This document discusses privacy and regulatory issues related to the internet. It addresses the concepts of privacy and internet privacy threats such as data breaches. It then covers various internet regulations including compliance standards, laws governing internet and cloud contracts, and important Spanish laws related to the internet and e-commerce. Specific regulatory bodies and compliance standards discussed include the Cloud Security Alliance, European Network and Information Security Agency, Spanish LSSI/CE and LOPD laws.

1. Introduction
Master Class 8
Privacy & regulatory issues in Internet
Josep Bardallo

2. 2
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Privacy
Privacy is the ability of an individual or group to seclude themselves or
information about themselves and thereby reveal themselves selectively.
Privacy is the ability of an individual or group to seclude themselves or
information about themselves and thereby reveal themselves selectively.

3. 3
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Internet Privacy

4. 4
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Internet Privacy threats

5. 5
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Internet Privacy threats

6. 6
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Internet Privacy threats

7. 7
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Data Breach

8. 8
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Data Breach

9. 9
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Data Breach (this month)

10. 10
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Internet Regulation

11. 11
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Compliance: Other regulations
 Cloud Providers must have Audit certifications (like SAS
70)
 Some ISO about Security (ISO 27000), Service
Managent (ISO 20000) or Business continuities
 Vertical regulations like SOX, NIST, PCI, FISMA, HIPAA,
GMP, ….
 New regulations in Cloud like Trusted Cloud Initiative ..
 Country Specific regulations (LOPD, Privacy Act…)
 ……..

12. 12
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Regulation in Internet / cloud contracts
 From CSA (Cloud Security Alliance)
 Confidentiality
 Intellectual property (IP)
 Responsibility
 How to cancel contract before time
 Privacy, law in the contract
 Audit and tracking
 Security
 SLA (Service Level agreement)

13. 13
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Regulation in Internet / Cloud contracts
 From ENISA (european Network and Information
Security Agency)
 Data Privacy
 Confidentiality
 IP (Intellectual property)
 Negligence
 Outsourcing of services or part of services

14. 14
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Regulation in Internet / Cloud contracts
 From INTECO (Instituto nacional tecnologias de las
comunicación)
 SLA
 Uptime
 Performance
 Security
 Payment
 End of service
 Support services
 Modification of service
 Privacy and regulation

15. 15
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Important Spanish Laws in Internet / eCommerce
 LSSI / CE (59/2003)
 Propietary, address, CID … visible in the web if selling services in Spain
 User must accept the receipt of commercial information
 Service condition defined in the web
 ISP must retain 2 years of information about user navigation
 Content responsibility
 …
 LOPD (15/1999)
 LPI (Intellectual property)
 LGT (Telecommunications)

16. 16
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Spanish Laws

17. 17
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Spanish Laws

18. 18
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
VIDEO
 ACTA / SOPA : New regulation in Internet
http://www.youtube.com/watch?v=NXhIktkK78s&feature=youtu

19. 19
NetworkingServices&infr.//MasterinICTStrategicManagement
NSI– MSISM 1st Edition 20 / 11 / 2012Josep Bardallo
Bibliography
 http://www.privacidad-online.net/
 http://www.abc.net.au/lateline/content/2012/s3583016.htm
 http://www.iitr.us/data-protection-in-dubai-the-difc-data-protection-law.html
 http://www.enriquedans.com/2012/11/realmente-existe-la-privacidad.html
 http://dilbert.com/blog/entry/the_privacy_illusion/
 http://gigaom.com/2012/11/13/government-surveillance-on-the-rise-says-new-google-report/
 http://news.cnet.com/8301-31921_3-57402143-281/ten-worst-internet-laws-of-2012/
 http://www.cyberwarnews.info/2012/11/11/amazon-uk-hacked-600-credentials-leaked-by-darwinare/
 http://www.symantec.com/about/news/resources/press_kits/detail.jsp?pkid=ponemon
 www.agpd.es
 www.enisa.org
 www.csa.org