Ethics and Law in Data Analytics / Data Security

Objectives

The first part of the course is designed to provide students with a "general legal culture", which will make it easier for them to discuss specific aspects of "data protection" regulations with their legal departments once they are in post.

The second part aims to provide students with a "security management culture", including data security issues, responsibilities and application methods, with concrete examples.

Course outline

Drawing on current events (geopolitical, technological, economic), the first part of the seminar will put into perspective a series of legal and ethical issues linked to the digitization of society as a whole, in both the professional and personal environments.
Concrete examples of current proceedings before French and international bodies, as well as current events, will illustrate this presentation and provide food for thought on the global impact of technological change on our civilization.

The second part will be based on current standards and guidelines (RGPD, ISO). It will present the principles of the method for establishing a security policy in order to understand what is at stake: objectives, governance, risks, measures, action plan, indicators, evaluation and continuous improvement. This section will also present recommendations, examples of security incidents and the main security measures generally implemented: anonymization, encryption, backups, access permissions, etc.

Prerequisites

None