Closing the Digital Backdoor: Strengthening Vulnerability Management to Combat Spyware

  • Panel
  • Class Room
  • Wednesday 21.05 — 10:30 - 11:45

Organising Institution

Gesellschaft für Freiheitsrechte

Germany

  • Academic 3
  • Policy 3
As spyware continues to undermine privacy, democracy, and human rights across Europe, unpatched vulnerabilities are the silent enablers of these threats. This panel brings together legal experts, policymakers, and technologists to explore how robust vulnerability management can shield our digital infrastructure. We’ll discuss the urgent need for laws mandating swift reporting and remediation of software vulnerabilities. By addressing these legal gaps, we can prevent spyware exploitation at its source. Join us to uncover how strategic litigation, policy innovation, and civil society collaboration can drive systemic change. Together, we can build a resilient digital ecosystem that protects citizens, journalists, and activists from surveillance abuses and sets a global precedent for safeguarding fundamental rights in the digital age. We must close the backdoor on spyware—once and for all.

Questions to be answered

  1. What are the most effective technical measures to identify and mitigate unpatched vulnerabilities before they can be exploited by spyware?
  2. What is the current situation in Europe regarding an effective vulnerability management?
  3. What legal and policy strategies are needed to ensure effective vulnerability management, timely reporting, and remediation of software vulnerabilities, and how can these approaches be harmonized internationally?
  4. How can governments and EU institutions collaborate more effectively to curb the spread of spyware and protect digital rights?

Moderator

Luzie Neyenhuys

Gesellschaft für Freiheitsrechte (GFF) - Lawyer at Centre for User Rights - Germany

Luzie Neyenhuys has been with the GFF as a Policy Advisor since July 2023, where she works at the interface of social participation and freedom in the digital age. She previously worked as a Policy Advisor at the European Green Party (EGP) in Brussels. Further professional stations included her work at the Educational Initiative Europäische Akademie Berlin and at the Think Tank adelphi. She holds a Master's degree in European Studies from the European University Viadrina.

Speaker

Sven Herpig

interface - tech analysis and policy ideas for Europe - Germany

Dr. Sven Herpig is Lead for “Cybersecurity Policy and Resilience” at the European Tech Policy Think Tank interface (formerly: Stiftung Neue Verantwortung). His research areas include the IT security of machine learning and free software, operational norms for active cyber defense and state surveillance software, and the analysis of Chinese campaigns. Before joining interface, Sven Herpig worked for the Federal Foreign Office and the Federal Office for Information Security, among others. He is currently active in several German and international committees, such as the National Cyber Security Council.

Speaker

Sophie in ’t Veld

Oxford Martin AI Governance Initiative, University of Oxford - United Kingdom

Sophie in ‘t Veld (NL, 1963) started working as a political advisor in the EU in 1994. She was first elected to the European Parliament in 2004, and served four terms until 2024. She was a member of the European liberal democrat group (ALDE/Renew), and its Deputy Leader (2014-2019) and leading the Renew team in the EP LIBE committee. She was member of the Dutch social liberal party D66 and joined the pan-European party Volt in 2023. Sophie in ‘t Veld is staunchly pro-European and a leading voice on democracy, rule of law and fundamental rights. From 2018 onwards she chaired the European Parliament Democracy, Rule of Law, and Fundamental Rights Monitoring Group that had been set up at her initiative. She was also the architect of the annual Rule of Law Report, the most comprehensive annual health check of the democratic rule of law in Europe. In ’t Veld was the rapporteur of the European Parliament inquiry (“PEGA committee”) into the abuse of spyware. Other policy work covers a wide range of issues, including privacy and data protection, LGBTI rights, gender equality and reproductive rights, asylum and migration, as well as state aid, pensions rules, golden passports and sanctions against Russia. In ’t Veld laid down her vision on European integration and parliamentary democracy ao in her online publications “The Scent of Wild Animals” (2021) and “Naked Power” (2023), and in her book “Een Europees ID” (Prometheus Amsterdam, 2017)

Speaker

Lori Roussey

Data Rights - France

After Climate Change Law studies Lori focused on intelligence powers at La Quadrature du Net, conscious that environmental protection would challenge the national security status quo. Later, Lori studied at the Oxford Internet Institute to refine Data Rights’ vision, while leading the data protection compliance programme of Oxfam. Today Lori leads Data Rights, a litigation and advocacy non-profit focused on surveillance, sustainability, and interoperability.

Speaker

Anna Buchta

European Data Protection Supervisor - Europe

Anna Buchta is Head of Unit “Policy & Consultation” at the European Data Protection Supervisor (EDPS), coordinating the work of the EDPS on providing advice to the EU legislators on legislative and policy proposals relevant to data protection. She has extensive experience in data protection and privacy regulations and litigation before the Court of Justice, notably in several cases concerning data retention, national security and PNR. She was one of the institutional rapporteurs on EU data protection for the FIDE2021 Congress (reports available here: https://fide2020.eu/fide-2020/topics/). She represented the EDPS in the High-Level Group on Access to Data for Effective Law Enforcement co-chaired by the Commission and the Presidency of the Council. Previously, Anna worked at the European Commission, among others on data privacy in electronic communications. Before that, she was a researcher at the Interdisciplinary Centre for Law and ICT (ICRI, currently CITIP) at KU Leuven (Belgium) and worked as a lawyer in private practice. Anna has a master's degree in Law from the University of Warsaw (Poland) and a Master of Laws (LL.M.) degree from KU Leuven.