Computer Law and Security Review