Computer Law Review International - CRi A Journal of Information Law and Technology

Computer Law Review International ist eine englischsprachige Fachzeitschrift, die ausschließlich den internationalen Entwicklungen im Recht moderner Informationstechnologien gewidmet ist. Sie zeigt auf, wie weltweit mit elementaren Fragen dieses Rechtsgebiets umgegangen wird bzw. werden könnte, die durch die technologische Entwicklung aufgeworfen werden. CRI zeichnet über das IT-Recht in Europa hinaus ein verläßliches Bild der Rechtsentwicklung insbesondere in den USA und informiert über die Vielzahl weltweiter Entwicklungen, mit denen andere Staaten den Herausforderungen durch die digitalisierte und vernetzte Informationsgesellschaft zu begegnen suchen. In zusammenfassenden Aufsätzen und kurzen Updates mit Hintergrundinformationen sowie auf ihren wesentlichen Kern gekürzten gerichtlichen Entscheidungen werden die wesentlichen ausländischen Entwicklungen abgebildet. Dabei greift CRI Themen auf, die über die jeweils national bedeutsame Rechtslage hinausgehen und als solche der internationalen Rechtsentwicklung vorgreiflich sein können.

Portal zum IT-Recht - Experten-Blog, News, Gesetzgebungsreport - Newsletter, RSS-Feeds  

Die Zeitschrift als eJournal erhalten Sie über unseren Kooperationspartner De Gruyter www.degruyter.com

Erscheinungsweise:
6 x jährlich (15.2./ 15.4./ 15.6./15.8./15.10 / 15.12.)

Heft 5 / 2023

Articles

Sundara, Karishma / Narendran, Nikhil, The Digital Personal Data Protection Act, 2023: analysing India’s dynamic approach to data protection, CRi 2023, 129-141

This article examines the provisions of the DPDPA from the lens of a comparative study measuring it along the way against the GDPR. After a brief introduction (I.), the article begins with (II.) unpacking the applicability and scope of the DPDPA: identifying what is included, what is excluded and what is exempt, before moving on to (III.) extrapolating the bases for processing personal data; (IV.) explaining the obligations that apply to personal data of special categories of data principals; (V.) discussing data sharing and cross-border data transfers (VI.) outlining the obligations of data fiduciaries as well as (VII.) the rights and duties of data principals; and finally turning to (IX.) enforcement of the DPDPA by taking a look at the Board (VIII.) as well as at penalties and voluntary undertakings (XI.).

Lejeune, Mathias, AI Systems and their Output under U.S. Copyright Laws, CRi 2023, 141-148

Artificial Intelligence (AI) has recently received a lot of public awareness especially based on the program called ChatGPT. This article describes the problems which AI provides under the existing laws in the USA and in the EU especially in the context of Copyright Law.

Beardwood, John, Cyber breaches in Critical Infrastructure: It’s not just about Personal Data Breaches Anymore (Part 2), CRi 2023, 148-155

This article is the second of two parts, comparing recent global legislative developments in three key jurisdictions regulating cyber breaches which occur in critical infrastructure, specifically: in Canada (Bill C-26), in the U.S. (the U.S. Cyber Incident Reporting for Critical Infrastructure Act of 2022 – “CIRCIA”), and in the EU (the Network Infrastructure Security Directive 2.0 (EU) 2022/2055 – “NIS2 Directive”). The first part (Beardwood, CRi 2023, 109–114) provided an overview of the legislative background and purpose of CCSPA, CIRCIA and the NIS2 Directive (I.); compared the scope of their application, based on systems and entities (II.) as well as their respective definitions of incidents (III.); and concluded with an comparative analysis of these foundational scope elements of the Critical Infrastructure cyber breach regime (IV.). This Part 2 continues the analysis and compares the details of their reporting requirements, with a focus on report content, timing and exceptions (V.); contrasts the approaches to record keeping (VI.) and enforcement (VII.); compares their respective penalty regimes (VIII.); and finally concludes with a brief analysis of the challenges for any company facing a critical infrastructure cyber breach across all three jurisdictions (IX.).

Case Law

District Court Oslo v. 6 September 2023 - 23-114365TVI-TOSL/08, Norway: Ban for Facebook and Instagram of Processing Personal Data for Behavioral Marketing, CRi 2023, 155-158

District Court for the District of Columbia v. 18 August 2023 - No. 22-1564, USA: Copyrightability of AI, CRi 2023, 158-160

Herausgeber: Prof. Dr. Thomas Dreier, Dr. Jens-L. Gaster, RA Thomas Heymann, Prof. Dr. Michael Lehmann, Prof. Raymond T. Nimmer, Attorney at Law Holly K. Towle, J.D., Attorney at Law Thomas Vinje, J.D.