For all you people getting mad about this, you are obviously missing the point. There are lots of people who have unsecured routers, malware installed on their computers, or tech savvy grandkids....just to name a few situations. IP addresses are nothing more than numbers. In US law, you have to prove that the person committed the crime, not a number. It's not like a social security number where (barring ID theft) it is really only tied to one person. I could be sitting outside using your router. I could be using your computer as a proxy. Or maybe...just maybe, you are the one pirating all the music. The problem is, there's really no way to tell simply by an IP address. That means there's no reasonable cause to subpoena personal information. Would you really want to be sued, spend tons of money defending yourself, have your name drug through the mud, and possibly end up paying a penalty for a crime that I committed???? This is a win for privacy and a win for civil rights. And don't go QQ about how only stupid ppl get hacked. Even the best IT pros can get hacked.