DMCA Policy: Safe Harbor, Counter-Notices, and Penalties

A DMCA policy is the page a website publishes to explain how it handles copyright infringement complaints under the Digital Millennium Copyright Act. If your site lets users upload anything (comments, photos, videos, files, listings), you need one to qualify for the safe harbor that shields you from liability when a user posts something infringing. At minimum, the policy has to name a designated agent, tell copyright owners how to send a takedown notice, tell users how to file a counter-notification, and warn repeat infringers that their accounts will be terminated.

Why the Policy Exists: Safe Harbor

Congress created safe harbor through Title II of the DMCA so that platforms could operate without being sued every time a user uploaded infringing material.¹ Without it, a single platform could face statutory damages of up to $150,000 per work for willful infringement by its users.² Safe harbor takes that exposure off the table, but only if the provider follows every step in the statute. Miss one, and the protection is gone.

Section 512 covers four kinds of online activity: transitory transmissions by ISPs, system caching, storage of material uploaded by users, and information-location tools like search engines.³ Most DMCA policies are written for the third category, because hosting user uploads is where takedown disputes actually happen.

What the Policy Alone Does Not Do

Publishing the page is a starting point, not the whole job. For user-hosted content, a service provider also has to meet three independent conditions: no actual knowledge that specific material is infringing (and prompt removal if that knowledge arrives), no direct financial benefit from infringing activity the provider could have controlled, and expeditious removal in response to a valid takedown notice.³ Every category of safe harbor, not just hosting, also requires a repeat infringer policy and accommodation of standard technical measures. The policy page documents the mechanics; the safe harbor comes from actually running them.

Designating and Renewing a Copyright Agent

Before you can claim safe harbor for user content, you have to designate an agent to receive copyright complaints and publish that agent’s name, address, phone number, and email on your site somewhere the public can find it.³ The same information goes to the U.S. Copyright Office through its online registration system, which feeds the public DMCA Designated Agent Directory. The fee is $6 per designation, amendment, or resubmission.⁴

Every designation must be renewed at least every three years, either by updating the information or by resubmitting it unchanged. Miss the window and the designation expires.⁵ An expired designation can strip safe harbor entirely, which is a steep price for forgetting a $6 administrative task. Set a calendar reminder well before the three-year mark.

What a Takedown Notice Must Contain

Your policy should tell copyright owners how to submit a takedown notice and what has to be in it. A valid notice is a written communication to your designated agent containing six elements:

A physical or electronic signature of the copyright owner or an authorized representative.
Identification of the copyrighted work. If multiple works on one site are involved, a representative list is enough.
Enough information to locate the infringing material, typically a URL.
Contact information for the complainant: address, phone, and email.
A statement that the complainant believes in good faith that the use is not authorized by the owner or the law.
A statement that the information is accurate, and under penalty of perjury, that the complainant is authorized to act on behalf of the copyright owner.³

The perjury language on that last item applies specifically to the authorization claim, not to the whole notice. False notices still carry consequences under the misrepresentation provision, but the perjury standard itself is narrower than many people assume.

Defective Notices

A notice that fails to substantially comply with the identification and location requirements does not give the platform actual knowledge of infringement. A vague or incomplete notice does not put you on the hook for failing to act. The statute does expect you to try to contact the sender or take reasonable steps to help them fix the notice, but safe harbor stays intact while that happens.³ Many platforms build in a workflow for bouncing back notices that lack a URL or fail to identify the specific work.

Removing Content and Notifying the User

Once you receive a valid notice, you have to act “expeditiously” to remove or block the material. The statute does not define that word, and no court has drawn a bright line. In practice, most platforms respond within one to three business days. Sitting on a valid notice for weeks would almost certainly fall outside anything a court would treat as expeditious.

After removing the content, you must take reasonable steps to notify the user who posted it, usually by forwarding a copy of the notice so the user knows who complained and why.⁶ You are not judging whether the complaint has merit at this stage. You are running a prescribed process to keep your safe harbor, and your role stays neutral.

The Counter-Notification Process

Your policy also has to explain how a user whose content was removed can push back. A counter-notification is a written communication to your designated agent with four elements:

The user’s physical or electronic signature.
Identification of the removed content and the URL where it appeared before removal.
A statement under penalty of perjury that the user believes in good faith the material was removed because of a mistake or misidentification.
The user’s name, address, and phone, plus consent to the jurisdiction of the federal district court where the user lives (or any district where the provider can be found, if the user is outside the United States), and agreement to accept service of process from the original complainant.⁷

Note the asymmetry with takedown notices. Here, the perjury standard applies to the substance of the claim, not just to authorization. A user filing a counter-notification is personally attesting under oath that the removal was wrong.

When a valid counter-notification arrives, promptly forward a copy to the original complainant and tell them the material will be restored in 10 business days. Restore the content no earlier than 10 and no later than 14 business days after receiving the counter-notification, unless the copyright owner files a court action seeking a restraining order against the user and notifies you before that window closes.⁷ If the copyright owner does nothing in that window, the content goes back up and you face no liability for restoring it.

Repeat Infringers and Technical Measures

Every safe harbor category requires that the provider adopts and reasonably implements a policy for terminating users who repeatedly infringe. The policy has to be communicated to users, typically through the terms of service or the DMCA page itself.³

The statute does not set a magic number of strikes, and courts have not imposed one. What matters is that you have a documented, consistent system for tracking complaints and that you actually terminate accounts when the threshold is met. A policy that exists on paper but never leads to account closures will not survive scrutiny. Courts look at whether the platform genuinely enforces the rule.

Providers must also accommodate standard technical measures that copyright owners use to identify or protect their works. Those are technologies developed through an open, voluntary, multi-industry process, available on reasonable and nondiscriminatory terms, and not imposing heavy costs on the provider.³ Few technologies have met all three criteria, so this piece has generated less litigation than the repeat infringer rule. Still, a provider that actively blocks or circumvents a qualifying measure would lose safe harbor.

Penalties for Abusing the System

Section 512 punishes abuse of the takedown process. Anyone who knowingly makes a material misrepresentation that content is infringing, or that content was removed by mistake, can be held liable for damages, costs, and attorney fees suffered by the injured party. That injured party can be the user whose content was wrongly targeted, the copyright owner harmed by a false counter-notification, or the service provider caught in the middle.³

The Ninth Circuit’s 2015 decision in Lenz v. Universal Music Corp. added a duty on the sender side. The court held that copyright owners must consider in good faith whether allegedly infringing material qualifies as fair use before sending a takedown. Skipping that analysis and filing anyway can amount to the kind of knowing misrepresentation that triggers liability. The standard is not an exhaustive legal review, but fair use cannot be ignored.

Subpoenas to Identify Users

One point worth flagging in the policy for user awareness: copyright owners can request a subpoena under Section 512 to unmask an anonymous user accused of infringement. The owner files three items with the clerk of any U.S. district court, namely a copy of the takedown notice, a proposed subpoena, and a sworn declaration that the sole purpose is to identify the alleged infringer and that the information will only be used to protect rights under copyright law.³

If the notice meets the statutory requirements, the proposed subpoena is in proper form, and the declaration is properly executed, the clerk must issue the subpoena. The service provider then has to promptly disclose whatever identifying information it holds. No full lawsuit is required; the mechanism is built into the statute. Uploading under a pseudonym does not guarantee anonymity, and the policy should not suggest otherwise.

1
U.S. Copyright Office. The Digital Millennium Copyright Act of 1998
2
Office of the Law Revision Counsel. 17 US Code 504 – Remedies for Infringement: Damages and Profits
3
Office of the Law Revision Counsel. 17 USC 512 – Limitations on Liability Relating to Material Online
4
U.S. Copyright Office. DMCA Directory FAQs
5
U.S. Copyright Office. Renewing a Designation
6
U.S. Copyright Office. Section 512 of Title 17 – Resources on Online Service Provider Safe Harbors and Notice-and-Takedown System
7
Office of the Law Revision Counsel. 17 US Code 512 – Limitations on Liability Relating to Material Online