Are Emulators Illegal? ROMs, BIOS Files, and the DMCA

Emulators are not illegal in the United States. The software that mimics a game console is protected by fair use precedent, and you can download and run it without breaking any law. What gets people in trouble is almost everything they do next: downloading copyrighted game files (ROMs), grabbing a console’s BIOS from the internet, or using an emulator that decrypts protected games. Those acts range from ordinary copyright infringement to violations of the Digital Millennium Copyright Act, with civil damages that start at $750 per work and climb from there.

Why the Emulator Software Itself Is Legal

Two Ninth Circuit decisions from the 1990s still control this area of law. In Sega Enterprises v. Accolade (1992), the court held that disassembling copyrighted code to understand how it works, and then building a compatible product from that understanding, qualifies as fair use when no other route to the unprotected functional elements exists. Copyright protects creative expression, not the functional ideas embedded in software.

Eight years later, Sony Computer Entertainment v. Connectix Corp. (2000) applied that reasoning directly to console emulation. Connectix copied Sony’s PlayStation BIOS during development, studied it in a debugger, and built its Virtual Game Station emulator from scratch without using any Sony code in the finished product. The court ruled the intermediate copying was fair use because it was the only way to reach the unprotected elements, and the final emulator contained no copyrighted material.

Both cases drew the same line. A finished emulator that independently replicates what a console’s hardware does, without copying the original manufacturer’s software, is a clean-room product and is legal. An emulator that ships with, or requires, the original console’s proprietary firmware crosses the line.

How the DMCA Changed the Picture

The Digital Millennium Copyright Act added a layer of legal risk that didn’t exist when Sega and Sony were decided. Federal law now prohibits bypassing technological protection measures that control access to copyrighted works, and it separately prohibits distributing tools designed primarily to do so.1Office of the Law Revision Counsel. 17 U.S. Code 1201 – Circumvention of Copyright Protection Systems Modern consoles encrypt their games, and playing those games on an emulator generally requires decrypting them.

Nintendo’s 2024 lawsuit against Tropic Haze, the developer behind the Yuzu Switch emulator, showed how this plays out. Nintendo argued that Yuzu violated the DMCA’s anti-circumvention provisions by decrypting Switch game files using product keys extracted from legitimate hardware. The legal theory wasn’t that the emulator itself contained Nintendo’s code. It was that the emulator functioned as a circumvention tool. Tropic Haze settled for $2.4 million, shut down the project, and surrendered its domain. The developers acknowledged that their software could “circumvent Nintendo’s technological protection measures and allow users to play games outside of authorized hardware.”

The Yuzu settlement produced no court ruling and creates no binding precedent, but the strategy shift matters. Console makers no longer need to prove an emulator contains stolen code. If it decrypts protected games, the DMCA gives them a separate path. Violating the anti-circumvention provisions carries statutory damages of $200 to $2,500 per act of circumvention, with treble damages possible for repeat violations.2Office of the Law Revision Counsel. 17 USC 1203 – Civil Remedies

Why Downloading ROMs Is Illegal

There is no gray area on this point. Downloading a copyrighted game ROM from the internet without the copyright holder’s permission violates federal copyright law, whether or not you own the original cartridge or disc. The copyright owner holds the exclusive right to reproduce and distribute the work.3Office of the Law Revision Counsel. 17 U.S. Code 106 – Exclusive Rights in Copyrighted Works The person who uploaded the file infringed by reproducing and distributing it, and you infringe by copying it to your hard drive.

Copyright holders can pursue statutory damages of $750 to $30,000 per infringed work in a civil lawsuit. Willful infringement pushes the ceiling to $150,000 per work.4Office of the Law Revision Counsel. 17 USC 504 – Remedies for Infringement: Damages and Profits These are not hypothetical figures. In 2018, the operators of LoveROMs and LoveRetro, two popular ROM distribution sites, settled with Nintendo for $12.23 million and were ordered to hand over their websites, every Nintendo game, and every emulator in their possession.

Fair use won’t rescue this. Downloading an entire game to play it is the opposite of what saved Sony and Sega: those cases involved intermediate copying to build a new, transformative product. Grabbing a ROM to run it is consumptive use of the whole work, aimed at the same purpose the original was made for.5Office of the Law Revision Counsel. 17 USC 107 – Limitations on Exclusive Rights: Fair Use

The Backup Copy Argument Doesn’t Work

The most common justification, “I own the cartridge, so downloading the ROM is just a backup,” doesn’t survive the statute. Federal law allows the owner of a copy of a computer program to make an archival backup, but the exception requires you to make the copy yourself from the copy you own.6Office of the Law Revision Counsel. 17 USC 117 – Limitations on Exclusive Rights: Computer Programs Downloading someone else’s copy from a website doesn’t fit that exception under any reading.

Even a ROM you dump yourself from your own cartridge has limits. The archival copy exception requires you to destroy any backup once you no longer rightfully own the original.6Office of the Law Revision Counsel. 17 USC 117 – Limitations on Exclusive Rights: Computer Programs Sell the cartridge at a garage sale, and your backup becomes an infringing copy.

BIOS Files Have the Same Problem

Console BIOS files are copyrighted firmware owned by the manufacturer. Downloading them from the internet is infringement for the same reasons downloading a ROM is.

Extracting a BIOS from a console you own occupies a legally stronger but still uncertain position. The Sony v. Connectix court found that Connectix’s extraction and study of the PlayStation BIOS was fair use, but the ruling specifically addressed reverse engineering to build a new, non-infringing product. Personal extraction for personal use hasn’t been directly tested with the same rigor. If extracting the BIOS requires bypassing any encryption or technological protection, the DMCA’s anti-circumvention rules apply on top of the copyright question.

Many modern emulators sidestep the issue by shipping open-source BIOS replacements that replicate the console’s boot functions without using any proprietary code. That’s the cleanest path: no copyrighted material, no circumvention.

“Abandonware” Is Not a Real Legal Category

Games that publishers no longer sell or support are often called abandonware. The term has no legal meaning. A game published in 1990 that has been out of print for decades is still under copyright.

Video games are typically works made for hire, so copyright lasts 95 years from publication or 120 years from creation, whichever comes first.7Office of the Law Revision Counsel. 17 U.S. Code 302 – Duration of Copyright: Works Created on or After January 1, 1978 A 1990 release won’t enter the public domain until at least 2085. A publisher pulling a game from sale or going out of business doesn’t affect its copyright status. Rights transfer to successors, get absorbed in acquisitions, or sit dormant with whoever inherited them. Even a true orphan work, where the rights holder genuinely cannot be found, remains under copyright, because Congress has not passed orphan works legislation to limit liability.

The Narrow DMCA Exemption for Preservation

Every three years, the Librarian of Congress grants targeted exemptions to the DMCA’s anti-circumvention rules. The most recent round, effective October 2024, includes a video game exemption, but it’s narrower than most people think.8Federal Register. Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies

For individual players, the exemption applies only when the publisher has shut down a server the game needs to authenticate, and that server has been offline for at least six months. In that case, you may bypass the authentication to restore access for personal, local gameplay on your own hardware. That covers always-online games that die when a publisher pulls the plug. It does not cover games that work fine offline and are simply out of print.

For libraries, archives, and museums, the exemption is broader but still tightly controlled. Qualifying institutions may circumvent protection measures to preserve games in playable form, but the preserved copies cannot leave the institution’s physical premises. A proposal to allow remote researcher access was rejected. Neither exemption helps someone who just wants to download classic games at home.

When Downloading Becomes a Criminal Matter

Most ROM downloading creates civil exposure rather than criminal exposure. But copyright infringement can trigger federal criminal charges when someone reproduces or distributes copies with a total retail value over $1,000 within any 180-day period, or when the infringement is for commercial gain.9Office of the Law Revision Counsel. 17 U.S. Code 506 – Criminal Offenses

Penalties scale with the operation. Distributing 10 or more copies of works worth $2,500 or more within a 180-day window can bring up to five years in prison for a first offense and up to 10 for a second. Lower-level criminal infringement can still mean up to a year.10Office of the Law Revision Counsel. 18 U.S. Code 2319 – Criminal Infringement of a Copyright Federal prosecutors rarely pursue individual downloaders in practice, focusing instead on operators of large distribution sites and pre-release leakers. But the statute doesn’t require you to run a website or make money, and the $1,000 threshold is low enough that a shared library of a few dozen games could technically qualify.

What Actually Stays on the Safe Side of the Line

The rules break down along a consistent line. Building or using an emulator that contains no proprietary code is protected by fair use precedent. Downloading copyrighted ROMs or BIOS files is infringement whether you own the original media or not. Dumping your own cartridges or BIOS from hardware you own has the strongest footing for a personal user, though it hasn’t been fully tested in court. And any time encryption or DRM enters the picture, the DMCA’s anti-circumvention rules add liability separate from copyright itself.

The gap between what’s illegal and what gets enforced against individuals is wide. Most people who download ROMs will never hear from a lawyer. But the exposure is real, and it grows as modern consoles add encryption that stacks DMCA claims on top of ordinary copyright ones. The safest setup is an emulator that uses no proprietary code, games extracted from media you personally own, and an open-source BIOS replacement wherever one exists.