Editing White hat (computer security) (section)

==Legality==
===Belgium===
Belgium legalized white hat hacking in February 2023.<ref>{{cite web |last1=Drechsler |first1=Charlotte Somers, Koen Vranckaert, Laura |title=Belgium legalises ethical hacking: a threat or an opportunity for cybersecurity? |url=https://www.law.kuleuven.be/citip/blog/belgium-legalises-ethical-hacking-a-threat-or-an-opportunity-for-cybersecurity/ |website=CITIP blog |access-date=7 May 2023 |date=3 May 2023 |archive-date=17 May 2023 |archive-url=https://web.archive.org/web/20230517194250/https://www.law.kuleuven.be/citip/blog/belgium-legalises-ethical-hacking-a-threat-or-an-opportunity-for-cybersecurity/ |url-status=live }}</ref>

=== China ===
In July 2021, the [[Government of China|Chinese government]] moved from a system of voluntary reporting to one of legally mandating that all white hat hackers first report any vulnerabilities to the government before taking any further steps to address the vulnerability or make it known to the public.<ref name=":0">{{Cite news |last=Brar |first=Aadil |date=18 January 2024 |title=China Raises Private Hacker Army To Probe Foreign Governments |url=https://www.newsweek.com/china-hackers-probe-foreign-governments-computers-online-cybersecurity-1861721 |access-date=20 January 2024 |work=[[Newsweek]] |archive-date=20 January 2024 |archive-url=https://web.archive.org/web/20240120053025/https://www.newsweek.com/china-hackers-probe-foreign-governments-computers-online-cybersecurity-1861721 |url-status=live }}</ref> Commentators described the change as creating a "dual purpose" in which white hat activity also serves the country's intelligence agencies.<ref name=":0" />

===United Kingdom===
Struan Robertson, legal director at Pinsent Masons LLP, and editor of [[OUT-LAW|OUT-LAW.com]] says "Broadly speaking, if the access to a system is authorized, the hacking is ethical and legal. If it isn't, there's an offense under the [[Computer Misuse Act]]. The unauthorized access offense covers everything from guessing the password to accessing someone's webmail account, to cracking the security of a bank. The maximum penalty for unauthorized access to a computer is two years in prison and a fine. There are higher penalties&nbsp;– up to 10 years in prison&nbsp;– when the hacker also modifies data". Unauthorized access even to expose vulnerabilities for the benefit of many is not legal, says Robertson. "There's no defense in our hacking laws that your behavior is for the greater good. Even if it's what you believe."<ref name=Knight />