Policy & Regulation · Global rights

The world is not the DMCA.

A viral clip is visible everywhere at once. The same upload sits on the same platform under the same URL, watched in Ohio and Bavaria in the same second. But the law that governs whether and how it comes down changes at every border, and the differences are not cosmetic. In the United States the burden to act sits with the rights holder, who sends a notice. In the European Union, for the platforms that matter most, the burden has shifted onto the platform itself, which must make best efforts to keep the work down in the first place. Treating the DMCA as the world's default operating system is the mistake that leaves a rights holder enforcing in one market while the same work stays live in the others.

June 2026 · Verights team9 min read

The DMCA frames how most American rights holders think, because the consumer internet largely grew up under it. Under 17 U.S.C. § 512, a platform that hosts user uploads can claim a safe harbor from monetary liability if it meets the statute's conditions: no actual knowledge of infringement, and expeditious removal once it receives a compliant notice. How far that protection reaches is still being litigated: courts have split the knowledge question into actual knowledge and “red flag” awareness (Viacom International, Inc. v. YouTube, Inc., 676 F.3d 19 (2d Cir. 2012)), and the boundaries of the safe harbor remain unsettled. The architecture is reactive by design. The platform does not have to look. The rights holder has to find the clip it is claiming, identify it, and send a good-faith notice; the platform then takes it down and notifies the uploader, who may file a counter-notice and force the work back up after a waiting period. We explain that mechanism in detail in DMCA 512, explained. The design choice that matters here is the allocation of effort: in the United States, the law assumes the rights holder is watching.

That assumption is exactly what the European Union rejected. Running a global enforcement posture means recognizing that the EU now runs two distinct regimes stacked on top of each other, and they answer two different questions.

The EU split: who must act, and who must prevent

The first regime is the Digital Services Act (Regulation 2022/2065), which governs how content is taken down across the entire EU. Its Article 16 looks familiar to anyone who knows §512: anyone can submit a notice, and a hosting service must act on it. But the DSA goes further than the DMCA in two ways that change the work. It requires “notice and action” mechanisms that are easy to use and electronic, and under Article 17 it requires the platform to give the affected user a statement of reasons whenever it removes or restricts content. The takedown is no longer a quiet event between a rights holder and a platform. It generates a record, and that record is auditable.

The second regime is the one that actually breaks the DMCA mental model. Article 17 of the Copyright in the Digital Single Market Directive (Directive 2019/790) makes an online content-sharing service provider directly liable for the copyrighted works its users upload. It performs an act of communication to the public when it gives access to that material. That single sentence inverts the safe harbor. The platform cannot wait for a notice and then react. To stay within the law it must show it made best efforts to obtain authorization, best efforts to ensure the unavailability of works the rights holders identified, and that it acted expeditiously to take down and keep down works once notified. Prevention, not reaction.

Who carries the burden
Where the burden sitsRights holder carries itPlatform carries itUS § 512Reactive safe harbor.Rights holder finds andnotices each instance.Platform acts on notice.Counter-notice canreturn the work.EU DSA (Arts. 16–17)Notice and action,electronic and easy.Every removal needs astatement of reasons.The takedown becomesan auditable record.CDSM Art. 17Platform directly liablefor user uploads.Best efforts to license,prevent, and keep down.Prevention, notreaction.
The same upload, three legal frames. Under US §512 the rights holder must find and notice each instance, and the work can return on a counter-notice. Under the EU DSA the platform must act on notices and document each removal with a statement of reasons. Under CDSM Article 17 the qualifying platform is directly liable and must make best efforts to prevent the upload and keep it down. The burden moves from the rights holder toward the platform from left to right. Per 17 U.S.C. § 512, Regulation (EU) 2022/2065 (DSA) Arts. 16–17, and Directive (EU) 2019/790 (CDSM) Art. 17.

What the rights record sets in motion

Article 17 has teeth because rights holders can act on it before a single clip is uploaded. The duty to make best efforts to keep a work unavailable applies once a rights holder has provided the platform with the relevant and necessary information about the work. That information is what sets the platform's duty in motion. A rights holder who supplies a reference file and ownership data is no longer asking the platform to react after the fact; the platform now carries a standing obligation to prevent that identified work from reappearing. The Court of Justice of the European Union upheld the core of Article 17 against a challenge that it violated free expression in Poland v. Parliament and Council, Case C-401/19 (26 April 2022), reading the obligation together with safeguards for lawful uses such as quotation and parody. The duty survived, and it now governs the single market.

The European Commission's guidance on Article 17 spells out the consequence: the more relevant and accurate the information a rights holder provides, the more the platform's best-efforts obligation bites. The stronger a rights holder's evidence file, the more of the work the platform's own duty carries. Under §512 a notice removes only the one instance it names. Under Article 17 a well-built rights file triggers an ongoing duty to prevent.

What a multi-jurisdiction posture actually requires

The same clip therefore demands two different motions at once, and the failure mode is running one motion everywhere. A US-only posture means chasing reappearances one notice at a time on platforms that, in the EU, already owe a standing duty to keep the work down. An EU-only posture leaves the American instances live, because no §512 notice was ever sent. Neither posture covers the clip; each leaves it live somewhere.

Three operating principles follow, and they hold across regimes precisely because the regimes disagree about who must act.

One: the rights record is the asset, not the notice. A §512 notice is a single event. A CDSM rights file is a durable instrument that keeps working. Building ownership evidence, reference files, and a clean chain of title once, to a standard that satisfies the more demanding regime, is what lets the same work be enforced under either. Clearance is a priority because ownership evidence built in advance is exactly what the strict regime rewards.

Two: documentation is now mandatory, not optional. The DSA's statement-of-reasons requirement means EU removals generate a paper trail by law. A serious enforcement program should keep its own record to that standard everywhere, not only where a regulation forces it. The same documentation that gives an uploader a clear, contestable reason for a removal is what stands behind the rights holder when that removal is challenged.

Three: the counter-notice path is not symmetric across borders. Under §512 a counter-notice can restore the work after a statutory waiting period. The DSA instead routes disputes through internal complaint handling and out-of-court dispute settlement bodies under its Article 20 and Article 21. A rights holder enforcing the same clip in both places faces two different procedures for the same objection, on two different timelines. Mapping that in advance, rather than discovering it mid-dispute, is the difference between a posture and a scramble. The live debate over whether the US should move toward more preventive duties is the subject of our piece on DMCA reform and the §512 study.

Beyond the US and EU

The US and the EU are the two poles, but they are not the only models, and the others are not variations on the American one. Canada sits further from it than the EU does: its Copyright Act runs a notice-and-notice regime, in which a platform that receives a complaint must forward it to the subscriber rather than take the work down. The same notice that pulls a clip in the United States merely delivers a warning in Canada. The point is not to memorize every regime. It is to stop assuming the American model travels — it does not. The clip is global; the law is local; the rights record is the one input that can be built once and made to satisfy all of them.

Which makes the practical lesson counterintuitive. The way to get a clip down in more places is to spend less effort chasing it and more building the evidence behind it, because that record is what every regime rewards — the reactive ones and the preventive ones alike. The rights holder who grasps that the DMCA is one model rather than the operating system of the internet is the one whose work comes down, and stays down, wherever it surfaces.

This article is general information about rights enforcement and international copyright law, not legal advice. Verights is the rights-enforcement brand of SocialCoaster Inc.; it is not a law firm, and reading it creates no attorney-client relationship. Nothing here describes or takes a position on any specific party, dispute, or pending matter, and it does not tell any reader what to do in their own situation. The law of each jurisdiction is summarized in general terms and changes over time. Consult qualified counsel in the relevant country about your situation.

Protect a clip in every market it travels to.

Verights helps rights holders build the rights record once and work it across regimes, from US § 512 notices to the EU's preventive duties. Talk to us about a multi-jurisdiction posture.

Talk to Verights