Draft Swiss AntiVirus regulation

[David Farber <farber () central cis upenn edu>]

Date:  Sat, 9 Oct 1993 13:49:29 +0100
From: Klaus Brunnstein <brunnstein () rz informatik uni-hamburg d400 de>
Subject:  Draft Swiss AntiVirus regulation


To whom it may concern:


The Swiss Federal Agency for Informatics (Bundesamt fuer Informatik, Bern) is
preparing a legislative act against distribution of malicious code, such
as viruses, via VxBBS etc. You may know that there have been several attempts
to regulate the development and distribution of malicious software, in UK, USA
and other countries, but so far, Virus Exchange BBS seem to survive even in
countries with regulations and (some) knowledgeable crime investigators.


In order to optimize the input into the Swiss legal discussion, I suggested 
that their draft be internationally distributed,  for comments and suggestions
from technical and legal experts in this area. Mr. Claudio G. Frigerio from
Bern kindly translated the (Swiss) text into English (see appended text, both
in German and English); in case of any misunderstanding, the German text is the
legally relevant one! Any discussion on this forum is helpful; please send 
your comments (Cc:) also to Mr. Claudio G. Frigerio (as he's not on this list).


"The Messenger" (Klaus Brunnstein: October 9, 1993)


###############################################################
Appendix 1:
Entwurf zu Art. 144 Abs. 2 des Schweizerischen Strafgesetzbuches


"Wer unbefugt elektronisch oder in vergleichbarer Weise gespeicherte oder
uebermittelte Daten loescht, veraendert oder unbrauchbar macht, oder Mittel,
die zum unbefugten Loeschen, Aendern oder Unbrauchbarmachen solcher Daten
bestimmt sind, herstellt oder anpreist, anbietet, zugaenglich macht oder
sonstwie in Verkehr bringt, wird, auf Antrag, mit der gleichen Strafe belegt."


P.S.: gleiche Strafe =JBusse oder Gefaengnis bis zu 3 Jahren;
      bei grossem Schaden, bis zu 5 Jahren Gefaengnis sowie Verfolgung
      von Amtes wegen (Offizialdelikt)


###############################################################
Draft of article 144 paragraph 2 of the Swiss Penal Code
(English translation)


 Anyone, who, without authorization
   - erases, modifies, or destructs electronically or similarly saved or data,
 or anyone who,
   - creates, promotes, offers, makes available, or circulates in any way
     means destined for unauthorized deletion, modification, or destruction 
     of such data,
 will, if a complaint is filed, receive the same punishment.


P.S.: same punishment = fine or imprisonment for a term of up to three years;
   in cases of a considerable dam-age, five years with prosecution ex officio.


Author: Claudio G. Frigerio, Attorney-At-Law, Swiss Federal Office of
Information Technology and System, e-mail: bfi () ezinfo vmsmail ethz ch