“A natural or legal person is now authorised to investigate organisations in Belgium for potential cybersecurity vulnerabilities, even if they have not consented to such investigations.”
Since 15 February, Belgian hackers can probe a company without its permission and walk away clean. The catch is four conditions: no harm, no unagreed payment, report to the Centre for Cyber Security Belgium, and no public disclosure without its consent. That last one hands the state a veto over every blog post about a bug. Legal hacking, government-approved silence.