Internet Security at shared workplaces

BailMeOut

Hello

Does anyone know if there are any legal requirements in EU to implement good internet security on shared public networks? For example, when a hotel provides guest Wifi do they have to implement some form of security to restrict access to known malicious or illegal web locations or is it ok to just have it open to anywhere/anything in the world?

I am setting up a shared space for a client and am not sure if I need to add web content and malware-type blocking services to their setup. I am good on the technology options to do this but there is a cost to maintain and license these features.

Anyone know. Been googling and cannot find anything that helps me.

ItHurtsWhenIP

I don't believe there is any legal requirements for such small setups. NIS2 coming in October this year, would require robust cybersecurity measures to be in place, but this directive only applies to certain businesses and in most cases they need to be 50+ employees in size.

But I would suggest you consult with a solicitor to make sure you cover your ass on any contract people sign to use the shared space, such that you are indemnified from any foul ups from them. Also make sure your insurer knows about those contracts and is happy with them.

LambshankRedemption

https://www.boards.ie/discussion/2058340889/internet-security-at-shared-workplaces

No, there is no such requirement.

CYBER RESILIENCE ACT (PROPOSED)

Little watchpoint here. This is not constructed or implemented yet but just give it a look over in case it may affect you in your endeavour to create a digital shared space, depending on timeline. You need to scroll down to this part.

https://www.bclplaw.com/en-US/events-insights-news/data-and-cybersecurity-european-union-legislation-and-proposals.html

LambshankRedemption

https://www.boards.ie/discussion/2058340889/internet-security-at-shared-workplaces

Assuming the primary use for such a space would be for working, the majority of people will be connecting via VPN and so will have their own built in security. In many companies the work laptop is set up such that it cannot access the Internet as we know it without going via the VPN.

This makes things easier for you. You are providing a pipe to the internet, nothing else, so you are not a digital provider. You probably want an Acceptable Use Policy that is in plain sight.

28064212

https://www.boards.ie/discussion/2058340889/internet-security-at-shared-workplaces

Get proper legal advice. You can't rely on an internet discussion board for this. What if someone on the network downloads something that damages your client's assets, do you have liability? What if someone downloads child porn, and it's traced to your network, do you have any duties? Hotels put that filtering in to protect themselves as much as their guests

BailMeOut

https://www.boards.ie/discussion/comment/121946161#Comment_121946161

That's why I asked. I am not going to escalate legal until I am well-informed myself. (thus my question here)