HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)

HackerOne submitted comments to the U.K. review of the Computer Misuse Act urging that revisions explicitly protect and encourage good-faith security research and the operation of Vulnerability Disclosure Programs, oppose certification or training requirements for statutory defenses, and align U.K. law with international best practices to support coordinated vulnerability disclosure.