The Cyber Security Handbook – Prepare for, respond to and recover from cyber attacks

CHAPTER 4: REGULATORY AND CONTRACTUAL REQUIREMENTS

If the fact that your organisation needs to wade through a complex cyber threat landscape in order to compete in today’s digital world is in itself not a strong enough case to invest in cyber security and resilience, the added pressure from a global regulatory system that is beginning to catch up might be.

4.1 International data privacy laws

The introduction of the EU General Data Protection Regulation (GDPR) in 2016 – which was enforced two years later – marked a major milestone for data protection and privacy laws across the world. Most of us remember the flood of ‘we need your consent’ emails that arrived in our inboxes in the days leading up to and after the GDPR took effect,³ but those emails ...