Chapter 9Privacy Laws
CHAPTER MENU
- Section 5 of the FTC Act and Privacy
- Health Insurance Portability and Accountability Act
- Gramm-Leach-Bliley Act and California Financial Information Privacy Act
- CAN-SPAM Act
- Video Privacy Protection Act
- Children's Online Privacy Protection Act
- California Online Privacy Laws
- Illinois Biometric Information Privacy Act
Thus far we have focused primarily on laws that affect the security of data, systems, and networks, and the ability of the government and the private sector to conduct surveillance on this infrastructure to prevent cybercrime and other harms. However, an examination of cybersecurity law would be incomplete without an overview of privacy law.
Privacy law limits companies' collection, use, sharing, and retention of personal information. While data security laws provide the safeguards that companies must have in place to prevent hackers from accessing customer data, privacy law restricts companies' ability to use customer data. For instance, privacy law may prevent a company from selling customer web-browsing activities to third-party marketers, building customer profiles based on the videos they view online, or using facial recognition.
Some might argue that privacy law is outside of the scope of cybersecurity law, and they may be correct. At least under some conceptions of cybersecurity law, it is irrelevant how companies choose to legitimately use customer data. However, cybersecurity is an emerging field and there is not a ...
Get Cybersecurity Law now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
