The U.S. Supreme Court's March 2025 ruling in Cox v. Sony tightened the standard for secondary copyright liability, confirming that service providers are not automatically liable for user infringement without evidence of intent or material contribution. GitHub was cited in an industry amicus brief as a central example of why this standard matters. The decision gives developer platforms legal footing to operate at scale without preemptive censorship of user-generated content.

GitHub's 2025 Transparency Center data shows the highest volume of DMCA circumvention claims since reporting began, driven by a small number of large takedowns. Meanwhile, the 2024 DMCA Section 1201 triennial review closed without adopting a proposed exemption for generative AI security research, despite support from HackerOne, the Hacking Policy Council, and academic coalitions. The 2027 review is the next window, and GitHub is soliciting developer input now on AI model inspection, safety research, and interoperability use cases that lack clear exemption coverage.

The full article is worth reading for the specifics on how the Cox v. Sony standard maps to platform liability thresholds, the unresolved AI-research exemption gap in Section 1201, and GitHub's transparency data breakdowns on appeals and reinstatements. Coming next: GitHub's policy blog will cover age assurance laws in U.S. states, Brazil, and Europe, focusing on how consumer-facing regulations risk collateral damage to open source infrastructure like package managers and operating systems.

[READ ORIGINAL →]