German Law Could Protect Researchers Reporting Vulns

Germany’s Federal Ministry of Justice has proposed legislation to protect security researchers who discover and report vulnerabilities, removing criminal liability when research meets defined criteria (intent to identify and responsibly report flaws, and limited system access). The draft also introduces prison penalties for severe malicious data spying and interception, with Minister Marco Buschmann emphasizing recognition over prosecution for those closing IT security gaps.