Paradigm of cybersecurity in European Union law: modern realities in the context of digitalisation

The study analyses the current paradigm of cybersecurity in the law of the European Union in the context of digitalisation. The authors highlight the doctrinal approaches to the definition of cybersecurity within this integration association. They analyse the EU acts which emphasise the importance of cybersecurity for ensuring the functioning of the EU internal market rather than ensuring the observance of human rights, especially fundamental rights, which cannot be considered justified. It is noted that EU law does not explicitly define the dichotomy of the cybersecurity paradigm, but it does allow for the distinction between its private and public components. The private component of cybersecurity is focused on protecting the rights and interests of individuals and companies from interference in their social, economic and other private relations. At the same time, the public component of cybersecurity focuses on protecting against cyber threats that threaten the national interests of EU Member States, the interests of the EU itself, and critical infrastructure. The outlined dual nature of cybersecurity requires adequate legislative regulation, especially given the different approaches and capabilities of Member States in ensuring cybersecurity. The authors believe that in this context, the experience of Ukraine, as a country that has not only achieved an extremely high level of digitalization but also constantly counteracts cyber threats, is worthy of attention. At the same time, Ukraine should adopt the experience of legal regulation of cybersecurity in the EU, especially in such innovative areas as cryptocurrency markets. The authors prefer a broad approach to the definition of cybersecurity in EU law. In this case, it is possible to formulate the right to cybersecurity, which includes not only the state of technical security, but also appropriate legal and institutional guarantees of protection and compensation for damage. However, in this context, it is noted that the development of effective compensation mechanisms, especially in crypto- asset markets, will take a long time due to the complex legal nature of cryptocurrencies and their huge number. It is concluded that the introducing the right to cybersecurity into EU law, as well as the current realities of digitalisation, require a transformation of the structure and powers of the European Union Agency for Cybersecurity (ENISA). In addition to coordination functions, ENISA should be given basic control functions and mechanisms for responding to violations of the right to cybersecurity. In addition, this agency should be granted a number of powers aimed at protecting the rights and interests of crypto-asset users. The extent of their use in the international economy shows that they are gradually becoming a significant component of the EU internal market.