[FTC Town Hall] Digital Rights Management FTC Town Hall – Panel 3: DRM In Action

J. Alexander Halderman – Prof of electrical engineering and CS at University of Michigan

FTC has a role to play in easing burden of DRM. Helping consumers understand what they’re buying, and helping them get what they pay for. Consumers are beginning to expect that products containing DRM will harm them, and that’s not good for either consumers or the content industries.

He researches security of DRM systems. At one time research was primarily around security of content, but there’s an emerging area of collateral damage caused by DRM measures. DRM has a tendency to create security risks beyond that presented by typical consumer software. Brings up the Sony rootkit, and a videogame DRM system called Safe Disk, which had a security bug and the software had kernel-level access to Windows systems. Automatic updates without notification, “phoning home” without notification, are also issues that reduce the users’ understanding and control.

Independent review is necessary to really vet security of programs, but DRM makers hide behind the DMCA – he’s been threatened with legal action against some of his research. He’d like to propose that DRM produces and the FTC to pursue measures to facilitate independent security review of DRM issues by adopting a “mere notice” provision of testing rather than asking permission as is required under current DMCA provisions. Also proposes notice to consumers of risky behavior like running kernel-level code. Also wants to propose technical transparency around disclosure of technical details of DRM systems on manufacturer’s web sites.

Patrick Ross – Exec. Director, Copyright Alliance

Creators are thrilled these days when people are actually willing to pay for content.

Mandatory labeling isn’t the answer – gives example of long information handouts that come with drug prescriptions that don’t get read.

Christpher Soghoian – Student Fellow, Berkman Center

Speaking to longevity issues – some content needs to call home to authenticate, either on use or periodically. Sometimes services go under, which prevents lawful access to content that’s been paid for. So far the large companies that have stopped services (Microsoft, Yahoo, Google, Walmart) have been able to provide for refunds or continued services upon outcry, but that might not be true of smaller operations. Consumer cannot predict failures – that’s why we have regulation. Education not sufficient in this area, so proposing action for FTC – force DRM providers to provide source code and authentication keys to be held in escrow by the FTC. “Obviously, this is a proposal that’s a little bit out there”. In the music market we’ve seen DRM fail. But the same companies are moving ahead with DRM in other spaces. Because companies won’t actually act rationally, we need government action.

Debbie Rose – Association for Competitive Technology

Her members are mostly small inventors and innovators. Interested in knowing what the rules are and how they can use them to make cool products. The message is the rules of the road are not that prohibitive and DMCA and DRM are not roadblocks to innovation. Recently written an “innovator’s guide to the DMCA” (not yet published). DMCA has two prohibitions with a host of exceptions – key is it’s a working mechanism. Access control technologies are being used in lots of fields besides entertainment – privacy protection for medical records, as an example.

Rashmi Rangnath – Staff Attorney, Public Knowledge

Harms caused by lack of interoperability – affects both consumers and competition. An example is older BluRay disks not playing at full resolution on older HDTVs because of copy protection technology.

Lock-in – example is iPods linked to iTunes – with FairPlay you couldn’t use the iTunes Music Store with players that weren’t Apple iPods, harming competition in the device market. FTC should investigate lock-in and consider it an unfair trade practice.

Preventing lawful use – DRM on DVDs prevents classroom use of clips. Professors in media studies departments got an exception in the rulemaking process. But consumers have to re-apply every three years and exemptions to not extend to traficking, so if you’re not technically savvy you can’t circumvent because nobody can send you the tools. We should amend the DMCA to allow circumvention for lawful uses, but in the meantime we should grant the Copyright Office more authority to grant wider exceptions.

Bo Anderson – President and CEO, Entertainment Merchants Association

Retailers are at the pivot point of commerce in entertainment goods, delivering product into hands of consumers. Have a brief but costly opportunity to help educate consumers, and get direct feedback from customers when they are displeased – the first to hear when trust is broken. Rebuilding broken trust is more expensive than keeping it in the first place. Retailers are concerned about the use of DRM when it abridges consumers rights of use, transferability, and rights of privacy. They’re concerned whenever DRM is used to require consumers to have a business relationship with the content providers as a condition of use.

When DRM is used to facilitate broad dissemination by facilitating the licensing of exclusive rights, it should be encouraged. When it’s used to restrict, burden or control dissemination beyond limited exclusive rights, it should be discouraged.

A fairly inane, though heated, discussion on business models, DRM, and consumer rights breaks out at the end.

[FTC Town Hall] Digital Rights Management FTC Town Hall – Second panel – legal landscape

The panel is moderated by Carl Settlemyer, Attorney with the Division of Advertising Practices, FTC, who gives a 3 minute overview of US copyright law (whew!).

Rob Kasunic – Principal Legal Advisor, U.S. Copyright Office. The DMCA. There’s always been a symbiotic relationship between technology and copyright laws.

He draws a link between DRM and access controls on files in operating systems. These were just technological methods, without any legal backing. Traditionally, copyright law was supported by practical constraints on physical copying, but with technology the law may not be enough to protect works.

Congress determined that the solution was to erect legal support for technological self-help measures used ot protect copyrighted works distributed in digital form. The current models of streaming subscription services are an example of models made possible by these protections.

Section 1201 created prohibitions for two activities – circumvention of technological measures (a1), and distribution of devices that circumvent measures (a2). No prohibition on fair use and other traiditonal limitations of the exclusive right of copyright – free to circumvent to preserve legitimate use.

Section 1201 rulemaking – Congress created a triennial rulemaking process as a “fail-safe” mechanism- carried out by Copyright OFfice. Library of Congress may create an exemption for “particular classes of works” for the ensuing three-year period. http://www.copyright.gov/1201/

Steven Metalitz – Attorney – Mitchell Sliberberg and Kunpp (Counsel to Pubklishers, Software Alliance, Entertainment Software Association, MPAA, and RIAA) – use of access controls has encouraged more access by more people. (?) Offers more choices to consumers. As DRM evolves, choices broaden. DRM has encouraged rights-holders to make more content available. DRM as a “key enabling technology” that should be encouraged. Copyright owners recognize the issue of disclosure to consumers and are experimenting with different methods to do so. Content companies have a great incentive to match the expectations of consumers to make their businesses live.

Corynne McSherry – Electronic Frontier Foundation

Copyright is not just about protecting the rights of owners to control creative works – it’s a balance of the rights of content owners and the public. Unfortunately DRM can upset that balance in ways that are harmful to consumers and innovation.

User rights – Fair Use – protects basic personal uses. Reasonable consumer expectations include personal and backup copies, time-shifting, space-shifting, etc. Consumers also expect innovation – new tools and uses, e.g. SlingBox, BnetD, Real DVD. Consumers don’t expect to have to repurchase content every time a new technology comes along. Content owners use the anti-circumvention provisions of the DMCA to shut down innovation. RealDVD tried to play by the rules in licensing DVD technology to make backup copies of DVDs, but they were sued and are now under a restraining order.

There’s also “first sale rights” What about content in the Kindle?

Consumers feel abandoned when services shut down – e.g. Yahoo! Music, MSN Music, etc.

The rest of the story – EULAs – Contract law.

We need disclosures in advance, not pop-ups after you purchase. Disclosures won’t solve the problems with DRM, though.

Justin Hughes – Cardozo School of Law, Yeshiva University

Ten years after the DMCA, we have a world full of digital locks, but is not characterized by digital lockdowns. We’re now in a better place to understand the impacts of DRM. When the DMCA was drafted, there wasn’t much discussion at all about disclosure. Are we here to engage in substantive regulation of the marketplace, or regulation of information? We do have problems of full and adequate disclosure. But we also have substantive issues – securing consumer rights.

DMCA as an attempt at substantive regulation. If your regulation is sufficiently light, it becomes part of the background environment. That’s been true of the DMCA. We might have ended up in a technological arms race, but we don’t live in that world because of the DMCA. What the regulation did not do was to attempt to determine the relation between copyright and contract law. Other countries have provided for capacity to circumvent the DRM in certain circumstances, but that would not be easy in the US.

We could do more on information regulation, but we just don’t know enough. Government agencies that regulate don’t do empirical research about consumer expectations. But the threat of regulation can help keep content owners doing the right things.

Salil Mehra – Beasley School of Law, Temple University

Common Law Fraud – making an intentional, material misrepresentation to another with knowledge of its falsity, for the purpose of inducing the other person to act. The other person relies upon such misrepresentation with resulting injury.

Something like fraud happens with the way DRM is implemented.

Digital Fraud – differences? Don’t usually see Affirmative misrepresentation, but rather concealment – things that appear whole, but are not. An unfair surprise leading consumers to get less than they bargain for. Technology provides new ways of giving people less than they thought they paid for. People buy digital content but don’t realize what they’re buying.

Nicolas Jondet – PhD Candidate, Edinburg Law School

Can we be informed by what’s happening in French law?

DVD Region coding is an issue outside the US. Another issue is videogames. There’s been a lot of litigation in France around DRM on music CDs, where it was introduced early. The most important issue is private copying – there’s a private copy provision in France. You pay a tax on blank media that is supposed to compensate, and consumers expect they’re allowed to make a copy.

French law wasn’t passed until 2006.

Court held in 2005 that DRM CD sold by BMI was defective because it wouldn’t play on all players. But a court held that Warner was ok having disclosed that a CD wouldn’t play on all players. Under French law (according to a court) if you use the CD logo it must play on all players or else it’s a deceptive practice. Sony was found guilty of deceptive practices for Sony Connect service, because they didn’t disclose that you could only purchase content with a Sony device.

New legal requirement that DRM can’t prevent copyright protections and there must be interoperability between DRM schemes. No cases brought yet, but it has had an impact – Apple called it “state-sponsored piracy”, and US thought it was in breach of WTO. But a few months later, Apple changed to DRM-free music.

Carl asks about advertising – does ad language conflict with terms and conditions when they claim you can “own” or “buy” content? Steve – if it’s a sale then first sale doctrine apply, but if it’s a license, then it depends on the terms of the license. But first sale applies to the copy you purchase, not the copy you’ve made online. DRM may help provide a solution to this problem – could enable someone to make a copy, transfer it to someone else, and then no longer have access to the first copy. Corynne – you don’t need DRM to answer this problem. Just have the consumer delete the original copy. (audience mutters, “yeah, right”). The distinction between a sale and a license has been an important one – and if there’s advertising implying you’re owning or buying, then it’s deceptive. Justin – do not assume that the physical world analogies translate to the online world. Maybe we shouldn’t be using words like own or buy.

In response to a question about whether it’s fair to use terms like “buy” and “sale” to transactions that depend on the continued operation of authentication servers, Steve asks whether people trying to innovate should be held hostage to having to continue business in perpetuity. That seems disingenuous to me – people should feel free to try those business models, but make it clear that it’s a content rental or loan or something.

Apple – the right hand giveth and the left hand nickle-and-dimeth you

I’m really happy to see that all of the content music in the iTunes store will be available with no DRM. That’s a big step forward – just tonight I was denied the right to play some of my music on my family room computer because it’s not authorized for my purchased iTunes content and I already have the maximum five machines authorized. Unfortunately two of those machines are no longer functioning, so I can’t de-authorize them. So I thought – here’s a perfect opportunity to change those tunes I purchased from iTunes (not very many – usually I buy through eMusic or Amazon).

Then I found out that Apple wants 30 cents a tune to change content I already paid for to the non-DRM’ed version. Does anybody besides me think that’s totally outrageous?

Sony ditches the video DRM (on at least one device)

Gizmodo is reporting that Sony’s upcoming digital video recorder for the PlayStation 3: will record television to MPEG2 files that can be easily copied off the system to any storage medium you’d like. That’s right, no DRM. Wow! Now that’s progress!

Gizmodo is reporting that Sony’s upcoming digital video recorder for the PlayStation 3:

will record television to MPEG2 files that can be easily copied off the system to any storage medium you’d like. That’s right, no DRM.

Wow! Now that’s progress!