Phish and Chips: Lunchtime lectures on Cybersecurity #3

Abstract:

As the International Committee of the Red Cross (‘ICRC’) and other international organisations (‘IOs’) are undergoing significant digital transformation and operate in an increasingly digitalised environment, questions as to how they can continue to ensure their information security are becoming more acute. Legal tools to protect IOs in the digital age are central in this regard, alongside technical and organisational measures.

The lecture focusses on one specific legal tool that can be used to foster IOs’ information security, namely the concept of inviolability as part of the privileges and immunities of IOs. Specifically, the lecture will explore (i) the scope of inviolability, particularly its application to data and cyber infrastructure, such as data centers and servers, and (ii) the negative and positive obligations of host States arising under the concept of inviolability. In doing so, the lecture will draw on the Agreement on the ICRC’s privileges and immunities in Luxembourg, as well as wider practice of IOs and States.

Ultimately, the lecture hopes to demonstrate that the Agreement between the ICRC and Luxembourg does not contain new “digital” privileges and immunities but brings forth interpretations of the concept of inviolability.

About the speaker:

Andrea Raab-Gray is Legal Counsel at the Delegation for Cyberspace & Global Cyber Hub of the International Committee of the Red Cross (ICRC) in Luxembourg. Prior to joining the Delegation, she worked at the Office of the Legal Adviser of the Austrian Ministry of Foreign Affairs, and as Legal Adviser for the ICRC both in London and Geneva. Andrea was part of the ICRC delegation negotiating the Agreement between the ICRC and Luxembourg.

Andrea graduated with distinction from her master’s degree at the University of Oxford and holds a law degree from the University of Vienna.

Venue:

University of Luxembourg

Campus Kirchberg - Weicker Building

Room A401

4, rue Alphonse Weicker, L-2721 Luxembourg

Language:

English

Details:

Registration is mandatory.

The event will run from 12:30 until 14:00
A cold lunch will be offered from 12:00

The University of Luxembourg (hereafter “Uni.lu”) collects and processes your personal data in the framework of your registration and your participation in this event and the communication of its future activities. Uni.lu processes and keeps your personal information only to the extent necessary to fulfill the purpose stated.

During the registration process your personal data is being collected and processed on the Eventbrite website by Eventbrite Inc. located in the United States. This will involve the transfer of personal data to countries that do not offer the same level of protection as the European Union regarding data protection rules. Eventbrite Inc. participates in and complies with the EU-U.S. Privacy Shield framework as set forth by the US Department of Commerce regarding the collection, use and retention of personal data. Eventbrite may process your personal data as a controller for different purposes than the purposes of the University of Luxembourg. More information is provided on Eventbrite Inc.’s website in their EU-US Privacy Shield Notice, Privacy Notice and Terms of Services.

You can deregister from the event directly on the Eventbrite website and withdraw your consent for the processing of personal data by Uni.lu for the purpose stated above. You have the right to access, rectify, and erase your personal data as well as further rights described on the Uni.lu website. You can exercise your rights by following the procedure described on the website.