Synergies, balances, and parallelism between the cybersecurity and personal data protection

Authors

  • Benedetto Ponti

DOI:

https://doi.org/10.32091/RIID0158

Keywords:

Personal data protection, Cybersecurity, Synergy, Balancing, Parallelism

Abstract

In the essay, some declinations of the link between cybersecurity and data protection that may exist – and do exist – are discussed. In particular, three distinct declinations of this relationship are identified, which can be further classified as follows: synergy; (reciprocal) balancing; and finally, a relationship that can be qualified in terms of parallelism. This interpretive scheme does not cover all the aspects of the link between cybersecurity and personal data protection. Rather, the depth and density of this relationship are captured by the three proposed declinations, which are recognized as particularly interesting keys. The terms of a relationship that is by no means unambiguous are outlined in the introduction’s keys of interpretation, which also designate a relationship that is neither clear nor linear between the two magnitudes assigned to the topic. The essay aims to provide weight to this assumption by supporting the thesis of a much less clear-cut and direct relationship than one might initially think; this suggests that researchers, practitioners, and all users of the system's services for the protection of cybersecurity and personal data should be aware of this relationship.

Author Biography

  • Benedetto Ponti

    Associate Professor of Administrative Law at the University of Perugia

References

J. Andraško, M. Mesarčík, O. Hamuľák (2021), The regulatory intersections between artificial intelligence, data protection and cyber security: challenges and opportunities for the EU legal framework, in “AI & Society”, vol. 36, 2021, n. 2

M. Angelini, C. Ciccotelli, L. Franchina et al. (2020), Italian National Framework for Cybersecurity and Data Protection, in L. Antunes, M. Naldi, G. Italiano, K. Rannenberg, P. Drogkaris (eds.), “Privacy Technologies and Policy. APF 2020. Lecture Notes in Computer Science”, Springer, vol. 12121

A. Barone (2006), Il diritto del rischio, Giuffrè, 2006

N. Bharosa (2022), The rise of GovTech: Trojan horse or blessing in disguise? A research agenda, Government Information Quarterly, vol. 39, 2022, n. 3

J. Bergholm (2021), The Data Retention Saga Continued–from Tele2 Sverige to Privacy International and La Quadrature du Net, in “JFT”, vol. 2021, n. 2

D. Broeders, F. Cristiano, D. Weggemans (2023), Too Close for Comfort: Cyber Terrorism and Information Security across National Policies and International Diplomacy, in “Studies in Conflict & Terrorism”, vol. 46, 2023, n. 12

M. Christen, B. Gordijn, K. Weber et al. (2017), A Review of Value-Conflicts in Cybersecurity: An assessment based on quantitative and qualitative literature analysis, in “Orbit, An Online Journal for Responsible Research and Innovation in ICT”, vol. 1, 2017, n. 1, pp. 1-19

A. Grzelak (2016), Data Retention Saga Continues: Decision of the Polish Constitutional Tribunal of 30 July 2014 in Case K 23/11, in “European Public Law”, vol. 22, 2016, n. 3

R.C. Härting, R. Kaim, N. Klamm, J. Kroneberg (2021), Impacts of the New General Data Protection Regulation for small-and medium-sized enterprises, in X.S. Yang, R.S. Sherratt, N. Dey, A. Joshi (eds.), “Proceedings of Fifth International Congress on Information and Communication Technology: ICI-CT 2020”, Springer, vol. 1, 2021, pp. 238-246

M. Mazzuccato, R. Collington (2023), The Big Con: How the Consulting Industry Weakens our Businesses, Infantilizes our Governments and Warps our Economies, Penguin, 2023

E. Kaiser (2023), The new NIS II Directive and its impact on small and medium enterprises (SMEs): initial considerations, in “Media laws”, 2023, n. 1

A. Mantelero, G. Vaciago (2022), Reconciling Data Protection and Cybersecurity: An Operational Approach for Business Sector, in R. Senigaglia, C. Irti, A. Bernes (eds.), “Privacy and Data Protection in Software Services”, Springer, 2022

G. Naddeo (2022), Il difficile bilanciamento tra sicurezza nazionale e tutela dei diritti fondamentali nella “data retention saga” dinanzi alla Corte di giustizia, in “Freedom, Security & Justice: European Legal Studies”, 2022, n. 2, pp. 188-217

I. Nwankwo, M. Stauch, P. Radoglou-Grammatikis et al. (2022), Data Protection and Cybersecurity Certification Activities and Schemes in the Energy Sector, in “Electronics”, vol. 11, 2022, n. 6, p. 965

B. Ponti (2023), Attività amministrativa e trattamento dei dati personali. Gli standard di legalità tra tutela e funzionalità, FrancoAngeli, 2023

L. Previti (2022), Pubblici poteri e cybersicurezza: il lungo cammino verso un approccio collaborativo alla gestione del rischio informatico, in “federalismi.it”, 2022, n. 25

S. Rossa (2023), Cybersicurezza e pubblica amministrazione, Editoriale Scientifica, 2023

F. Serini (2023), La frammentazione del cyberspazio merceologico tra certificazioni e standard di cybersicurezza. Alcune considerazioni alla luce delle discipline europea e italiana, in “Rivista italiana di informatica e diritto”, 2023, n. 2

L. Taylor (2021), Public Actors Without Public Values: Legitimacy, Domination and the Regulation of the Technology Sector, in “Philosophy and Technology”, vol. 34, 2021

M. Tzanou, S. Karyda (2022), Privacy International and Quadrature du Net: One Step Forward Two Steps Back in the Data Retention Saga?, in “European Public Law”, vol. 28, 2022, n. 1

I. van de Poel (2020), Core Values and Value Conflicts in Cybersecurity: Beyond Privacy Versus Security, in M. Christen, B. Gordijn, M. Loi (eds.), “The Ethics of Cybersecurity. The International Library of Ethics, Law and Technology”, Springer, vol 21, 2020

M. Viggiano (2021), Cybersecurity and Data Protection in European Union Policies and Rules: The NIS Directive and the GDPR Synergy, in G. De Minico, O. Pollicino (eds.), “Virtual Freedoms, Terrorism and the Law”, Routledge, 2021

M. Zalnieriute (2021), Procedural Fetishism and Mass Surveillance under the ECHR. Big Brother Watch v. UK, in “VerfassungsBlog”, 2 June 2021

Downloads

Published

2024-07-04

Issue

Section

Monographic section - Security and surveillance in cybersociety

How to Cite

[1]
Ponti, B. 2024. Synergies, balances, and parallelism between the cybersecurity and personal data protection. Rivista italiana di informatica e diritto. 6, 2 (Jul. 2024), 57–66. DOI:https://doi.org/10.32091/RIID0158.