# data[].attributes.body
CLO1: Articulate current and developing legal issues in cybersecurity and information assurance.
CLO2: Analyze and interpret how relevant case and statutory law has been applied to data breaches and cybersecurity.
CLO4: Identify problems and propose solutions to system security and policy deficiencies that comply with appropriate federal and state laws and regulations.

# data[].attributes.body
This week we will address US laws that protect individuals’ personally identifiable information (PII).  When combine with privacy laws, identity theft laws provide the necessary foundation for the legal imperative that data breach is addressed and managed by corporations.

# data[].attributes.body
1.1:  Legal Doctrine: Students will examine fundamental legal principles and the conceptual frameworks of the American legal system.

1.1a:  Students will examine the structure, branches, and functions of the U.S. and state systems.

1.1b:  Students will demonstrate the ability to identify fundamental legal principles and apply them in specific factual situations.

1.1c:  Students will demonstrate the ability to use standard legal terms correctly.

1.2:  Policy: Students will examine the role of public policy in the American legal system.

1.2a:  Students will identify the public policies underlying legal rules and principles.

2.2: Communication: Students will develop the ability to communicate effectively in writing.

2.2a Students will practice written advocacy by presenting well-reasoned and well-articulated arguments.

# data[].attributes.body
MLO3a: Identify types of PII and where it may be located.

MLO3b: Explain the difference between data generally and PII specifically.

MLO3c: Explain what identifies an individual as a victim of identity theft.

MLO3d: Compare and contrast CIA and PCC.

MLO3e: Evaluate the risk to an individual from a current data breach (i.e. Equixfax).

MLO3f: Justify the student of PII and identity theft as it relates to data breach.

# data[].attributes.body
Serwin, Andrew B., The FTC's Increased Focus on Protecting Personal Information: An Overview of Enforcement and Guidance (November 22, 2008). Available at SSRN:

# data[].attributes.attachment_link.keywords[]
the ftc's increased focus on protecting personal information: an overview of enforcement and guidance

# data[].attributes.attachment_link.title
The FTC's Increased Focus on Protecting Personal Information: An Overview of Enforcement and Guidance by Andrew Serwin :: SSRN

# data[].attributes.attachment_link.description
The Federal Trade Commission is the main federal privacy enforcement agency in the United States. While there are a number of federal laws that provide guidance

# data[].attributes.body
NIST Standard:   Guide to Protecting the Confidentiality of Personally
Identifiable Information (PII) Special Publication 800-122 US Dept. of Commerce

# data[].attributes.body
Discussion 3a - Were you Equifaxed?
Written Assignment 3b - Speedy Loss

# data[].attributes.body
| Statute:   18 U.S.C. §§ 1028 & 1028A (identity theft and aggravated identity theft)

# data[].attributes.body
Identity Theft Red Flags and Address Discrepancies Under the Fair and Accurate Credit Transactions Act of 2003, Final Rule (the “Red Flag” Rule), 72 Fed. Reg. 63,718 (Nov. 9, 2007) (read p. 63,718 to middle section on p. 63,720 and Appendix A pp. 63,773 - 63,774)