Computer Law & Security Review