It depends on your local regulations, but one should assume the key could be compromised at any point regardless of law. That's why anti-tamper + semi-regular checks are so necessary.