Book2006
Code: Version 2.0
Lawrence Lessig
Code is law: architecture regulates behaviour online more effectively than statute, and it is written by people nobody elected.
link checked 17 Sept 2026FreeIntermediate
Technology & Data Law
The fastest-changing area of practice — data protection, platform liability, and the first serious attempts to regulate AI.
10 topics · 11 curated works
Topics
- 01Foundations & Overviews1
- 02Data Protection & Privacy Law1
- 03GDPR & Comparable Regimes1
- 04Platform Liability2
- 05Content Moderation Law1
- 06Cybersecurity Law1
- 07AI Regulation & Liability1
- 08Digital Markets Regulation1
- 09Electronic Evidence1
- 10Cross-Border Data Transfer1
Reading in Technology & Data Law
11A way in
Start here
Assumes you know the vocabulary.
Code: Version 2.0
Lawrence Lessig · 2006
Code is law: architecture regulates behaviour online more effectively than statute, and it is written by people nobody elected.
+4 more at this level
Go deeper
Primary sources and full treatments.
Searches and Seizures in a Digital World
Orin S. Kerr · 2005
Argues the traditional US Fourth Amendment framework, built around physical trespass and discrete searches, does not map onto digital evidence stored…
+5 more at this level
11 works
Report1996
Communications Decency Act, Section 230
United States Congress
Immunises online platforms from liability for content posted by their users and for good-faith moderation of that content, a rule credited with enabling user-generated content at internet scale.
link checked 17 Sept 2026FreeIntermediate
Report2014
Framework for Improving Critical Infrastructure Cybersecurity
National Institute of Standards and Technology
The US government's official framework arguing organisations should manage cybersecurity risk through a common Identify-Protect-Detect-Respond-Recover structure rather than through compliance checklists alone.
link checked 17 Sept 2026FreeIntermediate
Report2016
Regulation (EU) 2016/679 (General Data Protection Regulation)
European Union
Establishes the EU's comprehensive framework for personal data protection, requiring a lawful basis for every use of personal data and giving individuals enforceable rights to access, correct and erase data held about them.
link checked 17 Sept 2026FreeIntermediate
Paper2017
The Internet Will Not Break: Denying Bad Samaritans Section 230 Immunity
Danielle Keats Citron & Benjamin Wittes
Argues platforms should lose Section 230 immunity when they fail to take reasonable steps against clearly unlawful content, rejecting the view that any obligation to moderate would break the provision's purpose.
link checked 17 Sept 2026FreeIntermediate
Paper2005
Searches and Seizures in a Digital World
Orin S. Kerr
Argues the traditional US Fourth Amendment framework, built around physical trespass and discrete searches, does not map onto digital evidence stored on computers and proposes rules calibrated to how digital searches actually work.
link checked 17 Sept 2026FreeAdvanced
Paper2016
Regulating Artificial Intelligence Systems: Risks, Challenges, Competencies, and Strategies
Matthew U. Scherer
One of the earliest systematic legal proposals for regulating AI, arguing that ex ante certification combined with tort liability insurance is more workable under US law than directly regulating AI development.
link checked 17 Sept 2026FreeAdvanced
Paper2017
Transatlantic Data Privacy Law
Schwartz & Peifer
Compares the EU's rights-based GDPR model against the US's sectoral, market-driven approach to data privacy and argues neither is simply superior to the other, against the common assumption that the EU model is more advanced.
link checked 17 Sept 2026FreeAdvanced
Paper2017
Amazon's Antitrust Paradox
Lina M. Khan
Argues US consumer-welfare antitrust law, focused on low prices, fails to capture Amazon's anticompetitive potential built on predatory pricing and vertical integration, reviving structural antitrust analysis for digital platforms.
link checked 17 Sept 2026FreeAdvanced
Paper2018
The New Governors: The People, Rules, and Processes Governing Online Speech
Kate Klonick
Argues major US platforms have built an internal, quasi-legal system for governing online speech, shaped more by American free-speech norms and public pressure than by any external law.
link checked 17 Sept 2026FreeAdvanced
Report2020
Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (Schrems II)
Court of Justice of the European Union
Invalidates the EU-US Privacy Shield framework for transferring personal data because US surveillance law does not offer protections essentially equivalent to EU law, while leaving standard contractual clauses conditionally valid.
link checked 17 Sept 2026FreeAdvanced