CLAIM-2026-09-26-12

Directive 2013/40/EU Article 3 requires access without right to an information system to be punishable as a criminal offence where committed by infringing a security measure, at least in cases which are not minor.

Why it matters

It fixes what a European team is actually exposed to when an agent it operates exceeds authorised access on someone else's system, and which instrument the exposure runs through.

Sources

• eurlex2013directive