To Report, or Not To Report, that Is the Question! The Struggle in Determining a Report-Worthy Cybersecurity Incident

Presentation (2022, April 13)

The NIS2 Directive is on its way

Presentation (2021, December 01)

Cybersecurity, the AI Act and the 'State of the Art'

Presentation (2021, November 12)

“Every Student Can Learn, just not on the same Day” -Data Protection and Cybersecurity Challenges for E-Learning Platforms

Presentation (2021, April 14)

When George Evans stated that every student can learn, just not on the same day, he had probably not in mind the despair of pupils trying to access an e-learning platform during a national lockdown period ... [more ▼]

When George Evans stated that every student can learn, just not on the same day, he had probably not in mind the despair of pupils trying to access an e-learning platform during a national lockdown period. With the COVID19 crisis, online learning became an everyday commodity almost overnight; however, not all schools were prepared to swiftly switch from in class to remote teaching. Concerns were raised with regard to data protection and cyber security, which in some cases led to the implementation of “home-made” solutions. Taking the example of the federalist state of Germany, where education is within the sole competence of the Länder, this paper will explore the functioning and technical implementation of a variety of e-learning platforms before data protection concerns are addressed. We will then explore whether the NIS Directive, which foresees similar security requirements as the GDPR, is applicable to the diverse models, and outline the consequences. In light of the acceleration of the revision of the NIS Directive due to the COVID-19 crisis, we take the example of learning platforms to outline the flaws of the 2016 Directive before we critically evaluate selected aspects of the NIS 2.0 proposal of December 2020. [less ▲]

Don’t Tell Them now (or at all) – Responsible Disclosure of Security Incidents under NIS Directive and GDPR

in International Review of Law, Computers and Technology (2021), 35(2),

Responsible Vulnerability Disclosure under the NIS 2.0 Proposal

in Journal of Intellectual Property, Information Technology and E-Commerce Law (2021), 12(5),

Synergies in Cybersecurity Incident Reporting – The NIS Cooperation Group Publication 04/20 in Context

in European Data Protection Law Review (2021), 7(1), 101-107

Don't tell them now (or at all) - End user notification duties under NIS Directive and GDPR

Presentation (2020, May 06)

The German Acton Improving Law Enforcement on Social NEtworks (NetzDG): A Blunt Sword?

E-print/Working paper (2018)

Das NetzDG und die CPS Guidelines zur Verfolgung strafbarer Inhalte in sozialen Medien

in Taeger, Jürgen (Ed.) Recht 4.0 - Innovationen aus den rechtswissenschaftlichen Laboren (2017)