Canadian Hack-Back?: A Consideration of the Canadian Legal Framework for Private-Sector Active Cyber Defence
In recent years, a debate has emerged over the extent to which victims of cyber security intrusions should be permitted to conduct activities in response — in particular, activities with effects in networks outside the victim’s own. Such controversial efforts are often referred to as active cyber defence (ACD) or, more colloquially, as “hack-back.” While multiple researchers have written about how private-actor ACD fits within the United States legal framework, this topic remains understudied from a Canadian perspective, raising the question of how Canadian legislation may address ACD. Currently, Canadian legislation implicitly prohibits most, if not all, ACD efforts, but international law likely leaves room for countries to legalize certain forms of ACD. Going forward, there may be a significant benefit to Canadian legalization of ACD if these efforts are limited to “intelligence gathering” and constrained by strict government oversight.
Author(s) retain original copyright in the substantive content of the titled work, subject to the following rights that are granted indefinitely:
- Author(s) grant the Alberta Law Review permission to produce, publish, disseminate, and distribute the titled work in electronic format to online database services, including, but not limited to: LexisNexis, QuickLaw, HeinOnline, and EBSCO;
- Author(s) grant the Alberta Law Review permission to post the titled work on the Alberta Law Review website and/or related websites.
- Author(s) agree that the titled work may be used for educational or instructional purposes and/or in educational or instructional materials. The author(s) acknowledge that the titled work is subject to other such "fair dealing" provisions and applicable legislation.
- Author(s) grant a limited license to those accessing the titled work from an electronic database or an Alberta Law Review website to download the titled work onto their computer and to print a copy for their own personal, non-commercial use, subject to proper attribution.
To use the journal's content elsewhere, permission must be obtained from the author(s) and the Alberta Law Review.