The economic and societal impact of digital platforms raises a number of questions for policymakers, including whether existing regulatory approaches and instruments are sufficient to promote and safeguard public interests. This article develops a practical framework that provides structure and guidance to policymakers who design policies for the digital economy. The framework differs from other approaches in taking the digital business models of platforms as the starting point for the analysis. The framework consists of three pillars, namely determining a platform's characteristics, relating these to public interests, and formulating policy options. The framework then invokes a return‐path analysis for assessing how the interventions affect the business model, whether it has the desired effect on public interests, and ensuring it has no undesired side‐effects on public interests. The framework puts forward two key messages for current discussions on digital platforms. First, one should look at the underlying characteristics of platforms rather than trying to understand digital platforms as a single category. Second, policymakers should explore existing rules and policy options, as they seem fit to deal with several characteristics of digital platforms in a time frame that matches the rapid development of platform technologies and business models.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

Fifteen OECD countries, ten of which EU members, have regulation for fixing the price of printed books. At least eight of these have extended such regulation to e-books. This article investigates the cultural and economic arguments as well as the legal context concerning a fixed price for e-books and deals with the question of how the arguments for and against retail price maintenance for e-books should be weighted in the light of the evidence. It concludes that while the evidence in defence of a fixed price for printed books is slim at best, the case for a fixed price for e-books is weaker still while the legal acceptability within EU law is disputable. Against this background, introducing a fixed price for e-books is ill-advised.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

Bijdrage aan Rondetafelgesprek 11 februari 2016, Computercriminaliteit III, Vaste commissie voor Veiligheid en Justitie.

},
keywords = {},
pubstate = {published},
tppubtype = {presentation}
}

Kader om beleidsopties ten aanzien van 'digitale platforms' te analyseren.

},
note = {<p> TNO-rapport 2015, R11271. Bijlage bij Kamerbrief over toekomstbestendige wetgeving.</p>
},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

Nederlandse samenvatting van rapport "Digital platforms: an analytical framework for identifying and evaluating policy options".

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

iLINC (ICT Law Incubators Network), September 2015.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

iLINC (ICT Law Incubators Network), Work Package 3, September 2015.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

iLINC Law Incubator Brief, 2015.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

Column in Het Financieele Dagblad van 20 mei 2015.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

This descriptive legal analysis maps and evaluates a four decade legacy of communications security conceptualizations in E.U. law and policy, including four legislative proposals launched in 2013. As the first comprehensive historical analysis of its kind, the paper forwards a range of new scientific contributions in a time secure electronic communications are of historically unparalleled societal, economic and political relevance. Five communications security policy cycles are identified, and their ‘security’ definitions and scope are described. These cycles are: network and information security, data protection, telecommunications, encryption and cybercrime. An evaluation of the current E.U. ‘security’ conceptualizations illuminates the underlying values at stake, the protection offered in current regulations, the formulation of six research themes and an agenda for computer science, political theory and legal research. Despite constitutional values at stake such as privacy and communications freedom and a robust computer science literature, the paper observes a deep lack of conceptual clarity and coherence in E.U. security policymaking. It then concludes that the observed conceptual ambiguity has allowed powerful stakeholders to capture, or paint E.U. network and information security policies in any colour they like.

},
note = {<p>
Draft paper prepared for IViR/Berkman Roundtable - 18 April 2014 - Last update July 28, 2014.</p>
},
keywords = {},
pubstate = {published},
tppubtype = {presentation}
}

Interview, 11  augustus 2014.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

Column, 29 augustus 2014.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

HTTPS (Hypertext Transfer Protocol Secure) has evolved into the de facto standard for secure Web browsing. However, widely reported security incidents\textemdashsuch as DigiNotar's breach, Apple's #gotofail, and OpenSSL's Heartbleed\textemdashhave exposed systemic security vulnerabilities of HTTPS to a global audience. The Edward Snowden revelations\textemdashnotably around operation BULLRUN, MUSCULAR, and the lesser-known FLYING PIG program to query certificate metadata on a dragnet scale\textemdashhave driven the point home that HTTPS is both a major target of government hacking and eavesdropping, as well as an effective measure against dragnet content surveillance when Internet traffic traverses global networks. HTTPS, in short, is an absolutely critical but fundamentally flawed cybersecurity technology.

To evaluate both legal and technological solutions to augment the security of HTTPS, our article argues that an understanding of the economic incentives of the stakeholders in the HTTPS ecosystem, most notably the CAs, is essential. We outlines the systemic vulnerabilities of HTTPS, maps the thriving market for certificates, and analyzes the suggested regulatory and technological solutions on both sides of the Atlantic. The findings show existing yet surprising market patterns and perverse incentives: not unlike the financial sector, the HTTPS market is full of information asymmetries and negative externalities, as a handful of CAs dominate the market and have become "too big to fail." Unfortunately, proposed E.U. legislation will reinforce systemic vulnerabilities, and the proposed technological solutions that mostly originate in the U.S. are far from being adopted at scale. The systemic vulnerabilities in this crucial technology are likely to persist for years to come.

},
note = {<p>
Also published in:<i> <a href="http://dl.acm.org/citation.cfm?id=2673311&CFID=582181517&CFTOKEN=51677975" target="_blank">ACM Queue - Security</a></i>, 2014-8, vol. 12.</p>
},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

Column, 30 september 2014.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

This paper sets out to provide a concise overview of key developments in relation to Internet-based services that may have an impact on public policies and ultimately on the state itself. It is intended to support the Netherlands Council for Societal Development (\textit{Raad voor Maatschappelijke Ontwikkeling}, RMO) in preparing its advisory report to the Dutch government on how to deal with the impact of the Internet on society and the state.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

prepublication

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

In: Het Beste Idee van 2013, J. Baijens (red.), Tilburg: Uitgeverij De Wereld, 2013.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

In dit artikel wordt de uitspraak van de Hoge Raad in de zaak \textit{RuneScape } beschouwd vanuit de invalshoek van het begrip informatie en de betekenis daarvan in maatschappelijke en juridische processen, die naar hun aard altijd virtuele elementen hebben bevat. De stelling van de auteur is dat informatietechnologie scherper zichtbaar heeft gemaakt dat dit zo is, zodat we met nieuwe ogen naar een oude wereld kijken. De scheidslijn die computercriminaliteit met begrippen als materieel en immaterieel goed en ‘gegevens’ en ‘goederen’ heeft getrokken, heeft tot een toenemende verwarring geleid die de rechtszekerheid schaadt.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

In applying the rules on hosting providers' liability, French lower courts have shifted from a notice and take down rule (provided by Article 14 of the E-Commerce Directive and Article 6 of the French implementing law) to a notice and stay down rule (created by the judges). This interpretation was confirmed in 2011 by the Paris Court of Appeal but overruled by the Cour de cassation on 12 July 2012.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

De WRR heeft in het rapport i-Overheid een belangrijk onderwerp op de agenda gezet. Het Rathenau Instituut ging hem daarin in 2010 al voor. ICT is een instrument waarmee de nationale en Europese bestuurlijke bureaucratieën en organisaties in het middenveld steeds meer macht over de burgers krijgen, maar ook steeds meer privacyrisico's creëren. ICT blijkt geen 'neutraal' instrument, maar één dat een voortgaande verschuiving van de macht richting bestuur binnen de trias politica versterkt. De reactie van de regering is wat lauw gezien de urgentie van het probleem.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

Proceedings of conference "Building networks for a brighter future"

},
keywords = {},
pubstate = {published},
tppubtype = {presentation}
}

Commissioned by the WODC (Research and Documentation Centre of the Ministry of Security and Justice), research has been conducted on duties of care on the Internet, more specifically from the perspective of Internet service providers. The situation in four countries - the Netherlands, the UK, Germany and France - was researched. The (self-)regulation with respect to five separate themes (Internet security and safety, child pornography, copyright, identity fraud and the trade in stolen goods through Internet platforms) was identified. In addition to this, a significant number of interviews with stakeholders were conducted.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

23 juni 2009

},
keywords = {},
pubstate = {published},
tppubtype = {periodical}
}

Onderzoek door een consortium van TNO Informatie- en Communicatietechnologie, SEO Economisch Onderzoek en het Instituut Voor Informatierecht, in opdracht van de ministeries van OCW, EZ en Justitie, februari 2009.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

Onderzoek door een consortium van TNO Informatie- en Communicatietechnologie, SEO Economisch Onderzoek en het Instituut Voor Informatierecht, in opdracht van de ministeries van OCW, EZ en Justitie, januari 2009.

},
keywords = {},
pubstate = {published},
tppubtype = {techreport}
}

Presentatie gehouden op 5 februari 2007 tijdens een debat georganiseerd door De Balie en XS4ALL over filteren op Internet.

},
keywords = {},
pubstate = {published},
tppubtype = {presentation}
}

Een analyse van de rol van technologie in de samenleving en de regulering van de risico's van technologie.

},
keywords = {},
pubstate = {published},
tppubtype = {misc}
}

The collected essays in this book concern the intriguing matter of the interaction between law and technology and the normative role of information technology. More precisely, they focus on the way information and communication technologies regulate human behaviour. Can information technology be an alternative to legal regulation and, if so, what are the risks? 

The issues raised in this book were discussed during a conference entitled \textit{Code as Code}, held in Amsterdam. The report of the debate between leading experts who attended the conference forms the round-up in the book, as do the proposals for a future agenda for research.

},
keywords = {},
pubstate = {published},
tppubtype = {book}
}

France is one of the European countries where a particularly vivid public discussion about DRM and the private copying exception took place. This is thanks to the efforts of French consumer organisations taht initiated a number of court cases dealing with complaints of consumers about CDs and DVDs that could, among others, not be copied and ripped because of technical protection measures in place. This article discusses that latest DRM decision in France, a decision that went one step further than its predecessors when dealing with the difficult question of the relationship between DRM and private copying.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

The article will have a closer look at the charges of the EFF and a Californian lawyer against Sony BMG's latest DRM strategy. The Sony BMG case adds a number of new dimensions to the DRM and Consumer debate. The article will highlight some aspects, also against the background of similar recent case law in Europe.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}

Apple's tight control over the FairPlay DRM system has caused many iPod users to complain that they cannot play certain files on their iPod, namely the files they bought from other online services, using a different DRM system. The proprietary control over FairPlay is also a thorn in the flesh of iTunes rivals who sought various ways to get around FairPlay's lack of interoperability. The French enterprise VirginMega tried it the legal way and so did it come that Apple's FairPlay was probably also the first case in which a competition authority in Europe had to decide if access to a Digital Rights Management system can be enforced on grounds of competition law.

},
keywords = {},
pubstate = {published},
tppubtype = {article}
}