Cybersecurity and Data Privacy

1.5 units

This course will focus on the fundamental principles of privacy and cybersecurity. Privacy topics covered will include: (a) why privacy matters; (b) fundamental privacy principles which find implementation in a wide range of privacy laws; (c) scope of privacy law; (d) U.S. Federal privacy laws (including HIPAA, COPPA, GLB, FCRA); (e) key State privacy laws (including CalOPPA, Massachusetts's Data Security Regulation, and overview of breach notification laws); (f) overview of foreign privacy regimes, with a particular focus on European Union's evolving privacy laws; (g) restrictions on, and methods to accomplish, trans-border data transfer in light of varying laws (e.g. Privacy Shield, Model Contracts); and (h) key enforcement bodies and selected enforcement decisions. The cybersecurity discussion will focus on a non-technical overview of key cybersecurity concepts and principles. Topics covered will include: (a) definition and key components of security in accordance with current best practices; (b) overview of common attack vectors; (c) overview of types of available security controls; (d) discussion of key non-technical security measures; and (e) integration of these principles into existing and prospective legal frameworks. The class will be graded on a modified pass/fail basis: HP (3.94), P, LP (2.98), F (2.50).