Regulatory Impact on 5G Security and Privacy 401
17.2 Regulatory Objectives for Security and Privacy
It is clear that ensuring Security and Privacy will be the key objectives when designing
the new information sharing concepts of the future 5G networks. To which level the
new network concepts supports Security and Privacy is an issue that can be determined
by regulators when setting the policies for operations.
To fulfil the regulatory requirements, it will not be enough to tackle it only with the
technical security mechanisms; there will also be a need for laws that prohibit certain
actions that would be impossible to find technical solutions to enforce.
In her speech in March 2014, Commissar Neelie Kroes said [4]:
Businesses working across the single market must sign 28 different telecoms
contracts with 28 separate suppliers. The new services they use have to cope
with all those different systems. No guarantee of quality, security, service. Not
much good if you’re considering a multi‐million‐euro investment in the cloud.
Meanwhile networks and systems are insecure and unprotected. Deutsche
Telekom reports 800 000 attacks every day – and that is just one company.
Countries and companies that keep threats to themselves make the whole chain
vulnerable. Companies who think this isn’t happening to them are very naïve,
or lying.
Today, the following target for a regulatory intervention is commonly accepted:
Increasing/ensuring consumer welfare, which is ultimately determined by the structure
and level of the retail prices paid by end consumers. The preconditions for reaching this
target are the economic efficiency, rapid innovation, and efficient and timely investment.
17.2.1 Generic Objectives
In this section, the list of regulatory objectives for Security and Privacy in the context of
the new mobile networks technologies has been created based on the Generic Regulatory
Objectives [5–7] and on the Regulatory Objectives in Cloud Computing [8–10]. They
are seen to be common for all new technologies under the scope of the 5G networks.
These objectives are:
1) Promote the Digital Single Market to encourage efficient cross‐border services; the
harmonized implementation of all relevant Directives and legislative instruments
are needed in the EU and in the global context;
2) Balance of interests in protecting privacy and in fostering the EU‐wide and global
use of services; Europe to fully realize the benefits of new technologies; Note: the
current laws may discourage non‐European users from using EU‐based cloud computing providers or making use of European data centres, for instance;
3) Security and Privacy legislation has to be looked at in a global context and its compatibility with new technologies has to be ensured; For instance, Cloud Computing
has to be facilitated in Europe and at a global level; Different jurisdictions/regions
shall cooperate to develop interoperable requirements that facilitate information
flows with appropriate Security and Privacy protection;
17.2 Regulatory Objectives for Security and Privacy
It is clear that ensuring Security and Privacy will be the key objectives when designing
the new information sharing concepts of the future 5G networks. To which level the
new network concepts supports Security and Privacy is an issue that can be determined
by regulators when setting the policies for operations.
To fulfil the regulatory requirements, it will not be enough to tackle it only with the
technical security mechanisms; there will also be a need for laws that prohibit certain
actions that would be impossible to find technical solutions to enforce.
In her speech in March 2014, Commissar Neelie Kroes said [4]:
Businesses working across the single market must sign 28 different telecoms
contracts with 28 separate suppliers. The new services they use have to cope
with all those different systems. No guarantee of quality, security, service. Not
much good if you’re considering a multi‐million‐euro investment in the cloud.
Meanwhile networks and systems are insecure and unprotected. Deutsche
Telekom reports 800 000 attacks every day – and that is just one company.
Countries and companies that keep threats to themselves make the whole chain
vulnerable. Companies who think this isn’t happening to them are very naïve,
or lying.
Today, the following target for a regulatory intervention is commonly accepted:
Increasing/ensuring consumer welfare, which is ultimately determined by the structure
and level of the retail prices paid by end consumers. The preconditions for reaching this
target are the economic efficiency, rapid innovation, and efficient and timely investment.
17.2.1 Generic Objectives
In this section, the list of regulatory objectives for Security and Privacy in the context of
the new mobile networks technologies has been created based on the Generic Regulatory
Objectives [5–7] and on the Regulatory Objectives in Cloud Computing [8–10]. They
are seen to be common for all new technologies under the scope of the 5G networks.
These objectives are:
1) Promote the Digital Single Market to encourage efficient cross‐border services; the
harmonized implementation of all relevant Directives and legislative instruments
are needed in the EU and in the global context;
2) Balance of interests in protecting privacy and in fostering the EU‐wide and global
use of services; Europe to fully realize the benefits of new technologies; Note: the
current laws may discourage non‐European users from using EU‐based cloud computing providers or making use of European data centres, for instance;
3) Security and Privacy legislation has to be looked at in a global context and its compatibility with new technologies has to be ensured; For instance, Cloud Computing
has to be facilitated in Europe and at a global level; Different jurisdictions/regions
shall cooperate to develop interoperable requirements that facilitate information
flows with appropriate Security and Privacy protection;