A German draft law announced this week would protect researchers who discover security vulnerabilities from potential criminal prosecution under the nation’s computer crimes law. The proposed amendment to German Criminal Code § 202a, drafted by the country’s Federal Ministry of Justice in response to feedback from experts in academia, law and cybersecurity, adds explicit exceptions to the definition of data espionage to exclude data access made with the intention to uncover and responsibility report a vulnerability or other security risk.

Source: SC Magazine