France's Zombie Copyright Law Cost €82 Million and Caught Nobody

France spent €82 million on a copyright system that collected €87,000 in fines. The automated system failed, but the mass surveillance powers it created are very much alive.

France built a machine to police internet piracy. Over a decade, it cost taxpayers €82 million. In return, it generated €87,000 in fines. That is not a typo. A system that costs nearly a thousand times more to run than it collects is not a matter of law; it’s a monument to bureaucratic inertia. The law, known as HADOPI, was supposed to strike fear into file-sharers with a three-strikes model. Instead, it became a zombie, technically useless but still shambling through the halls of French justice, consuming public funds and proving only one thing: you can’t automate away a problem you don’t understand.

The mechanism was called 'graduated response.' Your ISP, acting on demands from copyright holders, would send you two warning notices by email. A third accusation within a year escalated your case to a special judge who could impose a €1,500 fine and, theoretically, suspend your internet access. At its peak, the machine processed 50,000 allegations a day, creating a vast database linking IP addresses to the civil identities of subscribers. Yet it had a fatal flaw. In 2013, the one and only disconnection order ever issued proved unenforceable. The court demanded the user's web access be cut, but stipulated that their phone line, email, and television services must remain active—a surgical separation most ISPs were technically unequipped to perform. The order was quietly dropped.

The money flows in one direction: from French taxpayers to a state agency that serves the interests of copyright conglomerates. For €82 million, these rights holders bought a government-sanctioned threat, even if it was hollow. The opposition comes from digital rights groups like La Quadrature du Net, which have fought HADOPI in court for years. Their key argument—that mass, indiscriminate logging of IP addresses violates EU privacy laws like GDPR—was dealt a stunning blow in 2024. The EU’s highest court ruled that such surveillance doesn’t constitute a 'serious interference' with fundamental rights, effectively blessing the practice. It was a massive win for the copyright lobby and a dangerous precedent for every internet user in Europe.

HADOPI will not die in the next twelve months. The 2024 court decision gave it and its backers a new lease on life, transforming it from a failed policy into a legal precedent. The system will continue to be a financial black hole, but its symbolic value to the content industry is now immense. They can point to the EU's top court and argue that mass IP logging is a legitimate tool for policing the network. This is no longer just a French problem; it's a template. The fight over HADOPI was never really about stopping piracy. It was about establishing the principle that your online activity is subject to automated inspection. The real question isn't whether this system can work. We know it can't. It's who gets to decide the price of that failure—and why is it always our privacy?