NZ Government keen to set DRM limits

12.09.2006

In particular, a paper on the subject, by a delegate from the New Zealand Privacy Commissioner's Office, presented to a recent meeting of the International Working Group on Data Protection, held in Berlin, was very well received. It has since been further publicized on the working group's website.

The New Zealand Government expressed concern about some consequences of and DRM and the TC model as far back as 2004, when it forbade government agencies to use some of the first modules of the new security model, produced by Microsoft, for fear it could lose control over the integrity of its own information, and so imperil the privacy rights of citizens.

The SSC report still advises caution and outlines the checks that must be made before using DRM or trusted computing software.

The concern is not only about access to, and integrity of, information, but also the possibility of worm and virus infection passing undetected in a file encrypted by a third party for TC or DRM purposes.

The government's response has been expressed as a series of principles (why things are done) and policies (what is done to implement the principles). Agencies must further decide for themselves on standards (how things are done and compliance measured).