CN3303 - Lecture 7 : Legal and Compliance

What is GDPR, and why is it important?

• GDPR is a type of software used for data analysis.
• GDPR is a marketing strategy for businesses in the EU.
• The General Data Protection Regulation governs data privacy and protection for EU citizens.

• GDPR is a financial regulation that affects banking systems.

Which law applies to healthcare information in the U.S.?

• FERPA
• HITECH
• GDPR
• HIPAA

What is the significance of data sovereignty?

• Data sovereignty allows unrestricted data sharing across borders.
• • Ensures data is stored within the geographical boundaries where it’s subject to local laws.

• Data sovereignty is primarily concerned with data storage costs.
• Data sovereignty has no impact on user privacy rights.

What is SOC 2, and why is it relevant for cloud providers?

• SOC 2 is a type of software used for cloud storage.
• SOC 2 is a certification for hardware manufacturers.
• SOC 2 ensures cloud providers maintain effective security, availability, and privacy controls.

• SOC 2 is a marketing strategy for cloud providers.

Why is incident reporting important in cloud compliance?

• It ensures timely notification of security breaches to minimize damage and comply with legal requirements.

• Incident reporting is primarily for internal team communication.
• Incident reporting has no impact on security measures.
• Incident reporting is only necessary for on-premises systems.

What challenge does cross-border data transfer present?

• Enhanced user experience in data access.
• Simplified data storage solutions.
• Increased internet speed for data transfer.
• It must comply with international laws, ensuring data protection when moving across regions.

Why are retention and destruction policies important in cloud compliance?

• Retention policies are only necessary for on-premises data.
• They help in increasing data storage costs.
• Destruction policies are irrelevant to data security.
• They ensure data is stored only for as long as necessary and destroyed securely to avoid breaches.