In the US, if you don’t proceed to step 3, step 2 is legal (so long as the CD lacks DRM). You’re permitted a single backup under fair use; you’re also permitted to rip the music for personal use, like loading it onto a music player. You’re not supposed to burn it to a regular CD-R (is it illegal? Idk), but burning it to an Audio CD-R (where there is a tax that is distributed to rights holders like royalties) is endorsed by the RIAA.
In the US, if you don’t proceed to step 3, step 2 is legal (so long as the CD lacks DRM). You’re permitted a single backup under fair use; you’re also permitted to rip the music for personal use, like loading it onto a music player. You’re not supposed to burn it to a regular CD-R (is it illegal? Idk), but burning it to an Audio CD-R (where there is a tax that is distributed to rights holders like royalties) is endorsed by the RIAA.