LaLiga Demands €450 After ISPs Log Subscribers’ Visits to Pirate Servers

This February, Spanish football league LaLiga obtained a court order that supposedly allowed it to pursue mere viewers of pirate IPTV. A local court soon clarified that viewers would not be targeted. However, letters from LaLiga's lawyers, demanding 450 euros to prevent legal action, run counter to those assurances. That the letters appear to rely on evidence supplied by Spanish ISPs, indicating which of their customers accessed specific 'pirate' servers, is of even greater concern.
When news began to break in early March, indicating that Spain’s most powerful football league had been authorized by a local court to track down people who simply viewed pirate streams, the story made for puzzling reading.

Claims in the media, that this related to pirate IPTV subscribers, spread like wildfire. That benefited LaLiga’s deterrent messaging campaign but lacked any basis in truth. That prompted a corrective statement by the Superior Court of Justice of Catalonia.

Not only did the Court state that mere viewers would not be targeted when LaLiga obtained alleged pirates’ identities from local ISPs, its statement clarified that this wasn’t about IPTV at all; it concerned card-sharing, an entirely different type of piracy.

“[T]he basis for agreeing to the requested preliminary diligence, can only be carried out against the ‘cardsharers’ who re-spread the signal and profit from it, and not against mere end users,” the statement explained.

And that was that, at least until letters from LaLiga’s lawyers started being delivered to homes in Spain last month.

Old School “Pay Up Or Else” Approach

The existence of the letters was first reported by lawyer David Maeztu who posted a section of one on X together with some explanatory notes.

“A conciliation claim [offer to settle] is filed against a user, who has been identified by his IP [address] because ‘it has been possible to confirm that from his Internet account [.] connections have been made to the pirate platform [.] from which access was provided’,” Maeztu explains.

“That is to say, it is a mere user connecting to a service. So yes, they intend to go against end users at least in a prior conciliation claim, which is not the same as a claim as such.”

In the letter above, LaLiga’s lawyer alleges that “at least on Day 32 of LALIGA EA SPORTS and Day 36 of LALIGA HYPERMOTION that took place between the 19th and April 22, 2024,” through the letter recipient’s internet connection, “illicit access to the audiovisual contents of LaLiga was obtained, without the consent of my client.”

The letter continues by stating that if the alleged infringer “immediately ceases the indicated behavior and, in any case, undertakes to restrict access through its network to those IP addresses, domains and web pages that allow illegal access to the referred contents,” and also “agrees to pay LaLiga 450.16 euros as compensation for the damages caused by his conduct,” the matter can be resolved.

In some respects, this sounds not dissimilar to an old school pay-up-or-else scheme, but as we suspected when reporting on this back in March, this goes way beyond anything seen before in a piracy case.

Spanish ISPs Appear to Be The Vital Component

Copyright infringement claims refer to allegedly infringing acts that have already happened; as such, claims for damages or compensation for infringements that haven’t happened yet face obvious challenges. It’s possible, based on a pattern of historical behavior, to obtain an injunction to restrain future infringement, but that’s usually as far as the law goes in these types of cases.

Based on information available at the time, our theory was that LaLiga had zero information that would allow it to identify any of the supposed infringers at Telefónica, Vodafone, Orange, MásMóvil and Digi, the ISPs listed in the court order. Without an IP address, LaLiga wouldn’t be able to identify an alleged infringers’ ISP, let alone the actual infringer.

When rightsholders observe an infringement taking place online, they typically link it to an IP address. They then ask the relevant ISP to provide the identity of the subscriber who was using that IP address at the time of the observed infringement. In March, everything pointed to LaLiga having zero evidence against any users of the ISPs in question; we assumed that the ISPs would be asked to trawl their databases looking for evidence, which in itself would’ve been extraordinary.

However, if we take a look at the letter published by David Maeztu, we see that the act[s] for which LaLiga is demanding 450 euros, supposedly took place in April – two months after the court order was obtained. That not only adds credibility to the theory that LaLiga had no evidence of infringement when it obtained the court order, it also suggests that the alleged offenses referenced in the settlement letters hadn’t even happened yet.

“This makes no sense, and it would be good if the operators [ISPs] explained how this is possible,” Maeztu notes.

ISPs’ Loyalties Seem to Lie With LaLiga
As Maeztu points out, this situation makes absolutely no sense, but when the major ISPs in Spain profit from broadcasting football, it seems at least possible that extraordinary requests may be received more sympathetically.

Based on information currently available, it seems reasonable to assume that LaLiga has supplied the ISPs with card-sharing server IP addresses, plus additional information such as ports, and the ISPs are now logging (or retrieving from their logs) the IP addresses that access those servers.

After matching those IP addresses to subscriber accounts, the personal details of those subscribers are handed over to LaLiga by their ISPs, quite possibly becoming the only evidence supporting the claims in the cash settlement letters themselves.

LaLiga president Javier Tebas Medrano previously stated that IP addresses collected by LaLiga “that transmit illegal content” would be sent to Spanish ISPs. The court order states that the IP address assigned to the user when they accessed the server “that enabled the audiovisual content to be shared unlawfully” would be handed over to LaLiga.

That appears to underline the importance of the ISPs in this process, while also running counter to the assurances of the Superior Court of Justice of Catalonia that users would not be targeted.

Implications Beyond a Few Card-Sharers?

After appearing to cross the threshold of ISPs providing evidence of infringement from inside their own networks, could this have implications beyond identifying people who obtain football matches for free?

For example, would the prospect of identifying the anonymous operator of a whistleblowing website, accused of posting content that undermines an individual’s fundamental right to honor under Spanish law, find new opportunity beyond the compliance of the website’s host?

Of course, in this hypothetical scenario, the fundamental right to honor would have to battle against the right to freedom of expression. However, should the alleged victim have deep enough pockets, it might be of some comfort to know that proactive monitoring to obtain evidence, from inside an ISP’s network, might not be the unthinkable prospect it once was.

But as Maeztu notes, it would be good if the operators took the opportunity to explain how all of this works. It would be interesting to hear how this arrangement doesn’t leave all internet users in Spain worse off than before, and why it was worth it for the sake of a few 450 euro ‘fines’.