iTunes and Identity-Based Digital Rights Management
Over the last week, it has been become clear that Apple is embedding some identifying information in songs purchased from iTunes, including the name of the customer and his or her e-mail address. This has raised the ire of consumer advocates …
Context & Ripple Effects
The discovery lands mid-spiral: days after coverage of anger over the DRM-free iTunes tracks, CNET reported Apple criticized for embedding names and e-mail addresses in songs, and Freedom to Tinker ran a same-week piece asking whether file labeling actually works as an anticopying tool. The pattern has history — Boing Boing raised essentially the same alarm in January 2006 with an iTunes update that appeared to send listening data to Apple.
Confirmed this week: Apple embeds the customer's name and e-mail address in purchased songs, and consumer advocates have objected. The timing is awkward — Apple's [[/entity/itunes|iTunes]] store is under its brightest spotlight yet heading into the iPhone's confirmed June 29 launch at AT&T and Apple stores.
First-order effects
- Buyers who share or resell their iTunes-purchased files leak personal identity data to whoever receives them, turning every shared track into a traceable record of the original purchaser.
- Consumer advocates gain a concrete grievance at a moment when Apple's consumer-privacy posture is already being questioned, forcing Apple to defend an embedding practice it had not disclosed prominently.
Second-order effects
- Privacy labeling gives rival music stores a differentiation angle against iTunes precisely as Apple courts buyers of DRM-free downloads — pricing alone may no longer be the comparison point.
- If identity tagging becomes visible to users, secondary sharing networks face a chilling effect, which is exactly the anticopying outcome Freedom to Tinker's analysis probes: whether embedded labels function as effective copy deterrence.
Third-order effects
- Identity-based marking points toward a structural norm in digital media: files carrying purchaser metadata by default, shifting the burden of privacy protection onto consumers who may never know it exists — and inviting regulators and advocates to treat purchase records as personal data.
The trend: Digital music retail is moving from lockout-style DRM toward invisible identity watermarking, where the customer becomes part of the copy itself.