MLSC6050 · Law

Intersection of Cybersecurity Law, Artificial Intelligence (AI) & Privacy

Boston College Law School

This course provides a comprehensive examination of the varying Federal and State laws, regulations, and Executive Orders concerning cybersecurity, AI and data privacy, including PCI, HIPAA, GLBA, SOX, FISMA, NIST, FISA, CFAA, CCPA, NYDFS, and their overseas counterparts (e.g., the EU GDPR, EU AI Act, China PIPL), and the roles of Federal, State, and local regulators and law enforcement officials. The course also examines cyber and national security and data privacy issues governed by various Federal agencies (e.g., SEC, FTC, FCC, DOD, DOJ, DHS, NSA, Treasury), including suspicious activity reporting (SAR) requirements under the Patriot Act. Additionally, the course addresses the varying frameworks (e.g., NIST CSF) and guidance for intellectual property protection, security classifications, information sharing, incident planning and response, Board governance, data location requirements, audits, compliancy and risk assessments, and individual, class-action, and shareholder derivative litigation and liability. Upon completion of this course, Students will be able to provide senior executives and Boards of Directors sound, practical guidance, in "plain language," concerning the varying cybersecurity and data privacy matters identified, analyzed, and discussed throughout the course.