Laws and regulations relating to computer and data use.

Lesson 10/29 | Study Time: Min

Course: Level 2 Diploma in Business Beginners in Cyber Security

Laws and regulations relating to computer and data use:

Did you know that the world creates 2.5 quintillion bytes of data every day? With such humongous quantities of data being generated, the importance of laws and regulations in safeguarding this data cannot be overstated.

The Landscape of Regulations

Our digital world is criss-crossed by a complex web of both national and international laws governing computer and data use. These laws aim to protect the rights of the individuals and organizations that generate data, to ensure the privacy and security of data, and to deter cybercrimes.

For instance, the United States has a patchwork of federal and state laws, such as the California Consumer Privacy Act (CCPA), which gives consumers more control over the personal information that businesses collect about them.

GDPR: The Benchmark Legislation

One of the most significant pieces of legislation, with potentially global implications, is the 🇪🇺 General Data Protection Regulation (GDPR). Enacted in 2018, GDPR gives people control over their personal data and simplifies the regulatory environment for international business by unifying the regulation within the EU.

An example of GDPR in action is the hefty €50 million fine levied on Google by France's CNIL in 2019 for "lack of transparency, inadequate information and lack of valid consent regarding ads personalization”.

Consequences of Non-Compliance

The penalties for non-compliance can be severe, with fines reaching up to 4% of a company's annual global turnover or €20 million, whichever is greater. These penalties can be triggered by both deliberate and unintentional data breaches, highlighting the importance of robust data security measures.

Safeguarding Data: At Rest and In Transit

Protecting data at rest involves securing data that is stored in databases, file systems, and other structured storage methods. For example, encryption techniques can render the data unreadable to unauthorized users.

On the other hand, protecting data in transit deals with data that is being transferred over a network, such as an email being sent or a webpage being loaded. Techniques here may include Secure Sockets Layer (SSL) or Transport Layer Security (TLS) encryption.

The Fight Against Cybercrime

In addition to data protection, laws also exist to tackle various forms of cybercrime, including data theft, vandalism, and cyberbullying. These crimes can result in severe penalties, ranging from hefty fines to imprisonment.

For instance, the Computer Misuse Act 1990 in the UK, which has been used to prosecute various forms of hacking, unauthorized access, and the spread of viruses, carries a maximum penalty of 14 years in prison for some offenses.

In a nutshell, the laws and regulations that govern computer and data use play a pivotal role in shaping the digital landscape, ensuring the rights of individuals and businesses, and combating cybercrime. Understanding these laws is crucial in the data-driven world of today.

Previous Lesson Next Lesson

UeCampus

Product Designer

Profile

Class Sessions

1- Introduction 2- Computer hacking: Understanding the term and its types. 3- Impacts of hacking on individuals and organizations. 4- Types of hackers and their motivations. 5- Introduction 6- Types of cyber-attack methods: Understanding the different methods used in cyber-attacks on business communities. 7- Targeted vs. untargeted cyber-attacks: Understanding the difference and impact of targeted and untargeted attacks. 8- Identifying hacked devices: Recognizing 9- Introduction 10- Laws and regulations relating to computer and data use. 11- Impact of EU GDPR and similar legislation on businesses in an international trading environment. 12- Ways to protect data in transit and data at rest. 13- Criteria for Personal Data under EU GDPR and other major jurisdictions. 14- Legal sanctions for computer misuse. 15- Legal requirements to report suspected 16- Introduction 17- Key cyber security lapses and challenges in relation to mobile devices. 18- Threats posed to mobile devices and Wi-Fi enabled devices from malicious hacking. 19- Key cyber security lapses and challenges in relation to the Internet of Things. 20- Methods used to protect a range of mobile devices and the related data. 21- Practical steps to prevent the loss of data. 22- Introduction 23- Importance of mindset in cyber security. 24- Physical security approaches in cyber security plans 25- CPTED principles in cyber security plans. 26- ISO27001 Information Security Management Standard. 27- Other useful standards and education programs. 28- Key requirements of a security toolkit. 29- Designing a cyber security toolkit.

noreply@uecampus.com