As governments seek to protect their networks against cyber attacks, they are frequently constrained by laws designed to protect privacy, citizens’ to access information and employee rights. This panel will discuss where the law is unclear or unhelpful for agencies responding to cyber security threats such as monitoring, blocking network traffic and incident investigations.