Anti-circumvention


Anti-circumvention refers to laws which prohibit the circumvention of technological barriers for using a digital good in certain ways which the rightsholders do not wish to allow. The requirement for anti-circumvention laws was globalized in 1996 with the creation of the World Intellectual Property Organization's Copyright Treaty.

Background

Article 11 of WIPO Copyright Treaty "Obligations concerning Technological Measures" requires contracting parties to

"...provide adequate legal protection and effective legal remedies against the circumvention of effective technological measures that are used by authors in connection with the exercise of their rights under this Treaty or the Berne Convention and that restrict acts, in respect of their works, which are not authorized by the authors concerned or permitted by law."

Article 12 of WIPO Copyright Treaty "Obligations concerning Rights Management Information"
requires contracting parties to

"...provide adequate and effective legal remedies against any person knowingly performing any of the following acts knowing, or with respect to civil remedies having reasonable grounds to know, that it will induce, enable, facilitate or conceal an infringement of any right covered by this Treaty or the Berne Convention:
to remove or alter any electronic rights management information without permission;
to distribute, import for distribution, broadcast or communicate to the public, without authority, works or copies of works knowing that electronic rights management information has been removed or altered without authority."

Law by region

European Union

The following anti-circumventing rules were implemented in European Directive 2001/29/EC of the European Parliament and of the council of on the harmonisation of certain aspects of copyright and related rights in the information society.
This directive states in article 6, 'Obligations as to technological measures':
  1. Member States shall provide adequate legal protection against the circumvention of any effective technological measures, which the person concerned carries out in the knowledge, or with reasonable grounds to know, that he or she is pursuing that objective.
  2. Member States shall provide adequate legal protection against the manufacture, import, distribution, sale, rental, advertisement for sale or rental, or possession for commercial purposes of devices, products or components or the provision of services which:
  3. * are promoted, advertised or marketed for the purpose of circumvention of, or
  4. * have only a limited commercially significant purpose or use other than to circumvent, or
  5. * are primarily designed, produced, adapted or performed for the purpose of enabling or facilitating the circumvention of, any effective technological measures.
  6. For the purposes of this Directive, the expression 'technological measures' means any technology, device or component that, in the normal course of its operation, is designed to prevent or restrict acts, in respect of works or other subject matter, which are not authorised by the rights holder of any copyright or any right related to copyright as provided for by law or the sui generis right provided for in Chapter III of Directive 96/9/EC. Technological measures shall be deemed 'effective' where the use of a protected work or other subject matter is controlled by the rights holders through application of an access control or protection process, such as encryption, scrambling or other transformation of the work or other subject-matter or a copy control mechanism, which achieves the protection objective.
  7. Notwithstanding the legal protection provided for in paragraph 1, in the absence of voluntary measures taken by rights holders, including agreements between rights holders and other parties concerned, Member States shall take appropriate measures to ensure that rights holders make available to the beneficiary of an exception or limitation provided for in national law in accordance with Article 5,,,,, or the means of benefiting from that exception or limitation, to the extent necessary to benefit from that exception or limitation and where that beneficiary has legal access to the protected work or subject-matter concerned.

    United States

In the United States, the Digital Millennium Copyright Act has implemented the treaty provisions regarding the circumvention of some technological barriers to copying intellectual property.

Circumvention of Access Controls

of the DMCA states:

No person shall circumvent a technological measure that effectively controls access to a work protected under .

The Act defines what it means in Section 1201:
As used in this subsection—
to "circumvent a technological measure" means to descramble a scrambled work, to decrypt an encrypted work, or otherwise to avoid, bypass, remove, deactivate, or impair a technological measure, without the authority of the copyright owner; and
a technological measure "effectively controls access to a work" if the measure, in the ordinary course of its operation, requires the application of information, or a process or a treatment, with the authority of the copyright owner, to gain access to the work.

Thus, if there is some "technological measure that effectively controls access to a work", it is illegal to circumvent that measure. However, creates several exceptions to this rule, and the Library of Congress is empowered to create additional exceptions.

Distribution of Circumvention Tools

The Act also prohibits the distribution of tools that enable a user to circumvent access controls or controls that protect a right of the copyright holder.

Access Controls

provides:

No person shall manufacture, import, offer to the public, provide, or otherwise traffic in any technology, product, service, device, component, or part thereof, that—
is primarily designed or produced for the purpose of circumventing a technological measure that effectively controls access to a work protected under this title;
has only limited commercially significant purpose or use other than to circumvent a technological measure that effectively controls access to a work protected under this title; or
is marketed by that person or another acting in concert with that person with that person's knowledge for use in circumventing a technological measure that effectively controls access to a work protected under this title.

Rights Controls

Distribution of tools intended to circumvent controls that protect a right of the copyright holder is also prohibited. states:

No person shall manufacture, import, offer to the public, provide, or otherwise traffic in any technology, product, service, device, component, or part thereof, that—
is primarily designed or produced for the purpose of circumventing protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof;
has only limited commercially significant purpose or use other than to circumvent protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof; or
is marketed by that person or another acting in concert with that person with that person's knowledge for use in circumventing protection afforded by a technological measure that effectively protects a right of a copyright owner under this title in a work or a portion thereof.

A rights control is defined in :

a technological measure "effectively protects a right of a copyright owner under this title" if the measure, in the ordinary course of its operation, prevents, restricts, or otherwise limits the exercise of a right of a copyright owner under this title.

Unlike access controls, the DMCA does not ban the circumvention of rights controls. It was thought that traditional copyright law was sufficient to protect the interests of copyright holders in cases of individual acts of circumvention.

Other Rights

The Act states that its provisions are not intended to modify a number of already existing rights. provides:
Other Rights, Etc., Not Affected.—
Nothing in this section shall affect rights, remedies, limitations, or defenses to copyright infringement, including fair use, under this title.
Nothing in this section shall enlarge or diminish vicarious or contributory liability for copyright infringement in connection with any technology, product, service, device, component, or part thereof.
Nothing in this section shall require that the design of, or design and selection of parts and components for, a consumer electronics, telecommunications, or computing product provide for a response to any particular technological measure, so long as such part or component, or the product in which such part or component is integrated, does not otherwise fall within the prohibitions of subsection or.
Nothing in this section shall enlarge or diminish any rights of free speech or the press for activities using consumer electronics, telecommunications, or computing products.

Fair Use and Circumvention

Critics of the DMCA have often noted the absence of an explicit exception for circumvention to enable fair use.
Section 103 of the DMCA does state that othing in this section shall affect rights, remedies, limitations, or defenses to copyright infringement, including fair use, under this title. However, a violation of the anti-circumvention provisions of the DMCA is not itself copyright infringement and therefore it is unclear whether fair use can be raised as a defense in circumvention cases.
Courts have come out both ways on the issue. Some have held that the anti-circumvention provisions can only be violated when the circumvention has a connection to copyright infringement. For example, in the Federal Circuit held that a copyright holder must show a connection to copyright infringement in order to succeed in a claim under the DMCA.
Similarly, in Chamberlain Group, Inc. v. Skylink Technologies, Inc. 381 F.3d 1178 the court held that distribution of a circumvention device did not violate the anti-circumvention provisions because its use did not lead to any copyright violation.
However, in a number of cases involving DVD decryption courts have held that there is no fair use defense in circumvention cases. In Universal City Studios v. Reimerdes, 111 F. Supp. 2d 294, 322, the court stated that "f Congress had meant the fair use defense to apply to such actions, it would have said so."

Reverse Engineering and Circumvention

Sec. 103 of the DMCA says that you are allowed to reverse-engineer a protected program in order to figure out how to get it to interoperate with other programs.. The section states:

Reverse Engineering.—
Notwithstanding the provisions of subsection, a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title.
Notwithstanding the provisions of subsections and, a person may develop and employ technological means to circumvent a technological measure, or to circumvent protection afforded by a technological measure, in order to enable the identification and analysis under paragraph, or for the purpose of enabling interoperability of an independently created computer program with other programs, if such means are necessary to achieve such interoperability, to the extent that doing so does not constitute infringement under this title.
The information acquired through the acts permitted under paragraph, and the means permitted under paragraph, may be made available to others if the person referred to in paragraph or, as the case may be, provides such information or means solely for the purpose of enabling interoperability of an independently created computer program with other programs, and to the extent that doing so does not constitute infringement under this title or violate applicable law other than this section.
For purposes of this subsection, the term "interoperability" means the ability of computer programs to exchange information, and of such programs mutually to use the information which has been exchanged.

Notable cases

The Electronic Frontier Foundation criticized DMCA anti-circumvention clauses, saying it "chills free expression and scientific research", jeopardizes fair use, impedes competition and innovation, and interferes with computer intrusion laws.

Australia

Australia prohibits circumvention of "access control technical protection measures" in Section 116 of the Copyright Act. The law currently imposes penalties for circumvention of such measures as well as the manufacturing and distribution of tools to enable it.
DRM may be legally circumvented under a few distinct circumstances which are named as exceptions in the law:
  1. permission of the rightsholder
  2. enabling interoperability with copyrighted software
  3. encryption research
  4. security testing
  5. disabling access to private information
  6. national security or law enforcement
  7. library acquisition decisions
  8. acts prescribed by regulation
A person circumventing the access control bears the burden of proof that one of these exceptions apply.
Penalties for violation of the anti-circumvention laws include an injunction, monetary damages, and destruction of enabling devices.

Notable cases