Title of the assignment

Development of a compendium of Lebanese legislation on digital and cyber security.

 

1 - General context and objectives

A continuous dialogue between the European Union and Lebanon has been focussing, for several years, on security and counter-terrorism. Aligned with the European Neighbourhood Policy and the European Union Global Strategy on Foreign and Security Policy, an agreed roadmap addresses the areas of counter-terrorism, justice and law enforcement, countering terrorism financing and violent extremism, among others.

The project “Advance Counter Terrorism for Lebanon security” (2020-2023), led by the Spain´s International and Ibero-American Foundation for Administration and Public Policy (FIIAPP), in consortium with CIVIPOL (France) and Arma di Carabinieri (Italy), aims at reinforcing national capacities in Lebanon to react to the threats of terrorism and organized crime while promoting rule of law and human rights, in line with international standards.

Three specific objectives are pursued:

SO 1: Improved national response against terrorism, in line with international standards.

SO 2: Improved cyber-security and protection and response against cyber-terrorism.

SO 3: Improved application of rights-based approach to Counter Terrorism (CT) / Violent Extremism (VE) cases by law enforcement officials and Courts.

The digitalisation of society translates the challenges of terrorism and organized crime into the cyberspace. Therefore, the project counts as its specific objective 2 to enhance protection and response against terrorism and crime through an improved cybersecurity national system.

Under the general supervision and coordination of the Secretary General of the Council of Ministers and the Higher Defence Council, the project include key stakeholders from the Lebanese Law Enforcement Agencies, such as the Lebanese Armed Forces (LAF), the Internal Security Forces (ISF), the General Security (GS) and the State Security (SS) as well as civil servants of various ministries and public authorities in charge of supervising critical infrastructure operators, in sectors such as Defence, Interior, Telecommunications, Banking, Health and so forth. Besides, Parliamentary Committees, representatives of the National Human Rights Commission and members of Civil Society Organizations will count amongst regular counterparts as well. Finally, partnerships with private companies and Universities will be highly promoted.

Two outputs are expected in the domain of cybersecurity: the enhancement of national capacity to prevent and counter cyber-terrorism and cyber-organized crime, on the one hand, and the increasing of awareness on cybersecurity and cyber-crime, on the other hand.

 

2 - Description of the assignment

Background

Lebanon is facing today a number of cyber-related threats that require the adaptation of existing law and the development of new regulations. Lebanese legislators are currently taking significant steps in developing specific legislations on cybersecurity matters including information systems security, protection of critical infrastructures, digital trust, data protection and privacy, resilience, combating cybercrime and cyber-terrorism, use of emerging technologies (e.g. AI).

It is therefore fundamental for Law Enforcement Agencies (LEAs), the judiciary, BAR associations, and civil society organisations (CSOs) to have access to these legal documents. Till today there is no single document englobing the Lebanese legislation on cybersecurity.

Objective

The purpose of this activity is to produce a comprehensive compendium of Lebanese legislation on digital and cyber security.

Expected result

The Lebanese authorities and civil society have a reference book listing all Lebanese regulation on digital and cyber security.

 

3 - Course of the assignment

The assignment consists in developing a first edition of the compendium of Lebanese legislation on digital and cyber security.

Design, editing and printing is not included in this assignment (FIIAPP will hire a specialized company to do so).

The experts will have access to a preliminary catalogue of Lebanese regulatory and legal texts on digital and cyber security, developed during a previous ACT activity, which is a good reference and starting point for this assignment. The French “Code de la Cybersécurité” is also a good reference.

The mission includes two short-term experts:

• A senior expert in Lebanese legislation on digital and cyber security, based in Lebanon;
• A senior expert in European and international legislation on digital and cyber security.

1. STE1 – SENIOR EXPERT IN LEBANESE LEGISLATION ON DIGITAL AND CYBER SECURITY, BASED IN LEBANON

Tasks required (35 working days)

• Plan and steer the necessary meetings with all involved stakeholders;
• Propose an editorial structure for the compendium;
• Draft all the contents of the compendium, taking existing work into account.

Deliverables and outputs of the mission

• Agenda and minutes of meetings;
• Compendium content finalised for editing and publication[1];
• Activity report, according to the template provided.

NB: the deliverables are to be drafted in English, with the exception of the compendium itself, which may be written in Arabic.

2. STE2 – SENIOR EXPERT IN EUROPEAN AND INTERNATIONAL LEGISLATION ON DIGITAL AND CYBER SECURITY

Tasks required (25 working days, including 10 in Lebanon)

• Share experience on the structure and content of other compendia;
• Share knowledge on European and international legislation, where appropriate;
• Participate in the necessary meetings.

Deliverables and outputs of the mission

• Deliverable in a written format of the main European and international legislation;
• Activity report, according to the template provided.

NB: the deliverables are to be drafted in English.

 

4 - Location, duration and financing of the assignment

Places of the mission

The mission will be deployed in Beirut, Lebanon.

Preparatory work can be carried out at home.

Some meetings can be held remotely, on-line, where appropriate.

Two 5-day missions to Lebanon are planned for the European and international law expert for workshops and meetings in Beirut.

Period of the mission

The mission will take place from February to June 2024.

Duration of the mission

The estimated duration is:

• 35 working days for the expert in Lebanese legislation based in Lebanon.
• 25 working days (including 10 in Lebanon) for the expert in European and international legislation.

Financial aspects

The experts will receive fees for each working day.

A working day can be invoiced if the expert spends at least seven working hours, excluding any break. Short term experts are bound by the rules on hours of work in force in the Lebanese administration.

 

5 - Required expertise

1. STE1 : SENIOR EXPERT IN LEBANESE LEGISLATION ON DIGITAL AND CYBER SECURITY, BASED IN LEBANON

Qualifications and skills

Advance academic degree (Master's level or upper) or equivalent senior experience in digital law or cybersecurity.

Mastery of English and Arab is a must.

General professional experience

At least 12 years of professional experience in Lebanese legislation and regulation.

Specific professional experience

Proven knowledge of Lebanese legislation on digital and cyber security.

Experience in at least one capacity building project in the field of counter-terrorism and cybercrime.

2. STE 2 : SENIOR EXPERT IN EUROPEAN AND INTERNATIONAL LEGISLATION ON DIGITAL AND CYBER SECURITY

Qualifications and skills

Advance academic degree (Master's level or upper) or equivalent senior experience in digital law or cybersecurity.

Mastery of English is a must. Knowledge in other languages in use in Lebanon would be an asset (Arabic or French).

General professional experience

At least 12 years of professional experience in the field of private, public or criminal law.

Specific professional experience

Proven knowledge of European and international legislation on digital and cyber security.

At least one certification on cybersecurity skills in the fields of law and policy.

Experience in developing a compendium on digital and cybersecurity legislation or in negotiations at national or international level on these subjects would be an asset.