Security by Design or Disaster?

2022-11-24

Professor Lee Bygrave, Director of the Norwegian Research Centre for Computers and Law in the University of Oslo, joins Johanna in the studio to discuss security by design. The pair discuss the importance and challenges of translating “by design” mantras from legal concepts to engineering concepts and vice versa. In the context of the Optus and Medibank hacks, they canvas the proposal for new penalties for privacy breaches in Australia, privacy reform, the EU’s proposed Cyber Resilience Act and much more. Tech Mirror is recorded on Ngunnawal land. We acknowledge the tradi...

Professor Lee Bygrave, Director of the Norwegian Research Centre for Computers and Law in the University of Oslo, joins Johanna in the studio to discuss security by design.

The pair discuss the importance and challenges of translating “by design” mantras from legal concepts to engineering concepts and vice versa. In the context of the Optus and Medibank hacks, they canvas the proposal for new penalties for privacy breaches in Australia, privacy reform, the EU’s proposed Cyber Resilience Act and much more.

Tech Mirror is recorded on Ngunnawal land. We acknowledge the traditional custodians of this land and pay our respect to elders past, present, and emerging.

Professor Johanna Weaver is Director of the Tech Policy Design Centre at the Australian National University. This episode was produced by Jack Fox, with special thanks to Ben Gowdie for research and Tanvi Nair for post-production support.

Relevant links:

Professor Bygraves’ Paper: Security by Design: Aspirations and Realities in a Regulatory Context: https://www.idunn.no/doi/10.18261/olr.8.3.2#sec-5

Professor Bygraves’ Paper: Data Protection by Design and Default: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3944535

Australian Securities and Investments Commission v RI Advice Group Pty Ltd: https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2022/2022fca0496

Proposed EU Cyber Resilience Act: https://digital-strategy.ec.europa.eu/en/library/cyber-resilience-act

GDPR Text, Article 25: https://gdpr-text.com/read/article-25/

‘Good privacy reform rests on well-resourced tech regulators’ by Sarah O’Connor: https://www.innovationaus.com/good-privacy-reform-rest-on-well-resourced-tech-regulators/

‘Privacy is hard and Seven Other Myths’ by Jaap-Henk Hoepman: https://mitpress.mit.edu/9780262045827/privacy-is-hard-and-seven-other-myths/

‘Ethical IT innovation, a value based system design approach’ by Sara Spiekerman: https://www.taylorfrancis.com/books/mono/10.1201/b19060/ethical-innovation-sarah-spiekermann

Send us your questions: techpolicydesign@anu.edu.au

Comments (3)