Cyber Law
Cyber law addresses the legal challenges posed by the internet and digital technologies, including data privacy, cybersecurity, electronic commerce, intellectual property online, and cybercrime. It explores how existing legal frameworks adapt to technological change and examines regulations such as the GDPR and the Computer Fraud and Abuse Act across jurisdictions.
China's Personal Information Protection Law (PIPL)
The Personal Information Protection Law (Geren Xinxi Baohu Fa, PIPL), effective 1 November 2021, is China’s comprehensive data protection legislation. The PIPL establishes a framework for the …
Chinese Critical Information Infrastructure Protection
CII under the Cybersecurity Law The protection of critical information infrastructure (CII) (guanjian xinxi jichu sheshi, 关键信息基础设施) is governed principally by Article 31 of the Cybersecurity Law of …
Chinese Cyber Law
The Cybersecurity Law 2017 The Cybersecurity Law of the People’s Republic of China, adopted by the Standing Committee of the National People’s Congress on 7 November 2016 and effective …
Chinese Multi-Level Protection Scheme (Dengbao)
The Multi-Level Protection Scheme (dengji baohu zhidu, 等级保护制度), commonly known as dengbao, is China’s mandatory cybersecurity classification and protection framework. Established under the …
CNIL Enforcement: Investigations, Sanctions, and Notable Decisions
The Commission Nationale de l’Informatique et des Libertés (CNIL) is the French data protection authority, established by the Law of 6 January 1978 (Loi Informatique et Libertés). The CNIL is an …
Computer Fraud and Abuse Act
Introduction The Computer Fraud and Abuse Act (CFAA) , codified at 18 USC § 1030, is the primary federal statute prohibiting unauthorized access to computers. Enacted in 1984 as the first major …
Cyber Law in Australia
Introduction Australian cyber law comprises a complex and rapidly evolving patchwork of privacy and data protection laws, cybersecurity and critical infrastructure regulation, computer crime offences, …
Cyber Law in Brazil
Introduction Cyber law in Brazil (Direito Digital or Direito Cibernético) is anchored by the Marco Civil da Internet (Law 12.965/2014), often described as the “Internet Constitution” or …
Cyber Law in Canada
Overview Cyber law in Canada comprises the regulation of privacy, data protection, electronic commerce, antispan, cybersecurity, and computer-related criminal offences. The legal framework is …
Cyber Law in Japan
Overview of Cyber Law in Japan Japan’s cyber law regime comprises statutes addressing data protection, cybersecurity, computer crime, and platform regulation. The landscape has evolved in …
Cyber Law in Mexico
Introduction Mexican cyber law encompasses regulations governing cybersecurity, data protection, electronic commerce, digital evidence, and cybercrime. The legal framework has developed incrementally, …
Cyber Law in Nigeria
Introduction Cyber law in Nigeria has developed rapidly in response to the increasing digitization of commerce, government services, and social interaction. The Cybercrimes (Prohibition, Prevention) …
Cyber Law in South Africa
Introduction South African cyber law encompasses the regulation of electronic communications, data protection, cybercrime, and digital transactions. The legal framework has developed significantly …
Cyber Law in South Korea
Introduction South Korean cyber law addresses the legal challenges arising from the country’s advanced digital infrastructure, high internet penetration, and status as a global leader in online …
Cybercrime Law in Australia
Introduction Cybercrime law in Australia criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in Brazil
Introduction Cybercrime law in Brazil criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in Canada
Introduction Cybercrime law in Canada criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in Japan
Introduction Cybercrime law in Japan criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related fraud, …
Cybercrime Law in Mexico
Introduction Cybercrime law in Mexico criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in Nigeria
Introduction Cybercrime law in Nigeria criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in South Africa
Introduction Cybercrime law in South Africa criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybercrime Law in South Korea
Introduction Cybercrime law in South Korea criminalizes offenses committed using computers and digital networks. The legal framework addresses unauthorized access, data interference, computer-related …
Cybersecurity Regulation
Introduction Cybersecurity regulation in the United States is a complex patchwork of federal statutes, executive orders, agency regulations, and state laws. Unlike the European Union’s …
Digital Privacy
Introduction Digital privacy law governs the collection, use, and disclosure of personal information in electronic form. The United States provides privacy protection through a combination of …
Digital Privacy and Data Security in Australia
Introduction Digital privacy and data security law in Australia governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for …
Digital Privacy and Data Security in Brazil
Introduction Digital privacy and data security law in Brazil governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for individuals …
Digital Privacy and Data Security in Canada
Introduction Digital privacy and data security law in Canada governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for individuals …
Digital Privacy and Data Security in Japan
Introduction Digital privacy and data security law in Japan governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for individuals …
Digital Privacy and Data Security in Mexico
Introduction Digital privacy and data security law in Mexico governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for individuals …
Digital Privacy and Data Security in Nigeria
Introduction Digital privacy and data security law in Nigeria governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for …
Digital Privacy and Data Security in South Africa
Introduction Digital privacy and data security law in South Africa governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for …
Digital Privacy and Data Security in South Korea
Introduction Digital privacy and data security law in South Korea governs the collection, use, and protection of personal information in digital form. The legal framework establishes rights for …
eIDAS Regulation: Electronic Identification, Trust Services, and the EUDI Wallet
Introduction Regulation (EU) No 910/2014 — the eIDAS Regulation (electronic IDentification, Authentication and Trust Services) — establishes a harmonised legal framework for electronic identification …
EU Cyber Law
The NIS 2 Directive Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022, commonly known as NIS 2, constitutes the principal legislative instrument addressing …
EU Cybersecurity Act: ENISA Mandate and the Certification Framework
Introduction Regulation (EU) 2019/881 — the EU Cybersecurity Act (CSA) — represents a landmark in the EU’s approach to cybersecurity governance. The CSA has two principal objectives: (a) to …
French Cyber Law
The Loi de Programmation Militaire and Cyber Provisions France’s strategic approach to cybersecurity is substantially shaped by successive Lois de Programmation Militaire, which establish …
French Cybersecurity Authority (ANSSI)
The French Cybersecurity Authority The Agence Nationale de la Sécurité des Systèmes d’Information (ANSSI) is France’s national cybersecurity authority, established by Decree No. 2009-834 …
GDPR Enforcement in France
The CNIL Enforcement Framework The Commission Nationale de l’Informatique et des Libertés (CNIL) is the independent administrative authority responsible for enforcing the General Data Protection …
German Cyber Law
The BSI-Gesetz and IT-Sicherheitsgesetz The primary statutory framework for cybersecurity in Germany is founded upon the BSI-Gesetz, which establishes the Bundesamt für Sicherheit in der …
German Data Protection Law
Constitutional Foundation and the GDPR German data protection law is built on a strong constitutional foundation. The Federal Constitutional Court (Bundesverfassungsgericht) recognised the right to …
NIS 2 Directive: Cybersecurity Risk Management and Incident Reporting
Introduction Directive (EU) 2022/2555 — commonly known as NIS 2 — is the EU’s flagship legislative instrument for cybersecurity risk management and incident reporting. Repealing and replacing …
Online Speech Regulation
Introduction Online speech regulation in the United States operates at the intersection of First Amendment free speech protections, federal statutory immunity for interactive computer services, and …
Overview of German Cyber Law
German cyber law addresses legal issues arising from digital technologies, including computer crime, data protection, electronic commerce, and digital signatures. The Bundesdatenschutzgesetz (BDSG) …
Russian Cryptographic Regulation
Federal Law on Electronic Signatures The Federal Law on Electronic Signatures (Federalny Zakon ob Elektronnoy Podpisi, No. 63-FZ of 6 April 2011) establishes the legal framework for cryptographic …
Russian Cyber Law
Federal Law No. 152-FZ on Personal Data Federal Law No. 152-FZ of 27 July 2006 on Personal Data serves as the foundational data protection statute in the Russian Federation. The Law defines personal …
Russian Data Localization Law: 242-FZ, Roskomnadzor Enforcement, and Internet Regulation
Russian data localization law, established by Federal Law No. 242-FZ of 21 July 2014, requires operators of personal data to store and process personal data of Russian citizens on servers physically …
Section 230 CDA Immunity
Introduction Section 230 of the Communications Decency Act (CDA) , codified at 47 USC § 230, provides broad immunity to interactive computer service providers for liability arising from third-party …
The Computer Misuse Act 1990
Introduction The Computer Misuse Act 1990 (CMA 1990) is the primary legislation governing cybercrime in the United Kingdom. The Act was enacted following the Law Commission’s report on computer …
The Online Safety Act 2023
Introduction The Online Safety Act 2023 (OSA 2023) is landmark legislation that establishes a new regulatory framework for online safety in the United Kingdom. The Act imposes a duty of care on …
UK Cyber Law
The Computer Misuse Act 1990 The Computer Misuse Act 1990 (c. 18) is the primary legislation criminalising computer-related offences in the United Kingdom. Enacted following the Law Commission’s …
UK Data Protection Law
Introduction Data protection law in the United Kingdom is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). Following the UK’s …
US Cyber Law
The Computer Fraud and Abuse Act The Computer Fraud and Abuse Act, codified at 18 U.S.C. § 1030, constitutes the primary federal statute addressing computer-related crime in the United States. …