A purchased e-book that opens only on certain devices is drm digital rights management in action: technology that controls and manages access to copyrighted material. Whether that is acceptable depends on who sets the limits and how clearly buyers can see them.
This explainer sits within our coverage of digital economy policy. It starts with the misunderstandings that make DRM debates go in circles, then separates the technology from the law and from the commercial trade-offs.
How DRM works
DRM is a set of technical controls that decides who may open a copyrighted file, on which devices and under what conditions. Fortinet’s glossary describes it as the use of technology to control and manage access to copyrighted material. In practice, that typically means codes that prohibit copying or limit the number of devices a product can access.
Encryption and keys
Most DRM schemes start with encryption. According to Kiteworks, DRM applications encrypt media, data, e-books, software and other copyrighted material, so only holders of the decryption keys can access the content. The file itself can be copied freely, but without a key it is unreadable. That is why a store, an app or an account usually sits between the buyer and the content.
Copy protection and permission management
Kiteworks separates DRM into two strategy types. Copy protection controls access by preventing users from making copies of a work. Permission management limits who may use a work. The two are often combined, but they feel different to a buyer. A copy lock stops an action, while a permission rule decides whether you qualify to use the file at all.
Common misunderstandings about DRM
Most disputes about DRM come from treating it as a single blunt tool. The table below sets the usual assumptions against what the evidence supports.
| Common belief | What the evidence supports | Planning use |
|---|---|---|
| DRM only blocks copying | Copy protection is one of two strategy types. The other, permission management, limits who may use a work. | Ask which kind a store applies, not only whether copies are blocked. |
| DRM exists only to stop piracy | It can also limit how many devices a customer may use and set expiry dates that block access after a date. | Read the device and time conditions before buying. |
| A purchased file is open to anyone who holds it | Encrypted content is accessible only to holders of the decryption keys. | Expect an account or app to be required for playback. |
| DRM only benefits publishers | It lets creators ensure that only paying users can access their videos. | Treat it as an income tool whose side effects fall on buyers. |
These descriptions draw on the Fortinet DRM glossary and the Kiteworks DRM glossary.
The practical lesson is that DRM is a bundle of choices. A seller can lock files tightly or lightly, and each choice shifts risk between the rights holder and the buyer.
Major DRM systems by platform
Named DRM systems tend to follow the platform that built them. The examples below show how different the restrictions can be, even when the goal is the same.
| System or platform | Owner | What it does | Planning use |
|---|---|---|---|
| FairPlay | Apple | Protects content in the iBooks store and restricts that content to iOS devices. | Confirm that your reading devices run iOS before buying protected books there. |
| iTunes store DRM | Apple | Limits how many devices customers can use to listen to purchased songs. | Check the device allowance before spreading a library across household devices. |
| PlayReady | Microsoft | Secures the distribution of content over a network and prevents unauthorized use. | Relevant for creators and distributors choosing a delivery-side protection layer. |
Descriptions of these systems come from Fortinet’s DRM overview.
For consumers, the lesson is that DRM binds a purchase to an ecosystem. For creators, it means the choice of platform often decides which restrictions buyers will meet. Where a platform makes that choice for the creator, the platform’s own terms matter as much as the technology.
DMCA Section 1201 and the legal footing of DRM
DRM is a technical tool, and the law adds weight to it in two steps. First, copyright protection applies automatically to any original work fixed in a tangible medium of expression, as Kiteworks notes. DRM is how rights holders enforce conditions on works that already carry that protection.
Second, the Digital Millennium Copyright Act (DMCA) addresses the act of getting around those locks. Its anti-circumvention provision is codified at 17 U.S.C. § 1201, titled “Circumvention of copyright protection systems”, as listed in the Case Western Reserve law research guide. This is the answer to whether DRM is legal. Using DRM is an ordinary way for rights holders to protect works, and Section 1201 is the legal backing for those protections.
- Where the rule sits: DMCA Section 1201 is part of the Digital Millennium Copyright Act and is codified in the US Code at 17 U.S.C. § 1201.
- What it concerns: its title refers to circumvention of copyright protection systems, which is the category DRM falls into.
- What to do before bypassing a lock: read the statutory text itself. Whether a specific act of circumvention is permitted turns on that text and not on forum summaries or a product’s marketing.
The practical split matters. Buying a DRM-protected file and using it as the platform intends is routine. Removing the protection is a separate act that raises the Section 1201 question, even when the buyer’s purpose is personal use.
What DRM means for consumers
For buyers, DRM mostly shows up as conditions attached to something that feels like a purchase. The clearest examples are device caps and account requirements. Apple’s iTunes store uses DRM to limit how many devices customers can use to listen to songs, and FairPlay ties iBooks content to iOS devices, according to Fortinet.
Three decisions follow from that.
- Treat DRM-locked purchases as access, not objects. A file that needs a key is usable only while the key, the account and the supporting app remain available to you.
- Compare before you commit. If you read or listen across several devices, check the store’s device conditions first, since those limits are exactly what DRM is designed to enforce.
- Keep accessibility and backup needs in view. Locks that restrict copying can also get in the way of legitimate uses. If you rely on a particular device or tool, confirm it works with the protected format before you buy.
What DRM means for creators and platforms
Creators adopt DRM mainly to protect income. Fortinet states that DRM enables content creators to ensure only paying users can access their videos. That suits creators selling directly to an audience, because the lock turns a file into something a buyer cannot simply pass on.
The benefit comes with a cost on the other side. Kiteworks frames the core challenge as striking the right balance between intellectual property protection and facilitating easy access to digital content. A tight lock may deter casual sharing, but it can also push away buyers who dislike restrictions. A loose one is easier to use but gives the creator less control.
Platform dependence sharpens the trade-off. Creators who sell through large platforms often inherit that platform’s DRM system and terms, much as workers on app-based marketplaces inherit the platform’s rules, a theme explored in What Is The Gig Economy? A Practical Guide To Gig Economy Jobs In 2026 – Technopolicy. Platforms that compete for audience time also have reason to keep content inside their own ecosystems, which connects DRM to the dynamics in The Attention Economy In 2026: How Attention Became The World’s Most Valuable Currency – Technopolicy.
Software, games and the ownership question
DRM is not limited to books, music and film. Kiteworks lists software among the copyrighted material that DRM applications can encrypt, which is why game libraries and other applications often depend on an account or a license check.
The same device-limiting codes Fortinet describes can bind a software purchase to particular hardware or accounts. For buyers, the sensible habit is to read a digital store’s terms as a statement of what is actually being sold. Where the conditions are acceptable, DRM is a manageable cost of convenience. Where they are not, that is a reason to choose another seller or format.
The policy trade-off: creator income versus consumer ownership
DRM sits where two legitimate interests collide. Creators want payment for their work to be enforceable. Consumers want what they pay for to behave like property, usable across devices and over time. The evidence supports both concerns: DRM can protect paying-user access, and the same controls can limit devices or cut off access after an expiry date.
Reasonable judgements follow from that tension.
- Disclosure is the cheapest fix. Clear statements of device limits and expiry conditions let buyers decide before paying, without removing the creator’s protection.
- Proportion matters. The lighter the lock needed to protect income, the smaller the cost to buyers. Heavy restrictions are hardest to justify where the content has little resale or piracy risk.
- Law and technology should be read together. A technical lock is backed by the circumvention rule in 17 U.S.C. § 1201, so buyers who want to bypass it should treat the statute as the starting point, not the technical feasibility.
Frequently asked questions
| Question | Answer |
|---|---|
| Is DRM the same thing as encryption? | No. Encryption is one technique DRM uses, but DRM also covers rules such as codes that limit the number of devices and expiry dates that end access. |
| Does FairPlay limit where I can read iBooks content? | Yes. According to Fortinet, Apple uses FairPlay to protect content in its iBooks store, and that content is restricted to iOS devices. |
| Can DRM make media stop working? | It can. DRM systems can set expiry dates that prevent access beyond a given date, or cap the number of times content is accessed. |
| Which DMCA provision deals with bypassing DRM? | Section 1201, codified at 17 U.S.C. § 1201 and titled “Circumvention of copyright protection systems”. |
