‘The Sky is Falling!’ – Responses to the ‘Going Dark’ problem

The shared concern expressed in the two quotes below is that modern technologies provide criminals with a capability to evade investigation. This comment piece examines some of the policy and legal options available to governments and law enforcement agencies to try to address this concern. While accepting the claim that this phenomenon represents a real challenge to law enforcement agencies, we currently have insufficient evidence to show the true extent of the problem. What this piece does not accept is the implication contained in the quotes, and often made explicit by others, that the use of encryption represents a fundamental and irreversible shift in the balance of power between criminals and their investigators from what previously prevailed. Such claims tend to lack historical perspective, which is one of the themes of this 200th issue of Computer Law and Security Review.     

Law enforcement access to personal data originally collected by private parties: Missing data subjects' safeguards in directive 2016/680?

Access by law enforcement authorities to personal data initially collected by private parties for commercial or operational purposes is very common, as shown by the transparency reports of new technology companies on law enforcement requests. From a data protection perspective, the scenario of law enforcement access is not necessarily well taken into account. The adoption of the new data protection framework offers the opportunity to assess whether the new ‘police’ Directive, which regulates the processing of personal data for law enforcement purposes, offers sufficient safeguards to individuals. To make this assessment, provisions contained in Directive 2016/680 are tested against the standards established by the ECJ in Digital Rights Ireland and Tele2 Sverige on the retention of data and their further access and use by police authorities. The analysis reveals that Directive 2016/680 does not contain the safeguards identified in the case law. The paper further assesses the role and efficiency of the principle of purpose limitation as a safeguard against repurposing in a law enforcement context. Last, solutions to overcome the shortcomings of Directive 2016/680 are examined in conclusion.     

A new method for the recovery and evidential comparison of footwear impressions using 3D structured light scanning

Footwear impressions are one of the most common forms of evidence to be found at a crime scene, and can potentially offer the investigator a wealth of intelligence. Our aim is to highlight a new and improved technique for the recovery of footwear impressions, using three-dimensional structured light scanning. Results from this preliminary study demonstrate that this new approach is non-destructive, safe to use and is fast, reliable and accurate. Further, since this is a digital method, there is also the option of digital comparison between items of footwear and footwear impressions, and an increased ability to share recovered footwear impressions between forensic staff thus speeding up the investigation.     

Digital identity,privacy and the right to identity in the United States of America

This article analyses digital identity as an emergent legal concept in the United States of America, as a consequence of the move to place all federal government services on-line. The features and functions of digital identity and its legal nature are examined, and the consequences are considered.     

公务员面试计算机评分系统中数据加密技术的研究与实现

随着我国公务员录用面试信息化建设工作的深入推进,各地陆续在公务员面试过程中采用了公务员面试计算机评分系统。该系统对考官基本信息库、考官的原始计分表、监督员（复核员）的统计表等数据的加密存贮和传输非常重要。为避免泄密,基于PKI技术的“混合签密”方案应用于面试计算机评分系统,能很好地提供机密性、完整性、可认证和不可否认性保证数据的安全性。     

中国高水平参与DEPA的关键领域与路径选择

申请加入DEPA不仅是中国主动参与全球数字治理的“先手棋”,更是深化国内改革和高水平开放的关键决策,有助于中国加快构建新发展格局。为推动数字经济由产业创新驱动转向更多依赖技术创新、制度创新驱动的新阶段,中国可重点在数据流动、数字技术、数字产品、数字创新和网络安全五大领域主动对接DEPA协定要求;进一步地,系统化构建以数字自由贸易港为核心,以数字营商环境示范区为抓手、以数字经济产业先行区为重点、以数字经济国际合作区为纽带、以数字经济创新试验区为动能的“一港四区”格局,推动中国数字经济开放发展、创新发展。     

Data protection legislation: What is at stake for our society and democracy?

The author starts by questioning the main privacy challenges raised by our present and future information society viewed as a “global village”. Apart from a comparison with the traditional village of our parents, he identifies the two complementary and not dissociable facets of our privacy: the right to seclusion and the right to participate fully in our society. According to the first German Constitutional Court recognizing the right to informational self-determination as a new constitutional right, he underlines the need to analyse the data protection as a tool for ensuring both the citizens' dignity and our democracy.     

Electronic signatures and security issues: An empirical study

Security concerns with regard to the use of electronic signatures in the electronic environment seem to represent a potential barrier to their usage. This paper presents an empirical study that examines businesses' perceived security concerns with the use of the electronic signature technology for executing contracts and commercial transactions and whether such issues represent a disincentive for their usage. The findings of the study reveal that there are significant security concerns in the business community with regard to the use of electronic signatures. However, such perceptions seem to be primarily driven by a lack of awareness and understanding. Advising prospective users of electronic signatures about the kind of safeguards that could be put in place to minimise risks associated with their usage can be a useful step towards overcoming their fears and hesitance.     

Digital Britain – the final report

The final Digital Britain report was published in June as to set out the Government's final proposals and updating an interim version that has been published in January this year. This article builds upon an earlier article in [2009] 25 CLSR 263, which analysed the interim report in depth. The intention is not to repeat that earlier analysis, but rather update it and draw the reader's attention to those key areas of change.     

Relativierung des Rechts durch Digitalisierung

Das Recht ist in modernen Gesellschaften ein wichtiges Steuerungsmittel. Schon bisher ist es allerdings nicht das einzige Instrument gewesen, um gesellschaftliche Entwicklungen und individuelles Verhalten zu beeinflussen. Es gab und gibt Bereiche, die sich selbst organisieren und in denen staatliches Recht aus unterschiedlichen Gründen nicht das entscheidende Steuerungsmittel ist. Dieser Beitrag untersucht, wie sich die zunehmende Digitalisierung der modernen Gesellschaften auf die Steuerungsfähigkeit des Rechts auswirkt. Er kommt dabei zu dem Ergebnis, dass die Bedeutung des Rechts in der digitalisierten und hoch fragmentierten Welt abnimmt. Das Recht muss sich deshalb Verbündete in anderen Bereichen der Gesellschaft suchen, um weiterhin Steuerungsfunktionen für die Gesellschaft wahrnehmen zu können. Der Beitrag skizziert, wer als Verbündeter des Rechts in Frage kommt und wie die notwendigen transrechtlichen Kooperationen aussehen könnten.