ENISA, Technical Guideline on Minimum Security Measures

On October 4, 2014, the European Union Agency for Network and Information Security (ENISA) published the technical guideline for Minimum Security Measures to provide guidance to national regulators on the security measures they should take into account when assessing compliance to the revised Telecommunications Framework Directive . Article 13a of the most recent update of the Telecommunications Framework […]

Tags:

Cyber Insurance: ENISA’s report on the last four years’ developments

The European Union Agency for Network and Information Security (ENISA) released an interesting report “to raise awareness for the most impactful market advances, by shortly identifying the most significant cyber insurance developments for the past four years – during 2012 to 2016 – and to capture the good practices and challenges during the early stages […]

Tags:

Regulation (EU) 2019/881 sets forth a comprehensive set of measures to face increased cybersecurity challenges

    On June 7, 2019, the Official Journal of the European Union (OJEU) published Regulation (EU) 2019/881, the EU Cybersecurity Act. The EU Cybersecurity Act aims at ensuring the proper functioning of the internal market while achieving a high level of cybersecurity, cyber resilience and trust within the EU. It lays down: (a) the […]

Tags: ,

EU data protection and cybersecurity law as applied to the IoT – some thoughts about why it is inadequate

Internet-of-Things (IoT) (or internet-of-everything as it is often interchangeably called-) is a buzzword and it is all over. At present, the news is more technological than legal. Nonetheless, the IoT triggers some worrisome legal issues, among which data collection, data security, and invasion of privacy are among the most compelling. Actually, these issues are imposing because […]

Francesca Giannoni-Crystal and Allyson Haynes Stuart, EU data protection and cybersecurity law as applied to the IoT – some thoughts about why it is inadequate

Internet-of-Things (IoT) (or internet-of-everything as it is often interchangeably called-) is a buzzword and it is all over. At present, the news is more technological than legal. Nonetheless, the IoT triggers some worrisome legal issues, among which data collection, data security, and invasion of privacy are among the most compelling. Actually, these issues are imposing because […]

Tags: , ,

Data Privacy Resources

DATA PROTECTION AUTHORITIES  Eu Member States Austria: Austrian Data Protection Authority, Österreichischen Datenschutzbehörde Belgium: Commission for the Protection of Privacy, Commission de la protection de la vie privée, Commissie voor de bescherming van de persoonlijke levenssfeer,  (CBPL) Bulgaria: Commission for Personal Data Protection, Годишен отчет на Комисията за защита на личните данни Croatia: Croatian Personal Data […]

Tags: ,

EU Directive 2009/136/EC of the European Parliament and of the Council

of 25 November 2009 amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services, Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection […]

Tags: ,