COE 526 Data Privacy Lecture 2: Data Privacy and

Transcript:COE 526 Data Privacy Lecture 2: Data Privacy and:
COE 526 Data Privacy Lecture 2: Data Privacy and Protection Laws and Regulations REFERENCE: Prof. Bharat Bhargava (Purdue University) Slides on Data Protection Directives Framework of Data Privacy Laws Landscape of Data Privacy and Protection Laws Examples of comprehensive laws and regulation FIPPS GDPR Sectoral Data Privacy Laws in Saudi Arabia Example of data breaches and Fines Outline 2 COE526: Lecture 2 Read the Fair Information Practices Principles https://www.privacyfirst.nl/acties-3/item/154-the-fair-information-principles-canada.html Read the HIPAA Privacy Rule Summary of the privacy rule https://www.hhs.gov/sites/default/files/privacysummary.pdf Read the GDPR principles https://gdpr.eu/what-is-gdpr/ Think about these questions: What are the common concepts and principles these privacy laws and regulations share? Are there parts of the policy that are too vague? If so, suggest alternatives Identify any data privacy laws and regulations in Saudi Arabia Homework for Next Class 3 COE526: Lecture 2 We will break out to groups, please check your group number and join the channel in the Course Team on MS TEAMS Come up with answers for the following questions What are the common concepts and principles these privacy laws and regulations share? Are there parts of the policy that are too vague? If so, suggest alternatives Identify any data privacy laws and regulations in Saudi Arabia You have about 8 minutes to discuss in the groups. I will be dropping by and be on "listen" mode Then, elect one member to share your answers with the class. Each group will have 1 minute Instructions 4 COE526: Lecture 2 Privacy is a fundamental human right that has become one of the most important rights of the modern age Each country has a provision for rights of inviolability of the home and secrecy of communications Example: In Saudi Law Article 40: "The privacy of telegraphic and postal communications, and telephone and other means of communication, shall be inviolate. There shall be no confiscation, delay, surveillance or eavesdropping, except in cases provided by the Law." Legal Views on Privacy COE526: Lecture 2 5 Data Privacy and Protection laws refer to legislation that is intended to: protect the right to privacy of individuals ensure that Personal Data is used appropriately by organisations that may have Personal data is any information that can be used to identify a natural person Name; Phone Number; Email address; etc Special Categories of Personal Data require more stringent measures of protection Religion; Ethnicity; Medical information; Criminal Data; Children’s Data Data Privacy and Protection Laws