The list includes selected publications relating to CDSL members’ variety of research subjects and academic areas of interest. To view an extended list of publications from individual group members, please visit the CDSL Members page.
2026
Bouchagiar, G. (2026). Emotiveillance: Looking at the unconscious – and other humanly invisible data. Cyberspace Law eJournal, 1-14. [Overview]
2025
Cappelletti, F., & Papakonstantinou, V. (2025). A question of strategic legislation: Can the EU deal with cybersecurity issues in space? Telecommunications Policy, 49(5), 1-19. Article 102954. [Overview] https://doi.org/10.1016/j.telpol.2025.102954
de Hert, P., & Bouchagiar, G. (2025). AI generated evidence brought before European courts: Further activation of evidence law, defence rights and human oversight needed. Shimla Law Review, 7(1), 1-40. [Overview] https://doi.org/10.70556/hpnlu-slr-v7-I1-2024-01
Papathanasopoulou, A. (2025). From professional fact-checkers to the crowd: Can Meta’s community notes survive the Digital Services Act (DSA)? Information & Communications Technology Law, 1–18. [Overview] https://doi.org/10.1080/13600834.2025.2570974
Vidaki, A. N., & Papakonstantinou, V. (2025). Democratic legitimacy of AI in judicial decision-making. AI & Society, 40(8), 6025-6035. [Overview] https://doi.org/10.1007/s00146-025-02411-w
2024
Bouchagiar, G. (2024). Is Europe prepared for risk assessment technologies in criminal justice? Lessons from the US experience. New Journal of European Criminal Law, 15(1), 72-98. [Overview] https://doi.org/10.1177/20322844241228676
Wasser, D., & Papakonstantinou, V. (2024). Codes of conduct in German employment relationships – A measure to adequately implementing compliance and data protection? European Business Law Review, 35(2), 157-182. [Overview] https://doi.org/10.54648/eulr2024014
2023
de Hert, P., & Papakonstantinou, V. (2023). Does the future hold more rights or more proportionality? The GDPR-message. European Data Protection Law Review, 9(4), 393-398. [Overview] https://doi.org/10.21552/edpl/2023/4/5
Markopoulou, D. (2023). Tackling cybersecurity challenges in the energy and water sectors in the context of the cybersecurity and sectoral regulatory frameworks: The case of smart metering systems in the new digitalised environment. International Review of Law, Computers & Technology, 37(1), 52-77. [Overview] https://doi.org/10.1080/13600869.2022.2094609
Papadouli, V., & Papakonstantinou, V. (2023). A preliminary study on artificial intelligence oracles and smart contracts: A legal approach to the interaction of two novel technological breakthroughs. Computer Law and Security Review, 51, 1-16. [Overview] https://doi.org/10.1016/j.clsr.2023.105869
2022
Karagianni, A., & Papakonstantinou, V. (2022). Surveillance in schools across Europe: A new phenomenon in light of the COVID-19 pandemic? The cases of Greece and France. European Journal of Educational Research, 11(2), 1219-1229. [Overview] https://doi.org/10.12973/eu-jer.11.2.1219
Papakonstantinou, V. (2022). Cybersecurity as praxis and as a state: The EU law path towards acknowledgement of a new right to cybersecurity? Computer Law and Security Review, 44, Article 105653. [Overview] https://doi.org/10.1016/j.clsr.2022.105653
Papakonstantinou, V. (2022). States as platforms following the new EU regulations on online platforms. European View, 21(2), 214-222. [Overview] https://doi.org/10.1177/17816858221134748
Papakonstantinou, V. (2022). The cybersecurity obligations of states perceived as platforms: Are current European national cybersecurity strategies enough? Applied Cybersecurity & Internet Governance, 1(1), 1-12. [Overview] https://doi.org/10.5604/01.3001.0016.1237
2021
de Hert, P., & Papakonstantinou, V. (2021). Framing big data in the Council of Europe and the EU data protection law systems: Adding ‘should’ to ‘must’ via soft law to address more than only individual harms. Computer Law and Security Review, 40, Article 105496. [Overview] https://doi.org/10.1016/j.clsr.2020.105496
Markopoulou, D. (2021). Cyber-insurance in EU policy-making: Regulatory options, the market's challenges and the US example. Computer Law & Security Review, 43(16), 105627. [Overview] https://doi.org/10.1016/j.clsr.2021.105627
Markopoulou, D., & Papakonstantinou, V. (2021). Digitalisation of water services and the water sector cyber threat landscape: Is the EU regulatory framework adequate? Journal of Water Law, 27(4), 119-133. [Overview] https://doi.org/10.3390/w12010058
Markopoulou, D., & Papakonstantinou, V. (2021). The regulatory framework for the protection of critical infrastructures against cyberthreats: Identifying shortcomings and addressing future challenges: The case of the health sector in particular. Computer Law & Security Review, 41(12), 105502. [Overview] https://doi.org/10.1016/j.clsr.2020.105502
2020
Papakonstantinou, V., & de Hert, P. (2020). Big data analytics in electronic communications: A reality in need of granular regulation (even if this includes an interim period of no regulation at all). Computer Law and Security Review, 36(13), 105397. [Overview] https://doi.org/10.1016/j.clsr.2020.105397
Vazquez Maymir, S. (2020). Anchoring the need to revise cross-border access to e-evidence. Internet Policy Review, 9(3), 1-25. [Overview] https://doi.org/10.14763/2020.3.1495
2019
de Hert, P. & Papakonstantinou, V. (2019). Data protection and the EPPO. New Journal of European Criminal Law, 10(1), 34-43. [Overview] https://doi.org/10.1177/2032284419837381
de Hert, P., & Papakonstantinou, V. (2019). Data protection policies in EU justice and home affairs. In A. R. Servant & F. Trauner (Eds.), The Routledge Handbook of Justice and Home Affairs Research, (pp. 169-179). London: Routledge. [Overview] https://doi.org/10.4324/9781315645629
Markopoulou, D., Papakonstantinou, V., & de Hert, P. (2019). The new EU cybersecurity framework: The NIS Directive, ENISA's role and the General Data Protection Regulation. Computer Law and Security Review, 35(6), 105336. [Overview] https://doi.org/10.1016/j.clsr.2019.06.007
2018
Papakonstantinou, V., & de Hert, P. (2018). Structuring modern life running on software. Recognizing (some) computer programs as new “digital persons”. Computer Law & Security Review, 34(4), 732-738. [Overview] https://doi.org/10.1016/j.clsr.2018.05.032
de Hert, P., Papakonstantinou, V., Malgieri, G., Beslay, L. & Sanchez, I., (2018). The right to data portability in the GDPR: Towards user-centric interoperability of digital services. Computer Law & Security Review, 34(2), 193-203. [Overview] https://doi.org/10.1016/j.clsr.2017.10.003