In this case, there is a safe harbor where ISPs can avoid liability by enforcing a policy against their customers that eventually cuts them off for repeated infringement. Cox stepped outside of this safe harbor by not following their own policy. But the court says that doesn't automatically make them liable.