I found this on slycks some days ago but have been too busy to read it, but better late than never eh
http://www.slyck.com/story1589_CIPPIC_Studies_Privacy_Implications_of_DRMThe Canadian Internet Policy & Public Interest Clinic (CIPPIC) released the results of a study on DRM's (Digital Rights Management) impact on Canadian law. The study looks at various well known DRM methods which is suppose to prevent unauthorized copying.
The report states, "Of the 20 organizations deploying DRM technologies we reviewed, only 12 were found to have engaged in internet communications. A number of organizations used DRM to collect, use and disclose personal information for inappropriate purposes (e.g., Napster indiscriminately monitors its customers communications to check for "abusive language").
Among other findings, the study revealed that there was inadequate notice to what the organizations were doing with the DRM that "phoned home." In some cases, there were contradictions between what the EULA claims and what the program actually did. In turn, the study also found that there was no 'opt-out' feature for some DRM implementations on the collection of personal information such as an IP address.
This matter of an IP address being personaly identifiable information has already been decided in europe and many countries treat IP harvesting as a criminal offence unless your registered with the data protection authorities, hearing from the report above that only one company even answered the questions on some of the more sensitive topics only gives major cause for concern.
