ABSTRACT

The European Union's General Data Protection Regulation (GDPR) and California's Consumer Protection Act (CCPA) are the newest regulations that require a digital asset approach to ensure that the systems that process privacy data have sufficient integrity and confidentiality.

In this chapter, we will be looking at the GDPR from a deeper cybersecurity perspective to understand the requirements for the privacy impact assessment and explore a case study.