CURRICULUM VITAE

Name

Lee Andrew Bygrave

Date of birth

22.01.1963

Residential address

Prost Christies vei 16A, N-1362 Hosle, NORWAY

Work address

Department of Private Law
P.O. Box 6706 St. Olavs plass
N-0130 Oslo
NORWAY

Telephone

(+47) 67148808 (private); (+47) 22859339 (work)

Fax

(+47) 22859620

E-mail

lee.bygrave@jus.uio.no

•

Doctor juris degree (completed 1999; University of Oslo).

•

Barrister, Supreme Court of New South Wales (admitted 1992).

•

Bachelor of Laws (Honours) degree (completed 1989; Australian National University).

•

Bachelor of Arts (Honours) degree (completed 1985; Australian National University).

(i)

Australia:

•

Visiting Fellow, Faculty of Law, University of New South Wales, Sydney (March 2006 - February 2009).

•

Co-Director, Baker & McKenzie Cyberspace Law and Policy Centre, Faculty of Law, University of New South Wales (Nov. 2001 - July 2002).

•

Visiting lecturer in law (part-time), Faculty of Law, University of New South Wales, Sydney (March 2000 - April 2001).

•

Legal Advisor, Commonwealth Department of Veterans' Affairs, Canberra (Dec. 1989 - Sept. 1990).

(ii)

Norway:

•

Associate Professor, Department of Private Law, University of Oslo (Sept. 2004 - present).

•

Associate Professor, Norwegian Research Centre for Computers and Law (NRCCL), University of Oslo (June 2003 - Aug. 2004).

•

Postdoctoral Research Fellow, NRCCL (Oct. 1999 - May 2003).

•

Doctoral Research Fellow, NRCCL (Aug. 1993 - July 1999).

(iii)

Austria:

•

Visiting Professor, Faculty of Law, University of Vienna (May 2001; May 2003).

•

Consultant to European Commission with respect to regulation of personal data flows to countries outside EU (July 2003 - present).

•

Consultant to Norwegian Department of Justice with respect to reform of Norway's Personal Data Act (July 2005 - April 2006).

•

Consultant to U.S. National Academies with respect to their report on "Privacy in the Information Age" (June 2003 - Nov. 2003).

•

Expert advisor to Norwegian Board of Technology on privacy and data protection issues (Dec. 2002 - March 2004).

•

Consultant to Norwegian government with respect to development of national cryptography policy (Jan. - April 2001).

•

Consultant to Nordic Council of Ministers on information security issues (1993).

•

Consultant to Telenor with respect to development of a corporate privacy policy (1998).

•

Advisory Board Member for the Data Protection Research and Policy Group, British Institute of International and Comparative Law, London (2004 - 2006).

•

Member of the Asia-Pacific Privacy Charter Council (2003 - present).

•

Member of the Board of the Norwegian Association for Computers and Law (2003 - present).

•

Member of Editorial Board of Privacy Law & Policy Reporter (1997 - present).

•

Norway's representative on Technical Committee 11 ("Security and Protection of Information Processing Systems") of International Federation for Information Processing (1996 - 1998).

•

Member of Norwegian Computer Association's committee on information security (1994 - 1996).

•

Leader of research project, "Legal Regulation of Biometric Identification and Authentication Systems", doctoral research project funded by Norwegian Research Council (Jan. 2005 - Dec. 2008).

•

Leader of research project "Money Laundering and the Internet", funded by Norwegian Research Council (Nov. 2004 - Oct. 2008).

•

Partner Investigator in research project "Creating more consistent privacy principles through better interpretation and law reform", research project DP0666646 funded by Australian Research Council (Jan. 2006 - Dec. 2008).

•

Subcontractor for PRIME (Privacy and Identity Management for Europe) - Integrated project under FP 6, Priority 2, Information Society Technologies (IST-2002-507591) (Jan. 2004 - present).

•

Postdoctoral scholarship from the Norwegian Research Council (Oct. 1999 - Oct. 2002).

•

Partner in ECLIP I (Electronic Commerce Legal Issues Platform) - ESPRIT IV Project EP 27028 funded by European Commission (Jan. 1998 - Dec. 1999).

•

Doctoral Scholarship from the Norwegian Research Council (Aug. 1993 - Aug. 1996).

•

Goethe Society Scholarship (Dec. 1983 - March 1984).

•

Australian National University Vacation Scholarship (Dec. 1984 - March 1985).

•

Goethe Society Prize for Distinguished Study in German (1982, 1983, 1984, 1985).

•

Nominated by the Departments of History and Modern European Languages (Australian National University) for University Medal, 1985.

•

"The Privacy Act 1988: A Study in the Protection of Privacy and the Protection of Political Power", Federal Law Review, 1990, vol. 19, pp. 128-153.

•

"Legal Aspects of Information Security in the Nordic Countries", in Nordic Council of Ministers: Information Security in Nordic Countries, Nordiske Seminar- og Arbejdsrapporter 1993:613 (Copenhagen: Nordic Council of Ministers, 1993), Appendix 1.

•

"Overview of Norway's Criminal Justice System", in The World Factbook of Criminal Justice Systems, US Department of Justice, Bureau of Justice Statistics, 1994, available at
http://www.ojp.usdoj.gov/bjs/pub/ascii/wfbcjnor.txt

•

"Reflections on the Rationale for Data Protection Laws", in J. Bing og O. Torvund (ed.s): 25 Years Anniversary Anthology in Computers and Law (Oslo: TANO, 1995), pp. 3-39 (co-authored with Jens Petter Berg).

•

"Informasjon som felles ressurs - mulige konsekvenser for regelverk som berører personvern", in Norges forskningsråd: Informasjonsteknologi og nye medier i den offentlige informasjonens tjeneste (Oslo: Norges forskningsråd, 1996), pp. 69-85.

•

"Ensuring Right Information on the Right Person(s): Legal Controls of the Quality of Personal Information", Manuscript Series on Information Technology and Administrative Systems, University of Oslo, 1996, vol. 4, no. 4/96, 23 pages.

•

Personvern i praksis: Justisdepartementets behandling av klager på Datatilsynets enkeltvedtak 1980-1996 (Oslo: Cappelen Akademisk Forlag, 1997), 256 pages.

•

"Data Protection Pursuant to the Right to Privacy in Human Rights Treaties", International Journal of Law and Information Technology, 1998, vol. 6, pp. 247-284.

•

"Data Protection Reform in Scandinavia", Privacy Law & Policy Reporter, 1998, vol. 5, pp. 9-12.

•

"Germany's Teleservices Data Protection Act", Privacy Law & Policy Reporter, 1998, vol. 5, pp. 53-54.

•

"Privacy, Data Protection and Copyright: Their Interaction in the Context of Electronic Copyright Management Systems", in P.B. Hugenholtz (ed.): Copyright and Electronic Commerce (The Hague/London/Boston: Kluwer Law International, 2000) (co-authored with Kamiel Koelman), pp. 59-124.

•

"International Consumer Purchases through the Internet: Jurisdictional Issues pursuant to European Law", International Journal of Law and Information Technology, 2000, vol. 8, pp. 99-138 (co-authored with Morten Foss).

•

"An international data protection stocktake @ 2000 - Part 1: regulatory trends", Privacy Law & Policy Reporter, 2000, vol. 6, pp. 129-132.

•

"Determining Applicable Law pursuant to European Data Protection Legislation", Computer Law & Security Report, 2000, vol. 16, pp. 252-257.

•

"Where have all the judges gone? Reflections on judicial involvement in developing data protection law", in P. Wahlgren (ed.), IT och juristutbildning. Nordisk årsbok i rättsinformatik 2000 (Stockholm: Jure AB, 2001), pp. 113-125; also published in Privacy Law & Policy Reporter, 2000, vol. 7, pp. 11-14, 33-36.

•

"Selvbestemmelse til besvær?", Spor, 2000, no. 3, pp. 5-7.

•

"An international data protection stocktake @ 2000 - Part 2: core principles of data protection", Privacy Law & Policy Reporter, 2001, vol. 7, pp. 169-175.

•

"Minding the Machine: Article 15 of the EC Data Protection Directive and Automated Profiling", Computer Law & Security Report, 2001, vol. 17, pp. 17-24.

•

"Norway", in M. Henry (ed.), International Privacy, Publicity and Personality Laws (London: Butterworths, 2001), pp. 333-346 (co-authored with Anne Helen Aarø).

•

"Et grunnlag for utvikling av en helhetlig nasjonal kryptopolitikk", Forvaltningsinformatisk notatserie / Manuscript Series on Information Technology and Administrative Systems, University of Oslo, 2001, no. 3, 43 pages, available at
http://www.afin.uio.no/forskning/notater/kryptopolitikk_rapport_final.pdf

•

"The place of privacy in data protection law", University of New South Wales Law Journal, 2001, vol. 24, no. 1, pp. 277-283.

•

"Balancing data protection and freedom of expression in the context of website publishing - recent Swedish case law", Computer Law & Security Report, 2002, vol. 18, pp. 56-58; also published in Privacy Law & Policy Reporter, 2001, vol. 8, pp. 83-85.

•

"Electronic Agents and Privacy: A Cyberspace Odyssey 2001", International Journal of Law and Information Technology, 2001, vol. 9, pp. 275-294.

•

"A right to privacy for corporations? Lenah in an international context", Privacy Law & Policy Reporter, 2002, vol. 8, pp. 130-134.

•

"The Technologisation of Copyright: Implications for Privacy and Related Interests", European Intellectual Property Review, 2002, vol. 24, pp. 51-57.

•

"Online dispute resolution - what it means for consumers", Internet Law Bulletin, 2002, vol. 4, no. 8, pp. 81-88.

•

Data Protection Law: Approaching its Rationale, Logic and Limits (The Hague/London/New York: Kluwer Law International, 2002), 448 pages.

•

"The 1995 EC Directive on data protection under official review - feedback so far", Privacy Law & Policy Reporter, 2002, vol. 9, pp. 126-129.

•

"Privacy-enhancing technologies - caught between a rock and a hard place", Privacy Law & Policy Reporter, 2002, vol. 9, pp. 135-137.

•

"Kryptopolitikk i en brytningstid", in H. Godø (ed.), IKT etter dotcom-boblen (Oslo: Gyldendal Akademisk, 2003), pp. 252-278.

•

"Digital Rights Management and Privacy - Legal Aspects in the European Union", in E. Bekker et al. (ed.s), Digital Rights Management: Technological, Economic, Legal and Political Aspects (Heidelberg: Springer Verlag, 2003), pp. 418-446.

•

"EC data protection Directive survives first official review", Privacy Law & Policy Reporter, 2003, vol. 10, pp. 74-76.

•

Personvern i informasjonssamfunnet: En innføring i vern av personopplysninger (Bergen: Fagbokforlaget, 2004), 286 pages (co-authored with Dag Wiese Schartum).

•

"Privacy in a Global Context - A Comparative Overview", Scandinavian Studies in Law, 2004, vol. 47, pp. 319-348.

•

"Personvern etter 11. september", in D. Ekelberg & M. Ludvigsson (eds.), Frihet - samtalen fortsetter (Oslo: Civita, 2004), pp. 142-159.

•

"Safe Harbour Decision Implementation Study", report commissioned by European Commission, April 2004, 263 pages (co-authors: J. Dhont, M.V. Pérez Asinari, Y. Poullet, J.R. Reidenberg), available at http://europa.eu.int/comm/justice_home/fsj/privacy/docs/studies/safe-harbour-2004_en.pdf.

•

"Datakriminalitet", in D.W. Schartum & A. Jansen (eds.), Informasjonssikkerhet. Rettslige krav til sikker bruk av IKT (Bergen: Fagbokforlaget, 2005), pp. 295-307.

•

"Ensuring Respect for Privacy on the Internet", in The Right to Privacy - the Right to Dignity : Proceedings of 26th International Conference on Privacy and Personal Data Protection(Warsaw: Biuro Generalnego Inspektora Ochrony Danych Osobowych, 2005), pp. 273-276.

•

Review of M. Tugendhat QC & I. Christie (eds.), The Law of Privacy and the Media (Oxford: Oxford University Press, 2002), in International Journal of Law and Information Technology, 2005, vol. 13, p. 286-289.

•

Review of M. Klang & A. Murray (eds.), Human Rights in the Digital Age (London: The Glasshouse Press, 2005), in Nordic Journal of Human Rights, 2006, vol. 24, p. 82-86.

•

"Strengthening privacy protection in the Internet environment: A modest program of action", Privacy Law & Policy Reporter, 2006, vol. 11, pp. 222-226.

•

Yulex 2001 (Oslo: Institutt for rettsinformatikk / Unipub, 2001), 126 pages.

•

Yulex 2002 (Oslo: Institutt for rettsinformatikk / UniPub, 2002), 122 pages.

•

Yulex 2003 (Oslo: Institutt for rettsinformatikk / UniPub, 2003), 81 pages.

•

Member of the Editorial Board of Privacy Law & Policy Reporter (1997- ).

•

"Protecting Sensitive Personal Data: Scandinavian Perspectives and Marked Differences within the EU", Seminar on "The Data Protection Directive: Ten Years On", Linklaters and British Institute of International and Comparative Law, London, 30.11.2005.

•

"The impact of DRMS on user privacy interests", International Workshop on "The Future of Copyright in the Digital Age", Universitat Illes Balears, Palma de Mallorca, 7.10.2005.

•

"Rettsregler for vern av teknologiske mekanismer for beskyttelse av opphavsrett mv fra et (kritisk) forbrukerperspektiv", Forum Rettsinformatikk 2005, Sandefjord, Norway, 29 April 2005.

•

"Reflections on Airport Security and Its Social Aspects from a Scandinavian Perspective", International Workshop on "Social and Economic Aspects of an Airport Security Scenario", University of Tilburg, 1 April 2005.

•

"Hvordan vil teknologiutviklingen prege vårt samfunn i 5-10 års perspektiv?", Seminar of Norwegian Ministry of Justice on future role of police, Oslo, 16 March 2005.

•

Panelist in session "DRM between Consumer Expectations and Consumer Rights", 3rd Digital Rights Management Conference, Berlin, 13 Jan. 2005.

•

"Ensuring Respect for Privacy on the Internet", 26th International Conference on Privacy and Data Protection, Wroclaw, Poland, 14-16 Sept. 2004.

•

"Farvel til personvernet?", 10th Anniversary conference for Section for Information Technology and Administrative Systems, University of Oslo, 7 Sept. 2004.

•

"Enforcement and cross-jurisdictional issues with respect to data protection law", British Institute of International and Comparative Law, London, 9 March 2004.

•

"The Body as Data? Reflections on the Relationship of Data Privacy Law with the Human Body", Conference on "The Body as Data", Federation Centre, Melbourne, Australia, 8 September 2003.

•

"The issue of 'data' in data protection and intellectual property law", Columbanus Symposium 2003 on "Database Protection and Freedom of Speech", Faculty of Law, University of Oslo, 29-30 August 2003.

•

"Protection of Personal Data - An Historical Overview", Conference on "Data Protection in the EU", European Institute, Lódz, Poland, 18-19 November 2002.

•

"Privacy-Enhancing Technologies: Caught Between a Rock and a Hard Place", Conference organised by EC Commission on "Implementation of Directive 95/46/EC", Brussels, 30 September 2002.

•

"Online Dispute Resolution - What It Means for Consumers", Conference on "Domain Name Systems and Internet Governance", Grace Hotel, Sydney, 7 May 2002.

•

"The Regulation of Electronic Agents: Privacy and Other Implications", Conference on "Hong Kong IT Law in a Global Perspective: E-Commerce, Consumers and Citizens", Hotel Furama, Hong Kong, 4 October 2001.

•

"The Technologisation of Copyright: Implications for Privacy and Related Interests", Symposium on Data Protection and Intellectual Property on the Internet, Internationales Congress Centrum, Berlin, 27 August 2001.

•

Member of the Australian National Cross-Country Ski Team (1985-1989); competed in Nordic World Skiing Championships in Oberstdorf (1987) and Lahti (1989).

•

Oboist in Canberra Youth Orchestra and Canberra School of Music Orchestra (1982 - 1985).

•

Captain of Canberra Schools' debating team (1979); silver medallist at Australian National Schools Debating Championship, Gold Coast, Queensland (1979).