[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Upcoming EU Legislation (Cyber Resilience Act and Product Liability Directive)



I completely agree with Jeremy. This is absolutely important. EU
legislation is heavily influenced by lobbying and we should not shy away
from that. Lobbying for a good cause is good and also succesful if it's
done unanimously and coordinated, see "chat control" (CSAMR) as a recent
example.

I talked to the DPL in May and kind of delegated myself into the
lobbying process (which includes OSI and LF by the way) because there is
no formal Debian way of doing this (and I represent a derivative
distribution which shares my views).

I think SPI has limited possibilities to engage in these things due to
their US non-profit status, but I don't know US law, so I'm not sure
about that. From my point of view it would be better to join in with one
of the European groups, like EDRI or OFE, but I don't know the internal
workings of Debian well enough.

Ilu

Am 13.11.23 um 16:22 schrieb Jeremy Stanley:
On 2023-11-12 01:58:42 +0100 (+0100), Ilulu wrote:
as a result of our discussions on DebConf23 and MiniDebConf
Uruguay I would like to alert a broader audience to some proposed
legislation in the European Union. I think Debian should take a
public stand in this debate.
[...]

On a related note, I've been talking informally with OSI leadership
about how SPI might get more involved in their efforts around this
problem on behalf of the projects we represent. I hadn't put much
time into it yet because (until now), I'd seen no clear evidence of
any SPI associated projects raising actual concerns about the CRA.

In July of this year, OSI and LF organized a series of
invitation-only meetings in Geneva they called the Open Source
Congress, primarily in order for non-profit foundations to discuss
the potential impact of in-progress legislation like the CRA on
free/libre open source software developer communities. I found out
after the fact, and when I asked a friend at OSI why SPI hadn't been
invited, I was told it was simply because *they forgot we exist*.

One of my goals is to make sure we have a seat at the table during
future such discussions, so anything we can do to coordinate
messaging between Debian and SPI would be great. What would help, I
think, is for representatives of Debian to officially state that
they'd like SPI to be involved in these and similar activities,
either along with or on behalf of the Debian community. As long as
there's clear public indication of that desire, it's much easier for
me to push related activities (through formal votes on resolutions)
from within the board of directors.


Reply to: