Chapterhybrid2020

Cybersecurity Regulation in the European Union: The Digital, the Critical and Fundamental Rights

Gloria González Fuster · Lina Jasmontaite

67 citations0/0 files storedThe International library of ethics, law and technology

No readable copy stored yet — this record is metadata only.

No open-access location is known for this record yet.

Literature note Cite in a project Citation map

Digitalization, Law, and Regulation Cybersecurity and Cyber Warfare Studies Security, Politics, and Digital Transformation

Abstract

Abstract This chapter provides an overview of the European Union (EU) policies and legislative measures developed in an attempt to regulate cybersecurity. By invoking a historical perspective, policy developments that have shaped the cybersecurity landscape of the EU are highlighted. More concretely, this contribution investigates how the EU has been delimiting and constructing its cybersecurity policies in relation to different and sometimes opposing objectives, and questions what such choices reveal about (and how they determine) the evolution of the EU’s cybersecurity policy and its legal contours. For this purpose, the major steps in the evolution of the EU’s agenda on cybersecurity are analysed, ranging from the adoption of the 2013 Cybersecurity Strategy to other numerous norms, initiatives and sectorial frameworks that tackle issues arising from the active use of information systems and networks. The chapter reviews the mobilisation of multiple areas (such as the regulation of electronic communications, critical infrastructures and cybercrime) in the name of cybersecurity imperatives, and explores how the operationalisation of such imperatives surfaced in the EU cybersecurity strategy published in September 2017. The chapter suggests that one of the key challenges of cybersecurity regulation is to impose the right obligations on the right actors, through the right instrument. Reflecting on issues surrounding the current liability framework dating from the 80s, it considers how principles such as data protection by design and default as well as the ‘duty of care’ have emerged. Finally, the chapter considers how the perception of cybersecurity’s relationship with (national) security plays a determinant role in the current EU legislative and policy debates, where fundamental rights considerations, despite being acknowledged in numerous policy documents, are only considered in a limited manner.

Paper brief

Loading…

Cite this work

Citation unavailable for this work.

BibTeX RIS CSL-JSON

No public copy is stored for this record, so only the metadata is cited.

Citations in this library

Citation map →

Stored only when both papers are in the corpus — 67 citations exist upstream.

References

20196th SGEM International Multidisciplinary Scientific Conferences on SOCIAL SCIENCES and ARTS Proceedings, Modern Science 2011EU Law: Text, Cases, and Materials 2015EU Law: Text, Cases and Materials 2014The Emergence of Personal Data Protection as a Fundamental Right of the EU 2018Data Protection by Design and by Default:

Cited by

2022Attributes impacting cybersecurity policy development: An evidence from seven nations 2022The IoT and the new EU cybersecurity regulatory landscape 2024Ethics in Artificial Intelligence: an Approach to Cybersecurity 2021The Balance Between Security, Privacy and Data Protection in IoT Data Sharing:2023New Cybersecurity Requirements for Medical Devices in the EU: The Forthcoming European Health Data Space, Data Act, and Artificial Intelligence Act 2022Cybersecurity of medical devices: new challenges arising from the AI Act and NIS 2 Directive proposals 2022Towards an Efficient and Coherent Regulatory Framework on Cybersecurity in the EU: The Proposals for a NIS 2.0 Directive and a Cyber Resilience Act 2021

Explore the map →

Papers that cite the same references — the relational fallback while embeddings are still backfilling.

Imported from OpenAlex (CC0) — nothing here is generated.