The memorandum states ISPs "commit to disclose … the identity and contact details of alleged infringers and their user names," but only "insofar as permitted by applicable data protection laws," which may require the obtaining of court orders in some countries.