CSL CSL International Cybersecurity Law 2

Question 1

China's Cybersecurity Law (CSL) of 2017 requires operators of 'critical information infrastructure' to store data locally within China. This type of requirement is known as:

Accepted Answer

Data localization requirement

Answer

Data localization requirements mandate that certain categories of data be stored and processed within national borders, affecting multinational companies' cloud strategies.

Question 2

The EU's NIS2 Directive (2022) replaced the original NIS Directive and expanded its scope. Which of the following is a key addition in NIS2?

Accepted Answer

It imposes supply chain security requirements on essential and important entities

Answer

NIS2 significantly expanded the original directive by adding supply chain security obligations, requiring entities to assess cybersecurity risks in their supplier relationships.

Question 3

What is the significance of the 'cyber equivalent of an armed attack' threshold under the UN Charter Article 51?

Accepted Answer

Only cyberattacks causing effects comparable to armed attacks may trigger self-defense rights

Answer

Most legal scholars agree that a cyber operation must produce effects comparable to a traditional armed attack (death, injury, or significant destruction) to trigger the right of self-defense under Article 51.

Question 4

Under the EU's GDPR, what obligation does the 'one-stop-shop' mechanism create for multinationals operating across EU member states?

Accepted Answer

They deal primarily with the DPA of their EU main establishment

Answer

The one-stop-shop mechanism designates the DPA of the controller's main establishment as the lead supervisory authority for cross-border processing activities.

Question 5

Which international framework, updated in 2023, provides guidance on responsible state behavior in cyberspace as a non-binding norm?

Accepted Answer

UN GGE (Group of Governmental Experts) framework

Answer

The UN GGE process has produced consensus reports establishing non-binding norms for responsible state behavior in cyberspace, including the applicability of international law.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL CSL International Cybersecurity Law 2