International cybersecurity law review最新文献_第5页

European information regulation in the Ukraine War 乌克兰战争中的欧洲信息管制

International cybersecurity law review Pub Date : 2023-03-09 DOI: 10.1365/s43439-023-00083-0

Sebastian Louven

引用次数: 0

Dr. Ifeoma Nwafor: Cybercrime and the law: issues and developments in Nigeria. (2022) CLDS Publishing. pp. 1–285 Ifeoma Nwafor博士:尼日利亚的网络犯罪和法律问题与发展。(2022) CLDS出版社。1 - 285页

International cybersecurity law review Pub Date : 2023-01-30 DOI: 10.1365/s43439-023-00080-3

Sizwe Snail ka Mtuze

引用次数: 0

The curious case of automated decision-making in India 印度自动化决策的奇特案例

International cybersecurity law review Pub Date : 2023-01-27 DOI: 10.1365/s43439-022-00078-3

P. Ashok

引用次数: 0

Kritikalität: Von der BSI-KritisV zur NIS2-Richtlinie 被确定者感染了mz

International cybersecurity law review Pub Date : 2023-01-16 DOI: 10.1365/s43439-022-00077-4

Valentin Vogel, Nicolas Ziegler

引用次数: 1

Vulnerability management as compliance requirement in product security regulation-a game changer for producers' liability and consequential improvement of the level of security in the Internet of Things? 漏洞管理作为产品安全法规的合规要求——改变物联网中生产者责任和安全水平的游戏规则?

International cybersecurity law review Pub Date : 2023-01-01 DOI: 10.1365/s43439-022-00064-9

Roman Dickmann

{"title":"Vulnerability management as compliance requirement in product security regulation-a game changer for producers' liability and consequential improvement of the level of security in the Internet of Things?","authors":"Roman Dickmann","doi":"10.1365/s43439-022-00064-9","DOIUrl":"https://doi.org/10.1365/s43439-022-00064-9","url":null,"abstract":"The article outlines the European Union (EU) regulation of information technology (IT) security in Internet of Things products from a consumer and end user perspective. It starts with civil law and the necessity to address security requirements and specifications in individual contractual terms. Data and consumer protection laws have not helped much, mainly because of missing definitions and levels of applicable security. Two new EU directives reforming the law of obligations may improve the situation for consumers since security is now a named quality requirement, especially for the sale of (digital) goods. Also introduced is the provision of security updates as a contractual duty. But both rule sets address only the traders, not the producers. This is different with the activation of clauses in the radio equipment directive, which sets IT security measures as requirements to be compliant for CE labeling. An important element is the introduction of a vulnerability management system. Details can be found in the draft of technical standard ETSI/EN 303645. The work concludes with a look at the EU's efforts regarding certification schemes and the interaction of all regulation elements, with more liability for insecure products plus the hope for effectiveness.","PeriodicalId":73412,"journal":{"name":"International cybersecurity law review","volume":"4 1","pages":"21-37"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9483465/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"10826774","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Alternatives for an adequate structuring of the national data protection authority (ANPD) in its independent profile: proposals to overcome the technological challenges in the age of digital governance. 国家数据保护局(ANPD)在其独立形象中的适当结构的替代方案:克服数字治理时代技术挑战的建议。

International cybersecurity law review Pub Date : 2023-01-01 DOI: 10.1365/s43439-023-00081-2

Gabrielle Bezerra Sales Sarlet, Daniel Piñeiro Rodriguez

{"title":"Alternatives for an adequate structuring of the national data protection authority (ANPD) in its independent profile: proposals to overcome the technological challenges in the age of digital governance.","authors":"Gabrielle Bezerra Sales Sarlet, Daniel Piñeiro Rodriguez","doi":"10.1365/s43439-023-00081-2","DOIUrl":"https://doi.org/10.1365/s43439-023-00081-2","url":null,"abstract":"This article aims to identify the necessary elements for the independent and democratic structuring of the National Data Protection Authority (ANPD) in its definitive legal profile, as an autarchy under a special regime, so that it can achieve the technical and decision-making autonomy that it was granted by the Brazilian Data Protection Law (LGPD). Drawing on documentary research and findings on similar foreign authorities, it is possible to point out, as a partial result of this analysis, the insufficiency of entrusting such a mission to its recent formal separation from the Direct Administration, being also possible to conclude that the success of the state modernization in the Digital Age will depend, to a large extent, on intertemporal choices able to direct the ANPD towards a structure attentive to technological innovations. To this end, the training and continuing education of the institution's staff, as well as possible agreements to be signed by the entity, such as the alternatives sought by the Courts of Accounts in the field of information and communications technology (ICT), emerge as a determining factor.","PeriodicalId":73412,"journal":{"name":"International cybersecurity law review","volume":"4 2","pages":"197-211"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9924887/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9428864","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Comparing Canada's proposed Critical Cyber Systems Protection Act with cybersecurity legal requirements in the EU. 比较加拿大提出的关键网络系统保护法与欧盟的网络安全法律要求。

International cybersecurity law review Pub Date : 2023-01-01 DOI: 10.1365/s43439-023-00082-1

Matt Malone, Russell Walton

{"title":"Comparing Canada's proposed Critical Cyber Systems Protection Act with cybersecurity legal requirements in the EU.","authors":"Matt Malone, Russell Walton","doi":"10.1365/s43439-023-00082-1","DOIUrl":"https://doi.org/10.1365/s43439-023-00082-1","url":null,"abstract":"This article examines the Canadian federal government's proposed Critical Cyber Systems Protection Act (CCSPA), compares it with existing and proposed cybersecurity legal requirements in the European Union (EU), and sets out recommendations to address shortcomings of the proposed Canadian legislation. One of the cornerstone components of Bill C‑26, the CCSPA seeks to regulate critical cyber systems in federally regulated private sectors. It represents a significant overhaul of Canadian cybersecurity regulation. However, the current proposed legislation exhibits many flaws, including a commitment to, and entrenchment of, a patchwork approach to regulation that focuses on formal registration; a lack of oversight of its confidentiality provisions; a weak penalty scheme that focuses solely on compliance, not deterrence; and diluted conduct, reporting, and mitigation obligations. To repair these flaws, this article reviews the provisions of the proposed law and compares them with the EU's Directive Concerning Measures for a High Common Level of Security of Network and Information Systems Across the Union, the first EU-wide cybersecurity legislation, as well as its proposed successor, the NIS2 Directive. Where relevant, various other cybersecurity regulations in peer states are discussed. Specific recommendations are put forward.","PeriodicalId":73412,"journal":{"name":"International cybersecurity law review","volume":"4 2","pages":"165-196"},"PeriodicalIF":0.0,"publicationDate":"2023-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://www.ncbi.nlm.nih.gov/pmc/articles/PMC9975875/pdf/","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"9433082","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"OA","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Computer security incident response teams: are they legally regulated? The Swiss example. 电脑安全事故应变小组:是否受到法律管制?瑞士的例子。

International cybersecurity law review Pub Date : 2023-01-01 DOI: 10.1365/s43439-022-00070-x

Pauline Meyer, Sylvain Métille

引用次数: 0

Anforderungen an die Cybersicherheit bei der Erbringung von IT-Dienstleistungen für Arztpraxen sowie Krankenhäuser und Möglichkeiten der Vertragsgestaltung 服务提供医疗办公室、医院和合同起草信息技术服务时的网络安全需求

International cybersecurity law review Pub Date : 2022-12-09 DOI: 10.1365/s43439-022-00075-6

Ole Ziegler

引用次数: 0

When does bulk interception of communications violate the right to privacy? The limits of the state’s power and the European Court of Human Rights Approach 当大量拦截通信侵犯隐私权?国家权力的有限性与欧洲人权法院的做法

International cybersecurity law review Pub Date : 2022-12-02 DOI: 10.1365/s43439-022-00074-7

Veljko Turanjanin

引用次数: 0