By the CUII with no judicial oversight. German organizations like the CCC and free speech activists very much hate that this is a thing.
[1]: https://media.ccc.de/v/39c3-cuii-wie-konzerne-heimlich-webse...
Jede DNS-Sperre einer strukturell urheberrechtsverletzenden Webseite (SUW) wird im Rahmen der CUII gerichtlich überprüft.
Das ist freiwillige Selbstverpflichtung der CUII-Mitglieder. Denn eigentlich besteht kein Richtervorbehalt für die Sperransprüche nach § 8 Digitale-Dienste-Gesetz (DDG). Aus diesem Grund sind auch die DNS-Sperren nach dem alten Verhaltenskodex mit behördlicher Beteiligung zulässig gewesen (Siehe Fragen: “Was verändert sich durch den neuen Verhaltenskodex der CUII?” und “Warum gab es zum Juli 2025 - nach jahrelanger Arbeit - einen Systemwechsel in der CUII?”).
old comment: CUII is not a governmental body so what the hell should they need a court order for when doing the thing that their members pay them to do? If your not happy with your internet access provider being a member of CUII, switch your internet access provider. I agree that CUII should publish a list of blocked domains as part of transparent communication and proving that they are doing a good job.
It's likely a process thing, Italy has had website bans since forever, but the new regulation applies _without going through a judge_. Some copyright holders can say "this website is infringing" and ISPs, CDNs etc.. are required to shut them down immediately.
A similar system was introduced in Spain, with the same problems, for the same reason (football $$$).
EDIT: to be clear, CF argues that they need to block the DNS globally, and that's unreasonable. The Italian authority argues that they have the skills to do a local block and are just being uncooperative.
they certainly do, they have the source IP and their platform lets them geolocate an ip
Similar to the UK's attempt to try and get noncompliant sites like Imgur and 4chan to block themselves from serving content to UK locations, I think the responsibility for country-wide blocks lies with the country attempting to regulate the space, not CDNs or websites.
I don't doubt that Italy is correct that CF has the technical ability do a local block like they're asking for, but I also don't see how CF is in any way (legally) compelled to do so. Whether or not Italy (or any country) is capable of doing so, or paying contractors for an appropriate solution, isn't CF's problem either.
Either Cloudflare can block pirate sites or ISPs will completely block Cloudflare (as seen in Spain). Which way do you prefer?
Locally, within Italy I can see the argument that CF can be compelled to adhere to blocking sites for any requests originating from, or being routed to Italy - so long as Cloudflare maintains any kind of presence there. That goes for any other country, too.
Realistically maintaining this kind of work puts a financial and engineering overhead on Cloudflare (or any CDN) for running operations in that country, and that incentivizes Cloudflare to push back on this request from any country. The logical response from CF is to refuse and threaten to remove all operations from the country if the country tries to force the issue, to prevent CF from getting pulled into the same requirements for multiple other countries, which is exactly what CF did a couple days ago.
I'll reiterate my previous stance - if a country wants to block part of the internet, that country needs to do it themselves and for the space within which they have authority to do so (their borders). At that point it's up to the citizens of the country to push back if they disagree, and if they don't want to be compared to China and their Great Firewall they shouldn't try and regulate the internet.
1. Do they offer any kind of service? YES.
2. Is the service they offer of a digital nature? Also YES.
It’s never been easier.
The Cloudflare CEO is clearly misinterpreting something that was lost in translation, which is the bureaucrats stating "Cloudflare must prevent access to XY from everywhere". For bureaucrats "everywhere" means "in my jurisdiction". I cannot believe that the Cloudflare CEO is trying to nitpick around a single word that he so clearly misinterprets.
Yes 100% they absolutely do.
There's a DNS blocklist from media industry applied by German ISPs and I assume Cloudflare was also asked to block these websites, so why didn't I read a story about Cloudflare making a big stir about the German DNS blocking?