending a copyright suit with potentially catastrophic statutory damages. The safe harbors do not make infringement disappear — the underlying user may still be liable — but they shield the qualifying provider from monetary liability and sharply limit injunctive relief. Critically, § 512(l) makes clear that failing to qualify for a harbor does not itself create liability or strip a provider of any other defense; you simply fall back to ordinary copyright law, including secondary-liability doctrine and fair use.

The four harbors

Section 512 offers four distinct harbors, each with its own conditions:

• § 512(a) — transitory digital network communications. For providers acting as a mere conduit, routing or transmitting material at another's direction. This is the classic internet-access-provider harbor, and it is the least demanding: because a conduit does not store material at users' direction, it is not subject to the notice-and-takedown and counter-notice machinery of the other harbors, and it need not designate an agent.
• § 512(b) — system caching. For the intermediate, temporary storage of material transmitted at a user's request, subject to conditions about not modifying content, honoring refresh rules, and passing through access controls.
• § 512(c) — storage at the direction of a user. The workhorse harbor for hosts and platforms, covering material stored on the system at a user's direction. Courts read "by reason of the storage at the direction of a user" to reach access-facilitating functions like transcoding and playback, not just literal storage. UMG Recordings, Inc. v. Shelter Capital Partners LLC, 718 F.3d 1006 (9th Cir. 2013).
• § 512(d) — information location tools. For search engines and directories that refer or link users to infringing locations.

The § 512(c) and § 512(d) harbors, and in part § 512(b), require a designated agent and adherence to notice-and-takedown. All four sit atop the threshold conditions in § 512(i), discussed below.

Knowledge: actual, red-flag, and willful blindness

For the hosting and linking harbors, the provider must not have actual knowledge that the material is infringing and must not be "aware of facts or circumstances from which infringing activity is apparent" — the so-called red-flag standard, § 512(c)(1)(A). The seminal gloss is Viacom International, Inc. v. YouTube, Inc., 676 F.3d 19 (2d Cir. 2012). The Second Circuit held that both actual and red-flag knowledge require knowledge of specific and identifiable infringements; a general awareness that infringement is rampant on a platform does not disqualify the provider. Actual knowledge is a subjective inquiry into what the provider actually knew; red-flag knowledge asks whether the infringement would have been objectively obvious to a reasonable person in the same circumstances. See also Capitol Records, LLC v. Vimeo, LLC, 826 F.3d 78 (2d Cir. 2016), refining the red-flag test.

Viacom also imported the common-law doctrine of willful blindness: a provider that deliberately shields itself from confirming specific infringement it strongly suspects may be charged with knowledge. And § 512(m) supplies the counterweight — no harbor is conditioned on a provider affirmatively monitoring its service or seeking out infringement. The provider must act on what it knows or is told; it need not go looking. Consistent with that, a non-compliant takedown notice generally cannot be used to prove the provider had knowledge, so the burden of a clean notice sits squarely on the rights holder. EMI Christian Music Group, Inc. v. MP3tunes, LLC, 840 F.3d 69 (2d Cir. 2016); Perfect 10, Inc. v. CCBill LLC, 488 F.3d 1102 (9th Cir. 2007).

Financial benefit plus the right and ability to control

The hosting harbor also disappears if the provider receives a direct financial benefit attributable to infringing activity that it has the right and ability to control, § 512(c)(1)(B). Both prongs must be present. Courts have read "right and ability to control" to require something more than the mere technical ability to remove or block content — otherwise every host would flunk, since every host can delete. UMG v. Shelter Capital, 718 F.3d at 1029–30; Viacom, 676 F.3d at 38. It generally means something like exerting substantial influence over the infringing activity, as by inducing it or exercising high-level curatorial control. The financial-benefit prong turns on whether infringing content acts as a draw for users; a flat, content-neutral fee is a different animal than a business model built on infringement. Compare Corbis Corp. v. Amazon.com, Inc., 351 F. Supp. 2d 1090 (W.D. Wash. 2004).

The repeat-infringer policy — the Cox trap

Section 512(i) sets threshold conditions that apply to every harbor. Two matter most: the provider must accommodate standard technical measures, and — the one that sinks providers — it must "adopt and reasonably implement, and inform subscribers and account holders of, a policy that provides for the termination in appropriate circumstances of subscribers and account holders who are repeat infringers." § 512(i)(1)(A).

The word doing the damage is "reasonably implement." A policy that exists only on paper is not implemented. The cautionary tale is BMG Rights Management (US) LLC v. Cox Communications, Inc., 881 F.3d 293 (4th Cir. 2018), where an internet provider had a written repeat-infringer policy but, in practice, declined to terminate paying subscribers, at times reactivating accounts it had nominally terminated. The Fourth Circuit held that Cox failed to reasonably implement its policy and therefore lost the safe harbor entirely — exposing it to the secondary-liability claim that produced a nine-figure jury verdict in later proceedings. Earlier cases had already established that a provider must actually enforce the policy against those it identifies as repeat infringers. Perfect 10, Inc. v. CCBill LLC, 488 F.3d 1102 (9th Cir. 2007); Ellison v. Robertson, 357 F.3d 1072 (9th Cir. 2004). The operational discipline of building and running a compliant program — agent registration, notice intake, strike tracking, and termination — is laid out in the staying inside the DMCA safe harbor checklist and explained in the DMCA safe harbors guide.

The § 512(h) subpoena

Section 512(h) gives copyright owners a distinctive tool: a subpoena, issued by a court clerk on submission of a copy of the takedown notice, compelling a service provider to disclose the identity of an alleged infringer. It is a limited unmasking device. But the courts of appeals have held it does not reach conduit providers under § 512(a), because that harbor is not tied to the notice-and-takedown regime the subpoena presupposes. In re Charter Communications, Inc., 393 F.3d 771 (8th Cir. 2005); Recording Industry Ass'n of America, Inc. v. Verizon Internet Services, Inc., 351 F.3d 1229 (D.C. Cir. 2003). Rights holders chasing anonymous peer-to-peer infringers therefore usually cannot use § 512(h) against the access provider and must instead proceed by John Doe suit and Rule 45 discovery.

The Section 230 overlay

A recurring confusion: how does § 512 relate to Section 230 of the Communications Decency Act, 47 U.S.C. § 230, which broadly immunizes platforms for third-party content? The answer is that they run on separate tracks. Section 230(e)(2) expressly carves intellectual property out of its immunity — "nothing in this section shall be construed to limit or expand any law pertaining to intellectual property." So copyright claims live entirely under § 512, not § 230. The interaction gets thornier for trademark and for state-law IP-adjacent claims, and reform proposals keep circling both statutes; that two-track world is mapped in Section 230, the IP carve-out, and platform liability, and the platform-side content landscape more broadly in social media law: a field guide to the legal stack.

---

Part 5 — The registration gate

Before any of the litigation stages, a rights holder must clear a gate that trips up more claimants than any other: registration. Two statutes matter, and they do different jobs.

Section 411(a) makes registration a precondition to filing an infringement suit for a U.S. work. For years, courts split over what "registration" meant — filing an application, or receiving the Office's decision. The Supreme Court resolved it in Fourth Estate Public Benefit Corp. v. Wall-Street.com, LLC, 586 U.S. 296 (2019): registration is "made" when the Copyright Office acts on the application, granting or refusing it, not when the applicant mails the forms. Because ordinary processing can take many months, a rights holder who waits until infringement appears to file may be stuck watching the harm accrue while the application sits in queue — unless it pays for special handling to expedite the decision.

Section 412 is the remedies lever, and it is even more consequential in practice. It denies statutory damages and attorney's fees for any infringement that began before registration, unless the work was registered within three months of first publication. This is why sophisticated rights holders register early and reflexively. A photographer who registers a portfolio the week she publishes it preserves the full remedial arsenal against any later infringer; one who registers only after finding an infringer is generally limited to actual damages and the infringer's profits — often far less, and far harder to prove.

There is also a validity wrinkle. Section 411(b) forgives inaccuracies in a registration unless the applicant included the inaccurate information with knowledge that it was inaccurate and the inaccuracy would have caused the Office to refuse registration. The Supreme Court confirmed in Unicolors, Inc. v. H&M Hennes & Mauritz, L.P., 595 U.S. 178 (2022), that the knowledge requirement covers mistakes of law as well as fact — a meaningful protection for applicants who fill out the forms in good faith but get a legal question wrong. The mechanics of getting a clean, timely registration on file — application type, deposit, and the timing that unlocks § 412 — live in copyright registration: a comprehensive guide, the step-by-step registering a copyright with the U.S. Copyright Office, and the copyright registration checklist. Specialized work types have their own registration playbooks — for example, registering copyright in websites and online content and registering copyright in software and source code.

---

Part 6 — Litigation

When self-help fails — because the platform will not act, because the harm is large, or because a counter-notice forces the issue — the matter moves to federal court. Copyright is exclusively federal: 28 U.S.C. § 1338(a) gives the district courts sole jurisdiction over claims arising under the Copyright Act, and § 301 preempts state-law claims that fall within copyright's subject matter and protect equivalent rights.

Proving the claim

The prima facie case is deceptively simple. A plaintiff must prove (1) ownership of a valid copyright and (2) copying of constituent elements of the work that are original. Feist Publications, Inc. v. Rural Telephone Service Co., 499 U.S. 340 (1991), supplies the originality floor — a "modicum of creativity," not sweat of the brow. Because direct evidence of copying is rare, plaintiffs usually prove it circumstantially: access plus substantial similarity of protected expression. A timely registration is worth even more here than at the gate, because § 410(c) makes a certificate obtained within five years of first publication prima facie evidence of the copyright's validity, shifting the practical burden to the defendant.

Direct, contributory, vicarious, and inducement liability

The choice of defendant shapes the whole case. Direct infringement reaches anyone who exercises one of the § 106 exclusive rights — reproduction, distribution, public performance, display, or preparation of derivatives — without authorization, and it is a strict-liability tort as to the act. But the deepest pockets are often secondary infringers:

• Contributory infringement reaches one who knowingly induces, causes, or materially contributes to another's infringement. Knowledge is the battleground; some courts extend it to "reason to know" or willful blindness, while at least the Fourth Circuit has insisted on actual knowledge or willful blindness rather than a "should have known" standard. BMG v. Cox, 881 F.3d at 308–12; A&M Records, Inc. v. Napster, Inc., 239 F.3d 1004 (9th Cir. 2001).
• Vicarious infringement reaches one who has the right and ability to supervise the infringing activity and a direct financial interest in it — no knowledge required. The doctrine descends from agency principles and tracks, but is not identical to, the § 512(c) financial-benefit-plus-control analysis.
• Inducement is the Grokster theory: distributing a product or service with the object of promoting its use to infringe, shown by clear expression or affirmative steps to foster infringement. Metro-Goldwyn-Mayer Studios Inc. v. Grokster, Ltd., 545 U.S. 913 (2005). It coexists with the older Sony staple-article rule, under which distributing a product capable of substantial noninfringing uses does not, by itself, impute liability. Sony Corp. of America v. Universal City Studios, Inc., 464 U.S. 417 (1984).

The full secondary-liability picture, including the criminal exposure under § 506 and the No Electronic Theft Act, is surveyed in the real cost of IP piracy.

The remedies menu

Sections 502–505 stock the remedies cabinet, and the § 412 timing decision (Part 5) determines which drawers a plaintiff can open.

• Injunctions under § 502, subject to the equitable four-factor test the Supreme Court applied to patents in eBay Inc. v. MercExchange, L.L.C., 547 U.S. 388 (2006), which lower courts extend to copyright. No more automatic injunctions on a finding of infringement.
• Impoundment and destruction of infringing copies and the means of making them, under § 503.
• Actual damages plus the infringer's profits attributable to the infringement, under § 504(b) — the plaintiff proves gross revenue, and the burden shifts to the defendant to prove deductible costs and profit attributable to non-infringing factors.
• Statutory damages under § 504(c), available only if § 412 is satisfied: a range of $750 to $30,000 per work infringed, at the court's discretion; up to $150,000 per work for willful infringement; and as low as $200 per work for an innocent infringer who was unaware and had no reason to believe the acts were infringing. Statutory damages are elected instead of actual damages and profits, and they are powerful precisely because the plaintiff need not prove a dollar of harm.
• Attorney's fees under § 505, in the court's discretion, guided by the nonexclusive factors the Supreme Court blessed in Fogerty v. Fantasy, Inc., 510 U.S. 517 (1994), and refined in Kirtsaeng v. John Wiley & Sons, Inc., 579 U.S. 197 (2016), which told courts to give substantial weight to the objective reasonableness of the losing party's position while weighing all the circumstances.

For a cross-IP sense of what these numbers actually look like in practice, see what an IP case is worth: a guide to intellectual property damages. And because copyright litigation runs on the same procedural rails as other federal civil cases — pleadings, discovery, dispositive motions — the process itself is mapped in federal civil litigation: a roadmap and resource guide and detailed in federal civil litigation filings from complaint to appeal. Before filing, run the case through the evaluating a new civil case checklist and the broader assessing a civil lawsuit framework; many matters are better opened with a pre-suit demand, drafted using drafting an effective demand letter and its companion demand letter checklist.

The clock: limitations, accrual, and the damages lookback

A civil copyright claim must be brought within three years after the claim accrued, § 507(b). Two doctrinal wrinkles decide who gets to sue and for how much.

First, the discovery rule vs. the injury rule. Most circuits hold a claim accrues when the plaintiff discovers, or with reasonable diligence should have discovered, the infringement — not when the infringement occurred. That matters for latent infringements the owner could not reasonably have found. Some courts had layered on a separate limit, capping recoverable damages to the three years before suit regardless of when the claim was discovered (Sohm v. Scholastic Inc., 959 F.3d 39 (2d Cir. 2020)), while others rejected any such cap (Starz Entertainment, LLC v. MGM Domestic Television Distribution, LLC, 39 F.4th 1236 (9th Cir. 2022)). The Supreme Court resolved that split in Warner Chappell Music, Inc. v. Nealy, 601 U.S. 366 (2024), holding that the Copyright Act contains no separate three-year damages bar: a plaintiff with a timely claim under the discovery rule may recover damages for infringement no matter how far back it reaches. (The Court pointedly left for another day whether the discovery rule itself is correct.)

Second, laches is not a defense to timely claims. In Petrella v. Metro-Goldwyn-Mayer, Inc., 572 U.S. 663 (2014), the Supreme Court held that laches cannot bar a claim brought within the three-year window, because Congress already spoke to timeliness through § 507(b). Equitable defenses still do work at the margins — estoppel, and laches for the narrow purpose of shaping equitable relief — as explained in equitable defenses: laches, acquiescence, waiver, and estoppel.

---

Part 7 — Fair use: the defense that decides cases

Fair use, 17 U.S.C. § 107, is where copyright's certainties dissolve. It is a defense to infringement, a constraint on takedown notices (the Lenz duty), and a factor a careful platform weighs before treating content as "red flag" infringing. It is also famously unpredictable, which means anyone who speaks about a close case with confidence is overselling.

The statute directs courts to weigh four nonexclusive factors, illustrated by a preamble listing criticism, comment, news reporting, teaching, scholarship, and research:

1. The purpose and character of the use, including whether it is commercial and whether it is "transformative" — adding new expression, meaning, or message, or serving a different purpose than the original.
2. The nature of the copyrighted work — factual works and published works are more susceptible to fair use than creative or unpublished ones. Harper & Row Publishers, Inc. v. Nation Enterprises, 471 U.S. 539 (1985), treated the unpublished status of Gerald Ford's memoirs as weighing heavily against the defendant.
3. The amount and substantiality of the portion used, both quantitatively and qualitatively — taking the "heart" of a work counts against fair use even if it is a small fraction.
4. The effect on the potential market for or value of the original, including licensing markets. Harper & Row once called this "undoubtedly the single most important element," a description later decisions have complicated.

The center of gravity has shifted twice in a generation. Campbell v. Acuff-Rose Music, Inc., 510 U.S. 569 (1994), rescued 2 Live Crew's parody of "Oh, Pretty Woman" and taught that transformative uses lie at the heart of fair use, that commerciality is not dispositive, and that the market inquiry excludes harm from criticism itself. The transformative gloss then grew expansive. Google LLC v. Oracle America, Inc., 593 U.S. 1 (2021), found Google's reimplementation of Java API declaring code in a new smartphone context to be fair, emphasizing transformation of purpose and the functional nature of the material.

Then the pendulum swung back. In Andy Warhol Foundation for the Visual Arts, Inc. v. Goldsmith, 598 U.S. 508 (2023), the Court held that the first factor favored the photographer, not the Warhol Foundation, where the Foundation licensed a Warhol silkscreen of Lynn Goldsmith's Prince photograph to a magazine for essentially the same purpose the photograph itself would serve — illustrating a story about Prince. New meaning or aesthetic, the majority held, does not by itself make a use transformative if the new work serves the same commercial purpose and substitutes in the same market. Warhol did not overrule Campbell; it disciplined the "transformative" label by tethering it to the specific challenged use and its market substitution. The upshot for enforcement is concrete: straight commercial reuse that competes in the original's market is now harder to defend as fair, while genuine criticism, commentary, parody, and functional reuse retain strong footing. Because the analysis is so fact-bound, treat every confident fair use prediction — including your own — with suspicion.

---

Part 8 — Anti-circumvention and copyright-management information

Two claims sit adjacent to ordinary infringement and are easy to miss precisely because they do not require proving infringement at all. They come from a different part of the DMCA — Chapter 12 of Title 17, §§ 1201–1205 — and they protect the technical scaffolding around copyrighted works rather than the works themselves.

Section 1201 prohibits circumventing a technological measure that controls access to a copyrighted work, and separately prohibits trafficking in tools whose primary purpose is to circumvent either access controls or measures that protect the rights of a copyright owner. Breaking DRM to get at a movie, or selling a device that strips it, can violate § 1201 even if the user never reproduces or distributes the underlying work. Congress built in a valve: every three years the Librarian of Congress, on the recommendation of the Register of Copyrights, conducts a rulemaking to grant temporary exemptions for classes of works where the anti-circumvention ban would otherwise chill noninfringing uses. That triennial process is how phone unlocking, certain repairs, security research, and accessibility uses have won breathing room — a story told in the legality of unlocking your cell phone: DMCA Section 1201 and, for the repair context, the right to repair reckoning.

Section 1202 protects copyright-management information (CMI) — the identifying data attached to a work, such as the author's name, title, terms of use, and, importantly, metadata and watermarks. It bars knowingly providing or distributing false CMI, and bars intentionally removing or altering CMI, or distributing works knowing the CMI has been stripped, where the actor knows or has reason to know it will induce, enable, facilitate, or conceal infringement. For photographers and other visual artists, § 1202 has become a workhorse: stripping the metadata or credit line from an image and reposting it can support a § 1202 claim with its own damages under § 1203 — statutory damages from $2,500 to $25,000 per violation for CMI claims — layered on top of the underlying infringement. These claims are a live front in the generative-AI litigation discussed next, where plaintiffs allege that training pipelines strip CMI at scale.

---

Part 9 — Generative AI: the open frontier

The newest and least settled enforcement front involves generative AI, and it is moving fast enough that any snapshot risks going stale. Keep two questions apart, because courts do.

The input question — training. Does ingesting copyrighted works to train a model infringe, and if so, is it fair use? Rights holders frame training as wholesale copying of protected expression; developers frame it as a transformative, non-expressive statistical process akin to the search-index and book-scanning cases. Early district-court rulings have gone in different directions on different facts, and no appellate court has yet resolved the core fair use question. Some decisions have distinguished between the fair use character of training itself and the separate wrong of assembling a training corpus from pirated copies — a distinction that echoes the ordinary rule that an unlawful source can taint an otherwise-plausible use.

The output question. Can a model's outputs infringe when they reproduce or closely paraphrase protected works, and who is liable — the developer, the deployer, or the user who prompts? Here the analysis folds back into ordinary substantial-similarity doctrine and the secondary-liability theories of Part 6, plus the CMI theories of Part 8 where outputs shed attribution.

The marquee cases — among them The New York Times Co. v. Microsoft Corp. and the Getty Images litigation against Stability AI, along with a raft of author and artist class actions — are testing all of this in parallel, with mixed interim results. Alongside sits a distinct authorship question: the Copyright Office's position, upheld in Thaler v. Perlmutter (D.C. Cir. 2025), is that purely machine-generated output lacks the human authorship copyright requires, so material generated by AI without sufficient human creative control is not registrable. The current state of play — training-data fair use, memorization, § 1202 CMI theories, and the leading rulings — is tracked in generative AI on trial, with the broader cross-disciplinary view in the AI and emerging technology law toolkit. The related question of scraping the open web to build training sets — where copyright meets the CFAA and contract — is treated in web scraping and the law after hiQ v. LinkedIn. Because this area is genuinely unsettled, verify the current posture of any case before relying on it; a ruling that controls your analysis today may be reconsidered tomorrow.

---

Part 10 — The small-claims lane: the Copyright Claims Board

Full federal litigation is expensive, and for many creators the economics never close: the cost of suing dwarfs the value of the claim. Congress addressed that gap with the CASE Act, which created the Copyright Claims Board (CCB), a voluntary small-claims tribunal within the Copyright Office, codified at 17 U.S.C. §§ 1501–1511. The CCB hears infringement claims, declarations of noninfringement, and § 512(f) misrepresentation claims, with total damages capped at $30,000 (and lower per-work caps). It is cheaper and less formal than court, with limited discovery and no lawyers required.

Two features define its character. It is opt-out: a respondent who is served with a CCB claim can decline the proceeding within 60 days and force the claimant back to federal court, which limits the CCB's usefulness against unwilling adversaries. And its determinations have limited preclusive effect, reflecting its streamlined nature. The CCB is a genuine option for a photographer or writer with a modest, provable claim against a domestic infringer — worth weighing against a takedown-only strategy or full litigation — but it is not a forum you can drag a resistant defendant into. Registration timing still matters: a claimant can file at the CCB with a pending application, but the same § 412 logic shapes what the claim is ultimately worth.

---

A worked hypothetical, end to end

Pull the stages together through one invented matter that touches most of them.

Facts (hypothetical). Osei runs a small documentary studio and licenses its short films to educational platforms. He discovers that a for-profit "study help" site has ripped three of his films, stripped the on-screen credit and the embedded metadata, and re-uploaded them behind a paywall, monetized with ads. He registered each film within a month of release.

Detection and proof (Part 1). Osei captures the infringing pages, the paywall, and the ad calls, and hashes the files so a certification under Rule 902(14) can later authenticate them without a live witness.

Takedown (Part 2). Because the films are hosted on a commodity cloud platform, Osei sends three precise § 512(c)(3) notices to the platform's designated agent, each pinpointing a URL. He first confirms these are not fair uses — verbatim, paywalled, ad-monetized copies of entire films are about as far from Warhol-protected transformation as it gets — so his good-faith statement is solid and his § 512(f) exposure is nil. The platform removes the films within a day.

Counter-notice (Part 3). The site files counter-notices claiming a "classroom exemption." Osei now has ten-to-fourteen business days before the films return unless he sues. Because he registered in time, that decision is easy.

Litigation and remedies (Part 6, Part 8). Osei files in federal court, notifies the platform to keep the films down, and pleads both ordinary infringement and a § 1202 claim for the stripped credits and metadata. Willfulness looks strong — the credits were deliberately removed — putting up to $150,000 per work in statutory damages under § 504(c) and separate CMI damages under § 1203 on the table, plus fees under § 505 if he prevails and the defense proves objectively unreasonable under Kirtsaeng. The "classroom exemption" collapses on the § 107 factors: commercial, paywalled, entire works, direct market substitution for his educational licenses.

The platform's position (Part 4). The cloud host is never a defendant. It registered a designated agent, acted expeditiously on compliant notices, took no direct financial benefit from the specific infringement it could control, and runs a real repeat-infringer policy — so it keeps its § 512(c) harbor while the actual infringer bears the liability. That asymmetry, playing out exactly as Congress designed it, is the DMCA in a single frame.

The case settles on a consent judgment and a payment. Osei's leverage traces back to two unglamorous decisions made long before the dispute: he registered early, and he preserved proof the moment he found the infringement.

---

Related UpLaw Resources

Related Guides

• Copyright Law: A Complete Overview
• The DMCA Safe Harbors: How Online Service Providers Earn Protection From User Infringement
• What an IP Case Is Worth: A Guide to Intellectual Property Damages
• Registering Copyright in Photographs: A Photographer's Guide

Related Checklists

• Sending a DMCA Takedown Notice: A Practical Checklist
• Filing a DMCA Counter-Notice After a Takedown: A Practical Checklist
• Staying Inside the DMCA Safe Harbor: A Compliance Checklist
• Copyright Registration: A Practical Checklist
• Getting Website Evidence Admitted: A Practical Authentication Checklist
• Evaluating a New Civil Case: A Practical Checklist
• Writing an Effective Demand Letter: A Practical Checklist

Related Toolkits

• Registering Copyrights With the U.S. Copyright Office: A Roadmap and Resource Library
• Federal Civil Litigation: A Roadmap and Resource Guide
• Defending a Brand Across the Digital Ecosystem: A Strategic Toolkit and Resource Library
• AI and Emerging Technology Law: A Roadmap and Resource Toolkit

Related Articles

• DMCA Takedowns and Counter-Notices: Both Sides of the Notice-and-Takedown System
• Section 230, the IP Carve-Out, and Platform Liability for User-Generated Infringement
• Generative AI on Trial: Copyright Infringement Claims After the New York Times and Getty Suits
• The Legality of Unlocking Your Cell Phone: DMCA Section 1201 and the Exemption
• The Real Cost of IP Piracy: Civil Damages, Criminal Charges, and Secondary Liability
• Copyright Registration: A Comprehensive Guide
• Authenticating Website Screenshots and Web Evidence in Federal Court: A Practitioner's Guide
• Web Scraping and the Law After hiQ v. LinkedIn
• Equitable Defenses: A Comprehensive Guide to Laches, Acquiescence, Waiver, and Equitable Estoppel
• Copyright FAQs: Plain-Language Answers to the Questions People Ask Most

---

This toolkit is general legal information, not legal advice, and it creates no attorney-client relationship. The DMCA, the law of fair use, and the copyright questions raised by artificial intelligence are all evolving quickly; confirm the current statute, regulations, procedures, and case law, and consult qualified counsel before acting. Published by UpLaw (uplaw.us).