Page:2021 Final 1201 Rule.pdf/9

Rh certain legacy consoles that manufacturers no longer support. Opponents argued that the proposed exemption would create a risk of market harm for these devices and that adequate alternatives to circumvention exist.

NTIA recommended expanding the current exemptions by merging them into a single exemption that would permit circumvention for the diagnosis, maintenance, and repair of all software-enabled devices, machines, and systems. In addition, NTIA recommended allowing “lawful modification that is necessary for a repair or maintenance” and software modifications relating to device functionality.

For the reasons discussed in the Register’s Recommendation, the Register recommended expanding the existing exemption for diagnosis, maintenance, and repair of certain categories of devices to cover any software-enabled device that is primarily designed for use by consumers. For video game consoles, the Register concluded that an exemption is warranted solely for the repair of optical drives.

The proposals to merge the two existing repair exemptions would also effectively broaden the existing vehicle exemption by: (1) No longer limiting the class to “motorized land vehicles”; and (2) removing other limitations in the exemption, including that users comply with other laws. Opponents did not object to including marine vessels in the vehicle exemption, but opposed removing language requiring compliance with other laws. For the reasons discussed in the Register’s Recommendation, the Register recommended that the exemption for land vehicles be expanded to cover marine vessels and to remove the condition requiring compliance with other laws.

Finally, Summit Imaging, Inc. and Transtate Equipment Co., Inc. petitioned to exempt circumvention of TPMs on software-enabled medical devices and systems for purposes of diagnosis, maintenance, and repair. Petitioners also sought access to related data files stored on medical devices and systems, including manuals and servicing materials. Opponents argued that this exemption is unnecessary because adequate authorized repair services are available. They also contended that the proposed uses are commercial in nature, would harm the market for medical devices and systems, may undermine patient safety and create cybersecurity risks, and would interfere with manufacturers’ regulatory compliance obligations. For the reasons discussed in the Register’s Recommendation, the Register recommended a new exemption allowing circumvention of TPMs restricting access to firmware and related data files on medical devices and systems for the purposes of diagnosis, maintenance, and repair.

10. Proposed Class 13: Computer Programs—Security Research

Two petitions sought to expand the current exemption that permits circumvention of TPMs on computer programs for good-faith security research. Together, the petitions sought to eliminate several limitations within the exemption and to explicitly extend the exemption to privacy research. Proponents generally argued that the limitations have chilled valuable security research, primarily by creating uncertainty about whether conducting or reporting security research could result in liability under section 1201. Six parties opposed class 13 at least in part; they argued that the existing exemption has sufficiently enabled good-faith security research and that the record did not justify removing the limitations. NTIA supported the elimination of several limitations, but did not recommend modifying the existing exemption to address privacy-related research activities explicitly.

For the reasons discussed in the Register’s Recommendation, the Register concluded that because the exemption is broadly defined and is not limited to specific issues or subjects relating to security flaws or vulnerabilities, expanding it to expressly cover privacy research is unnecessary. Regarding the specific limitations, the Register recommended removing the condition that circumvention not violate “other laws” and instead clarifying that the exemption does not provide a safe harbor from liability under other laws. The Department of Justice submitted comments supporting this change. The Register declined to recommend removal of limitations pertaining to access to and use of computer programs, finding a lack of specific evidence establishing adverse effects resulting from those provisions. The Register also did not recommend removal of the requirement that devices be lawfully acquired.

11. Proposed Class 14(a): Computer Programs and 14(b) Video Games—Preservation

Proposed Classes 14(a) and 14(b) seek to amend the existing exemptions permitting libraries, archives, and museums to circumvent TPMs on computer programs and video games, respectively, for the purpose of preservation activities. Specifically, proponents seek to remove the requirement that the preserved computer program or video game must not be distributed or made available outside of the physical premises of the institution. Proposed Class 14(b) would also incorporate the current eligibility requirements for the software preservation exemption into the video game preservation exemption.

Proponents argued that enabling remote access to the works is likely to be a fair use, based in part on a general federal policy favoring remote access to preservation materials, as reflected in various provisions of the Copyright Act. They also argued that the proposed uses would not affect the potential market for or value of the copyrighted works because only works that are no longer reasonably available in the commercial marketplace would be subject to the exemption. NTIA supported the removal of the premises limitation in both exemptions.

Joint Creators and the Entertainment Software Association opposed removing the premises limitation, with most arguments directed to the video game class. They expressed concern that, because the proposed exemption did not limit beneficiaries of the exemption to authenticated educators or researchers, if preserved video games were made available outside the premises of an institution, they would become accessible to the general public, thereby adversely affecting the existing market for older video games.

For the reasons discussed in the Register’s Recommendation, the Register concluded that off-premises access to software as described in the proposal is likely to be noninfringing, with the limitation that the work be accessible to only one user at a time and for a limited time. With respect to video games, the Register concluded that proponents failed to carry their burden to show that the uses are likely noninfringing, and noted the greater risk of market harm in this context given the market for legacy video games. The Register therefore recommends that the Librarian amend