A systematic literature review of security and privacy by design principles, norms, and strategies for digital technologies external link

Del-Real, C., Busser, E. de & Berg, B. van den
International Review of Law, Computers & Technology, vol. 39, iss. : 3, pp: 374-405, 2025

Abstract

This paper offers a comparative systematic literature review of the key principles, norms, and strategies associated with Security by Design (SbD) and Privacy by Design (PbD). Both frameworks are grounded in the idea that security and privacy should be integral components of digital technologies from the very beginning of the design process. Following PRISMA guidelines, we reviewed 82 documents sourced from databases such as the ACM Digital Library, EBSCO Library, IEEE Xplore, ProQuest, Scopus, and Web of Science. Our analysis reveals that SbD and PbD share four fundamental principles: prevention/proactiveness, embeddedness, user-centricity, and transparency. The review also highlights the solid regulatory foundation of PbD, particularly under the General Data Protection Regulation (GDPR), compared to the emerging regulatory context for SbD. Additionally, we explore a range of strategies, from organizational cultural changes to technical interventions, that illustrate the nuanced approaches taken to implement these paradigms. We conclude by discussing the broader implications of these findings and suggesting directions for future research, aiming to contribute to the development of technologies that are both secure and respectful of privacy, while also advocating for integrated frameworks that enhance digital trust.

Privacy, Software design

RIS

Save .RIS

Bibtex

Save .bib

AI governance in the spotlight: an empirical analysis of Dutch political parties’ strategies for the 2023 elections external link

Morosoli, S., Kieslich, K., Resendez, V. & Drunen, M. van
Journal of Information Technology & Politics, 2025

Abstract

AI-based technologies are having an increasing impact on society, which raises the question of how this technology will be addressed politically. Thereby, political actors have a dual role to play: They can provide investment to enhance the development and subsequent adoption of these systems while also bearing the responsibility of safeguarding citizens from harm. Hereby, the degree of politicization of the topic, i.e. if a topic is part of the public and political debate, has an immense influence on the political approach to tackle the issue. The more a topic is politicized, the more urgency political parties experience to develop concrete governance approaches. Yet, existing research has not analyzed party programs in terms of discourse around artificial intelligence and policy recommendations. This study focuses on the Netherlands and explores how Dutch political parties discuss AI in their political programs for the 2023 election. We conducted a manual content analysis of all party manifestos for the 2023 elections. Our analysis shows that most parties do not place a big emphasis on AI. And if so, most of the policy proposals are rather reactive to issues that happened in the past, rather than taking a prospective governance approach.

Artificial intelligence, governance, Politics

RIS

Save .RIS

Bibtex

Save .bib

The Harmonized Law of Streaming in the Eu – A Copyright and Related Rights Perspective download

Copyright Law and Streaming: A Comparative Law Analysis of Lawful and Unlawful Streaming Services, Brill/Nijhoff, 2025, pp: 95-134

Abstract

EU law does not contain a distinct set of rules seeking to regulate various types of streaming services. Instead, the harmonized rules governing streaming services follow from individual pieces of EU legislation – ranging from rules on online broadcasting to a specific liability regime for platforms allowing users to upload and share content – and decisions of the Court of Justice of the European Union (‘CJEU’). The following analysis, first, provides an overview of the exclusive rights that must be taken into account in streaming scenarios. This discussion also addresses the exemption of temporary acts of copying that may cover the reception of streaming content by users (section 2). Rights clearance questions occupy centre stage in sections 3 (general services, such as Netflix) and 4 (platforms for user-generated content (‘UGC’), such as YouTube). Section 5 raises the issue of content filtering obligations in the specific legal regime for on-demand streaming of content uploaded by users. Section 6 takes a closer look at copyright limitations that may become relevant in streaming cases, including private copying rules and the exemption of quotations, parodies and pastiches. Section 7 explains the remarkable extension of the concept of ‘communication to the public’ to the provision of streaming equipment for illegal content and infrastructures for illegal file-sharing. It also examines the legal framework for website blocking. In section 8, the results of the analysis will be summarized.

Copyright

RIS

Save .RIS

Bibtex

Save .bib

Annotatie bij Hof van Justitie van de Europese Unie 4 oktober 2024 (Maximilian Schrems / Meta Platforms Ireland) download

Nederlandse Jurisprudentie, iss. : 15, num: 111, pp: 2065-2067, 2025

Abstract

Verzoek om een prejudiciële beslissing krachtens artikel 267 VWEU, ingediend door het Oberste Gerichtshof (hoogste federale rechter in burgerlijke en strafzaken, Oostenrijk) bij beslissing van 23 juni 2021. Bescherming van natuurlijke personen in verband met de verwerking van persoonsgegevens. Online sociale netwerken. Algemene gebruiksvoorwaarden in verband met overeenkomsten tussen een digitaal platform en een gebruiker. Gepersonaliseerde reclame. Beginsel van doelbinding. Beginsel van minimale gegevensverwerking. Verwerking van bijzondere categorieën van persoonsgegevens. Gegevens betreffende de seksuele geaardheid. Gegevens die door de betrokkene openbaar zijn gemaakt.

RIS

Save .RIS

Bibtex

Save .bib

Annotatie bij Hof van Justitie van de EU 4 oktober 2024 (Koninklijke Nederlandse Lawn Tennisbond / Autoriteit Persoonsgegevens) download

Nederlandse Jurisprudentie, iss. : 15, num: 110, pp: 2053-2054, 2025

Abstract

Verzoek om een prejudiciële beslissing ingediend door de Rechtbank Amsterdam (Nederland) bij beslissing van 22 september 2022. Bescherming van natuurlijke personen in verband met de verwerking van persoonsgegevens. Rechtmatigheid van de verwerking. Verwerking die noodzakelijk is voor de behartiging van de gerechtvaardigde belangen van de verwerkingsverantwoordelijke of van een derde. Begrip ‘gerechtvaardigd belang’. Commercieel belang. Sportbond. Mededeling tegen betaling van de persoonsgegevens van de leden van een sportbond aan sponsoren zonder de toestemming van die leden.

RIS

Save .RIS

Bibtex

Save .bib

Access to Justice and LLMs external link

The Digital Constitutionalist, 2025

Abstract

The legal system can be a fortress. While anyone can freely read their country’s laws, much more is needed to grasp the complexity of the legal system. Lawyers train for years to gain the skills to engage with the law. Yet, LLM-based chatbots provide billions of people now with access to this, often almost esoteric, type of knowledge. Though far from perfect, LLMs have nevertheless produced a societal revolution in the provision of legal services and access to justice for years to come.

RIS

Save .RIS

Bibtex

Save .bib

Do AI models dream of dolphins in lake Balaton? external link

Kluwer Copyright Blog, 2025

Artificial intelligence, Copyright

RIS

Save .RIS

Bibtex

Save .bib

Panel at CPDP.ai 2025: “Future Digital Infrastructures for Climate Change: A Solution That Brings Along Its Own Challenges?” external link

van Hoboken, J., Radwan, G., Hamann, H., Monjoux, E. & Zeybek, B.
2025

Abstract

This panel investigates the digitalisation - climate action relationship and discusses the response of law and policy to it. Digitalisation is touted as the solution for environmental challenges. The EU policy considers digital infrastructures integral to achieve the European Green Deal’s net-zero goals ("twin transition"). But these create new risks and dependencies as they implicate power dynamics at the intersection of digital economy, geopolitics, security. This panel investigates some of these frictions focusing on two technologies: foundation models and digital twins. For example, foundation models can provide novel climate insights, but they can also transfer bias in context and training data into climate solutions and cement market logics into sustainability efforts. Digital Earth applications (e.g. DestinE), bringing together sensing and computing, can change environmental decision making processes and can have potential uses for disaster prevention, migration management and security. How could the law take account of these dynamics going forward?

RIS

Save .RIS

Bibtex

Save .bib

A new liability paradigm for online platforms in EU copyright law download

Governance of Digital Single Market Actors, Edward Elgar Publishing, 2025, ISBN: 9781839101472

Abstract

This chapter explores the transformative impact of art. 17 of the Copyright in the Digital Single Market Directive on the liability of online content-sharing platforms and its potential impact on users’ rights and freedoms. The analysis traces the evolution of EU copyright law to delineate the legal framework for primary and secondary liability of such platforms leading up to the introduction of art. 17. It then examines the new regime, explaining how it reflects a departure from prior rules and constitutes a novel liability paradigm tailored for online content-sharing platforms. The chapter contends that this shift, in line with the Digital Services Act's (DSA) “enhanced responsibility” approach, entails important trade-offs. It presents challenges to legal certainty, given the complexity of art. 17 and its potential overlaps with the DSA. Moreover, the legal design of art. 17 and the DSA may lead to privatised algorithmic content moderation, outsourcing fundamental rights balancing to platforms and users, risking users’ freedom of expression. The Court of Justice's ruling in Case C-401/19 Poland v Parliament and Council is discussed as illustrative of this shift, to the extent it affirms art. 17's liability design without sufficiently addressing associated fundamental rights risks.

Copyright, liability, Online platforms

RIS

Save .RIS

Bibtex

Save .bib

A Unitary Title for Copyright download

Q: Bundel ter nagedachtenis aan prof. mr. Antoon Quaedvlieg, deLex, 2025, Amsterdam, ISBN: 9789086921065

Auteursrecht

RIS

Save .RIS

Bibtex

Save .bib