While regulations on personal data diverge widely between countries, it is nonetheless possible to identify three main models based on their distinctive features: one model based on open transfers and processing of data, a second model based on conditional transfers and processing, and third a...

This policy brief outlines the chronology of the developments since Edward Snowden leaked the documents on large-scale electronic surveillance, including PRISM and Tempora programmes, the policy implications and the public's response. It concludes that the nature of the debate has shifted from a...

The EU Agency for Network and Information Security (ENISA) is proposing a far-reaching "European Cybersecurity Certification Scheme for Cloud Services" (EUCS) to be established in the European Union (EU). According to the latest draft of August 2023, leaked by Politico in September 2023, the...