International Cybersecurity and Privacy Law in Practice

International Cybersecurity and Privacy Law in Practice balances privacy and cybersecurity legal knowledge with technical knowledge and business acumen needed to provide adequate representation and consultation both within an organization, such as a government entity or business, and when advising these organizations as external counsel. Although organizations collect information, including personal data, in increasing volume, they often struggle to identify privacy laws applicable to complex, multinational technology implementations. Jurisdictions worldwide now include specific cybersecurity obligations in privacy laws and have passed stand-alone cybersecurity laws. To advise on these compliance matters, attorneys must understand both the law and the technology to which it applies. This book provides an innovative, in-depth survey and analysis of international information privacy and cybersecurity laws worldwide, an introduction to cybersecurity technology, and a detailed guide on organizational practices to protect an organization's interests and anticipate future compliance developments. It also introduces cybersecurity industry standards, developing cybersecurity legal developments, and international data localization laws.

What's in this book:

This book explores international information privacy laws applicable to private and public organizations, including employment and marketing-related compliance requirements and industry-specific guidance. It introduces a legal approach based on industry best practices to creating and managing an effective cybersecurity and privacy program that includes the following and more:

prompt, secure ways to identify threats, manage vulnerabilities, and respond to "incidents"; defining the accountability of the "data controller" within an organization; roles of transparency and consent; privacy notice as contract; rights of revocation, erasure, and correction; de-identification and anonymization procedures; records retention; and data localization. Regulations and applicable "soft law" will be explored in detail for a wide variety of jurisdictions, including an introduction to the European Union's Global Data Protection Regulation (GDPR), China's Cybersecurity Law, the OECD and APEC Guidelines, the U.S. Health Insurance Portability and Accountability Act (HIPAA), and many other national and regional instruments.

How this will help you:

This book is an indispensable resource for attorneys who must advise on strategic implementation of new technologies, advise on the impact of certain laws to the enterprise, interpret complex cybersecurity and privacy contractual language, and participate in incident response and data breach activities. It will also be of value to other practitioners from a broader perspective, such as compliance and security personnel, who need a reference exploring privacy and data protection laws and their connection with security technologies.