W3C

I'm the Legal counsel of W3C. But W3C itself is a cooperation between hosting institutions, namely MIT, ERCIM, Keio University and Beihang University). I am attached to the ERCIM host. This means I also have responsibility for legal matters within ERCIM.
The position reserves a very diverse set of fields of action, including licensing, contract creation, contract management, and HR issues. Of course, policy, including public policy considerations play a big role. By its nature, this part of my activities is hardly visible to the outside world. The most visible part was me chairing many of the Patent Advisory Groups of W3C. (See the XML Security PAG e.g.)

As I participated in the works on the reform of the European Standardisation system since 2006, the European Commission selected me as an expert from W3C into the European Multistakeholder Platform for Standardisation.

ERCIM

Privacy

From joining W3C in 1999 until November 2013, I was responsible for all Privacy works within W3C mainly working on the P3P and later on Tracking Protection (DNT) where I pushed to make DNT usage compatible with a European Consent mechanism for the Directive on Electronic Communications

Working on cutting edge Privacy involves also research work. For W3C I was part of the PRIME project and the PrimeLife project. On 01 January 2017 a new project started: SPECIAL promises to solve some of the privacy issues in big data. It does so by developing a privacy metadata engine capable of controlling streams of data within a big data environment.

Security

Privacy and Security go hand in hand. There is no Privacy without a good IT Security. But sometimes, both collide (intrusion detection and pattern search). Such conflicts have to be resolved in a reasonable way, which is not always easy. From 2013 until 2015 I was the technical coordinator of the STREWS project working on a Web security roadmap for Europe [PDF]. STREWS was also instrumental in organising the STRINT Workshop. This Workshop looked into measures against pervasive monitoring.

Other things

Having only missed 3 times the EDV-Gerichtstag I am a fan and in the Board of the Association carrying the conference. I remain very attached to legal Informatics.