> ## Content Index
> Fetch the complete content index at: https://www.thedelatorrereview.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Tele2: When Copyright Enforcement Meets Communications Privacy
- URL: https://www.thedelatorrereview.com/tele2-when-copyright-enforcement-meets-communications-privacy/
- Published: 2009-02-19T00:51:00.000Z
- Updated: 2026-10-10T21:12:38.000Z
- Description: Tele2 explores the tension between copyright enforcement and communications privacy, holding that EU law may permit disclosure of subscriber data for civil copyright claims—but only within a framework that fairly balances fundamental rights and respects proportionality.
- Author: Lydia
- Tags: Copyrights, Privacy Law, Telecommunications Data, Metadata, Human Rights / Fundamental Rights, Court of Justice of the European Union (CJEU), Balancing Test, Personal Information, Caselaw, General Data Protection Regulation (GDPR)

**Case C-557/07 | Court of Justice of the European Union | Eighth Chamber | 19 February 2009**

> **Practice takeaways:** **① IP-address attribution involves personal data.** Connecting an IP address and connection timestamp to a subscriber’s name and physical address identifies an individual. **② Copyright enforcement does not automatically override communications privacy.** EU law requires the competing interests to be balanced. **③ Privacy does not automatically override copyright either.** Member States may authorize disclosure for civil copyright proceedings. **④ Internet access providers can be copyright “intermediaries.”** Control over the infringing activity is not required. **⑤ National implementation matters.** EU law leaves Member States room to determine whether disclosure will be available, subject to fundamental-rights and proportionality constraints. **⑥ Purpose matters when traffic data are retained and disclosed.** A copyright holder’s need to identify an alleged infringer does not itself answer whether particular traffic data may lawfully be stored or disclosed.

In *Tele2*, the Court of Justice of the European Union returned to a difficult question at the intersection of copyright enforcement and communications privacy: **can an Internet service provider be required to identify subscribers behind IP addresses so that copyright holders can pursue them in civil proceedings?**

The Court’s answer was deliberately balanced. EU law did **not prohibit** Member States from requiring disclosure of personal Internet traffic data for civil copyright enforcement—but neither did it **require** them to do so. Where national law provides for disclosure, Member States and their courts must strike a fair balance between the competing fundamental rights and comply with general principles of EU law, particularly proportionality.

The Court also resolved a separate but important issue: an Internet access provider does not escape the EU copyright rules governing “intermediaries” merely because it provides only Internet connectivity and exercises no control over what its customers do online.

## The short version

LSG-Gesellschaft zur Wahrnehmung von Leistungsschutzrechten GmbH (LSG), an Austrian collecting society representing music producers and recording artists, sought the **names and addresses of Internet subscribers associated with particular IP addresses and known connection dates and times**. It wanted the information so that copyright holders could bring civil proceedings arising from file sharing. Tele2 refused, arguing both that it was not an *“intermediary”* for purposes of EU copyright law and that it was not authorized to retain and disclose the relevant traffic data.

The CJEU rejected Tele2’s narrow interpretation of *“intermediary.”* A provider that supplies the Internet connection through which infringement occurs is an intermediary within Article 8(3) of Directive 2001/29, even if it provides "*no email, FTP, or file-sharing service"* and exercises no control over the services its customers use.

On disclosure, however, the Court largely applied its earlier decision in [*Promusicae*](https://the-de-la-torre-review.ghost.io/ghost/?ref=thedelatorrereview.com#/editor/post/6a96cc66331ad30001438cd5). EU law permits Member States to establish rules requiring disclosure of personal Internet traffic data to private parties pursuing civil copyright claims. But it does not mandate such disclosure. National legislation and its application must preserve a **fair balance among the fundamental rights involved** and respect proportionality.

## Why the case matters

*Tele2* is an early example of a recurring problem in EU digital law: **the same data can simultaneously be essential to enforcing one legal right and protected by another legal regime.**

For LSG, an IP address standing alone was not enough. To bring proceedings against an individual allegedly engaged in unlawful file sharing, the copyright holder needed the Internet provider to connect the IP address and timestamp to a subscriber.

For the subscriber, however, that identification required processing and disclosure of information associated with electronic communications.

The dispute therefore could not be resolved simply by asking whether copyright is protected or whether communications data are protected. Both interests were recognized under EU law. The legal question was how they should coexist.

That makes *Tele2* important beyond copyright. The decision illustrates a broader principle of EU digital regulation: **the existence of one legally protected interest does not necessarily eliminate another. Legal rules governing data access may instead have to reconcile competing rights through necessity, proportionality, and a fair balance.**

## Key holding

The Court reached two principal conclusions.

First, EU law did **not preclude Member States from imposing an obligation to disclose personal data relating to Internet traffic to private third parties so that they could bring civil proceedings for copyright infringement**.

But EU law did not create an unconditional right to obtain those data either.

When implementing and applying the relevant copyright, e-commerce, and electronic-communications directives, Member States had to adopt interpretations allowing a **fair balance between the various fundamental rights involved**. National authorities and courts also had to avoid interpretations conflicting with those rights or with general principles of EU law, including proportionality.

Second, the Court held that **Internet access providers are “intermediaries” for purposes of Article 8(3) of Directive 2001/29** even when they merely provide access to the Internet and exercise no legal or factual control over the services their customers use.

## The dispute: from an IP address to a person

LSG was an Austrian collecting society enforcing the rights of recorded-music producers and recording artists. Those rights included reproduction and distribution rights and the right to make recordings available to the public.

Tele2 provided Internet access to customers and assigned them IP addresses, most of which were dynamic rather than static.

That distinction mattered.

Because dynamic IP addresses may change, identifying the subscriber required more than knowing an IP address. Tele2 could identify an individual customer using the **IP address together with the period or date when the address had been assigned**.

LSG argued that the rights holders it represented were suffering losses because file-sharing systems allowed users to exchange copies of protected recordings. To pursue those users through civil proceedings, LSG sought an order requiring Tele2 to disclose:

- the **names and addresses** of subscribers;
- associated with specified **IP addresses**; and
- where the **day and time of the connection** were known.

Tele2 refused.

It argued, first, that an Internet access provider merely supplying connectivity was not an “intermediary” under the relevant copyright rules because it exercised no control over what users did online. Second, Tele2 argued that EU data-protection rules constrained the retention and disclosure of the traffic data necessary to identify the subscribers.

The Austrian courts initially sided with LSG. The Commercial Court in Vienna held that Tele2 qualified as an intermediary and was required to provide the requested information. That ruling was affirmed on appeal, and the dispute ultimately reached the Austrian Supreme Court, which referred questions to the CJEU.

## The Court’s analysis

### 1\. EU privacy law did not categorically prohibit disclosure in civil proceedings

The Court relied heavily on its 2008 judgment in [*Promusicae*](https://the-de-la-torre-review.ghost.io/ghost/?ref=thedelatorrereview.com#/editor/post/6a96cc66331ad30001438cd5).

In that case, the Court had considered a closely related dispute involving a request for the identities and physical addresses of Internet subscribers whose IP addresses and connection dates and times were known.

[*Promusicae*](https://the-de-la-torre-review.ghost.io/ghost/?ref=thedelatorrereview.com#/editor/post/6a96cc66331ad30001438cd5) established an important distinction: Directive 2002/58 did not **prohibit** Member States from creating disclosure obligations in civil proceedings, but it also did not **require** them to create those obligations.

*Tele2* applied that principle directly.

The result was therefore not a categorical victory for either copyright enforcement or communications privacy.

Member States retained room to legislate.

### 2\. Copyright protection could fall within the permitted balancing of rights

The Court explained, through its reliance on [*Promusicae*](https://the-de-la-torre-review.ghost.io/ghost/?ref=thedelatorrereview.com#/editor/post/6a96cc66331ad30001438cd5), that Article 15(1) of Directive 2002/58 had to be read together with the protections contemplated by Directive 95/46.

The relevant exceptions included measures necessary to protect the **“rights and freedoms of others.”**

Those rights were not limited to criminal-law interests. The framework did not exclude the protection of property rights or situations in which authors sought to protect those rights through civil proceedings.

That meant electronic-communications privacy rules did not create an absolute barrier preventing Member States from permitting disclosure for civil copyright enforcement.

### 3\. But disclosure remained subject to a fair balance of fundamental rights

Permission to create a disclosure regime was not permission to disregard privacy.

The Court emphasized that Member States’ discretion was qualified by fundamental-rights requirements.

When transposing the relevant EU directives, Member States had to interpret them in a manner that allowed a **fair balance to be struck between the various fundamental rights protected by the EU legal order**.

And when national authorities and courts applied those laws, they had to ensure that their interpretation did not conflict with those fundamental rights or with general principles of EU law—including **proportionality**.

That is the central privacy holding of *Tele2*.

---

> **EU law permitted Member States to establish disclosure obligations, but required those regimes to accommodate the competing rights in a proportionate manner.**

---

The case therefore should not be summarized as saying that copyright owners have a general EU-law right to subscriber information.

Nor should it be summarized as saying that privacy law prevents ISPs from disclosing subscriber information in copyright cases.

### 4\. A basic Internet access provider is still an “intermediary”

Tele2 argued that it was not an intermediary because it merely provided Internet access and exercised no control over the services its subscribers used.

The Court disagreed. Under Article 8(3) of Directive 2001/29, an access provider is an **“intermediary”** because it supplies the connection that enables third parties to infringe copyright. Neither additional services nor control over the infringing activity is required. Excluding access providers would also under

## The personal-data dimension

Although the operative ruling focused on the compatibility of disclosure obligations with EU law, the dispute illustrates why subscriber attribution raises data-protection concerns.

The requested disclosure was not merely an abstract list of IP addresses.

LSG already possessed—or could identify—the relevant **IP address and connection time**. What it wanted from Tele2 was the information necessary to turn those technical identifiers into identified individuals: their **names and physical addresses**.

---

> **An IP address can function as the bridge between online activity and an identifiable person when a provider possesses the information necessary to make that connection.**

---

The privacy significance of the case lies not merely in an individual data field but in the ability to link technical communications data with subscriber information.

## What the Court did—and did not—decide

*Tele2* is particularly easy to overstate.

**The Court did decide** that Member States may, consistently with EU law, impose obligations requiring disclosure of personal Internet traffic data to private parties for civil copyright proceedings. It also decided that Internet access providers can qualify as intermediaries even when they merely provide connectivity.

But **the Court did not establish a general EU obligation requiring ISPs to disclose subscriber information whenever copyright infringement is alleged.**

The Court expressly relied on [*Promusicae*](https://the-de-la-torre-review.ghost.io/ghost/?ref=thedelatorrereview.com#/editor/post/6a96cc66331ad30001438cd5) for the proposition that Directive 2002/58 **neither precludes nor obliges** Member States to impose such a disclosure requirement.

Nor did the Court hold that copyright automatically prevails over privacy.

Instead, Member States retained discretion, constrained by the requirement to preserve a fair balance among fundamental rights and to respect proportionality.

### Conclusion

*Tele2* did not make copyright or communications privacy categorically superior. Instead, it held that Member States may require ISPs to disclose subscriber information for civil copyright enforcement, but any such rules must strike a **fair balance between the fundamental rights involved** and comply with proportionality.

Put simply: **an IP address may help identify an alleged infringer, but connecting that address to a person remains subject to privacy and fundamental-rights constraints.**

## Sources and Additional resources

### Sources

CJEU judgments, orders, Advocate General opinions, and related case materials are available through **InfoCuria**, the Court of Justice of the European Union's official case-law database. Cases can be located by searching the **case name** or **case number** (for example, **C-557/07**).

[**Search CJEU case law on InfoCuria**](https://infocuria.curia.europa.eu/?ref=thedelatorrereview.com)

- **Court of Justice of the European Union, Case C-557/07,** ***LSG-Gesellschaft zur Wahrnehmung von Leistungsschutzrechten GmbH v Tele2 Telecommunication GmbH***\*\*, Order of 19 February 2009, ECLI:EU:C:2009:107.

### Additional Resources

## Related reading from The de la Torre Review

- **“Promusicae: When an IP Address Becomes a Person.”** The 2008 judgment underlying *Tele2*'s analysis of copyright enforcement and subscriber privacy. *Promusicae* held that EU law does not require Member States to disclose subscriber data for civil copyright claims, but permits them to do so if they preserve a fair balance between competing fundamental rights and respect proportionality. [Read the article.](https://www.thedelatorrereview.com/promusicae-when-an-ip-address-becomes-a-person/)
- **“Digital Rights Ireland: Why Communications Metadata Can Reveal a Life.”** A closer look at the 2014 judgment that invalidated the Data Retention Directive and established that communications metadata can reveal detailed information about an individual’s private life. It provides useful context for the CJEU’s evolving approach to communications data, privacy, and proportionality. [Read the article](https://www.thedelatorrereview.com/digital-rights-ireland-why-communications-metadata-can-reveal-a-life/)
- **“Ministerio Fiscal: Not All Access to Communications Data Is Equally Intrusive.”** A later CJEU decision examining government access to subscriber-identification data and distinguishing between interferences with privacy according to their seriousness. It helps trace the development of the Court’s communications-data jurisprudence after *Digital Rights Ireland*. [Read the Article.](https://www.thedelatorrereview.com/ministerio%5Ffiscal/)
- **“Scarlet: Why Copyright Enforcement Cannot Require General Internet Surveillance.”** Building on *Promusicae*’s fair-balance principle, the CJEU rejected an injunction requiring indiscriminate filtering of internet traffic. The judgment explains why copyright enforcement must respect limits on general monitoring and protect business freedom, personal data, and lawful communications. [Read the article.](https://www.thedelatorrereview.com/scarlet-why-copyright-enforcement-cannot-require-general-internet-surveillance/)

![](https://storage.ghost.io/c/54/ef/54efeb65-4f2f-479e-b4bb-a9ee526feeaa/content/images/2026/09/ChatGPT-Image-Jul-4--2026-at-04_44_14-PM-1.png)

###