Table Of ContentInformation Technology / IT Management K
a
l
Big Data: A Business and Legal Guide supplies a clear understanding of the
y
interrelationships between Big Data, the new business insights it reveals, and the v
a
laws, regulations, and contracting practices that impact the use of the insights s
and the data. Providing business executives and lawyers (in-house and in private • B
practice) with an accessible primer on Big Data and its business implications, this O
book will enable readers to quickly grasp the key issues and effectively implement v ig
e
the right solutions to collecting, licensing, handling, and using Big Data. r
l
y
The book brings together subject matter experts who examine a different area of
law in each chapter and explain how these laws can affect the way your business or
organization can use Big Data. These experts also supply recommendations as to
the steps your organization can take to maximize Big Data opportunities without D
increasing risk and liability to your organization.
ata
• Provides a new way of thinking about Big Data that will help
readers address emerging issues
B
• Supplies real-world advice and practical ways to handle the issues
i
• Uses examples pulled from the news and cases to illustrate points
g
• Includes a non-technical Big Data primer that discusses the
characteristics of Big Data and distinguishes it from traditional
D
database models A Business
a
Taking a cross-disciplinary approach, the book will help executives, managers,
and Legal Guide
and counsel better understand the interrelationships between Big Data, decisions t
based on Big Data, and the laws, regulations, and contracting practices that impact
a
its use. After reading this book, you will be able to think more broadly about the
best way to harness Big Data in your business and establish procedures to ensure
that legal considerations are part of the decision.
James R. Kalyvas
Michael R. Overly
K20560
6000 Broken Sound Parkway, NW
Suite 300, Boca Raton, FL 33487 ISBN: 978-1-4665-9237-7
711 Third Avenue 90000
New York, NY 10017
an informa business
2 Park Square, Milton Park
www.crcpress.com Abingdon, Oxon OX14 4RN, UK
9 781466 592377
www.auerbach-publications.com
K20560 cvr mech.indd 1 8/4/14 9:27 AM
B
ig
D
ata
A Business
and Legal Guide
B
ig
D
ata
A Business
and Legal Guide
James R. Kalyvas
Michael R. Overly
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2015 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Version Date: 20140324
International Standard Book Number-13: 978-1-4665-9238-4 (eBook - PDF)
This book contains information obtained from authentic and highly regarded sources. Reasonable efforts have been made
to publish reliable data and information, but the author and publisher cannot assume responsibility for the validity of all
materials or the consequences of their use. The authors and publishers have attempted to trace the copyright holders of all
material reproduced in this publication and apologize to copyright holders if permission to publish in this form has not
been obtained. If any copyright material has not been acknowledged please write and let us know so we may rectify in any
future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmitted, or utilized in
any form by any electronic, mechanical, or other means, now known or hereafter invented, including photocopying, micro-
filming, and recording, or in any information storage or retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copyright.com (http://www.
copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood Drive, Danvers, MA 01923, 978-750-
8400. CCC is a not-for-profit organization that provides licenses and registration for a variety of users. For organizations that
have been granted a photocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identi-
fication and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
Dedications
To Julie, Alex, and Zach
For love, joy, and everything important.
—James R. Kalyvas
For my parents.
—Michael R. Overly
Contents
Disclaimer .............................................................................................xv
Why We Wrote This Book .................................................................xvii
Acknowledgments ...............................................................................xix
About the Authors ...............................................................................xxi
Contributors ......................................................................................xxiii
Chapter 1 A Big Data Primer for Executives .....................................1
James R. Kalyvas and David R. Albertson
1.1 What Is Big Data? .............................................................1
1.1.1 Characteristics of Big Data .................................2
1.1.2 Volume ..................................................................2
1.1.3 The Internet of Things and Volume ..................4
1.1.4 Variety ...................................................................4
1.1.5 Velocity..................................................................5
1.1.6 Validation .............................................................5
1.2. Cross-Disciplinary Approach, New Skills,
and Investment..................................................................6
1.3 Acquiring Relevant Data .................................................7
1.4 The Basics of How Big Data Technology Works ..........7
1.5 Summary............................................................................9
Notes ............................................................................................10
Chapter 2 Overview of Information Security and Compliance:
Seeing the Forest for the Trees ........................................11
Michael R. Overly
2.1 Introduction ....................................................................11
2.2 What Kind of Data Should Be Protected? ...................13
2.3 Why Protections Are Important ..................................14
2.4 Common Misconceptions about Information
Security Compliance ......................................................15
2.5 Finding Common Threads in Compliance Laws
and Regulations ..............................................................17
2.6 Conclusion .......................................................................18
Note .............................................................................................19
vii
viii • Contents
Chapter 3 Information Security in Vendor
and Business Partner Relationships ................................21
Michael R. Overly
3.1 Introduction ....................................................................21
3.2 Chapter Overview ...........................................................22
3.3 The First Tool: A Due Diligence Questionnaire .........23
3.4 The Second Tool: Key Contractual Protections ..........27
3.4.1 Warranties .........................................................28
3.4.2 Specific Information Security Obligations....28
3.4.3 Indemnity ...........................................................29
3.4.4 Limitation of Liability .......................................29
3.4.5 Confidentiality ...................................................29
3.4.6 Audit Rights ......................................................30
3.5 The Third Tool: An Information Security
Requirements Exhibit....................................................30
3.6 Conclusion .......................................................................31
Chapter 4 Privacy and Big Data. .......................................................33
Chanley T. Howell
4.1 Introduction ....................................................................33
4.2 Privacy Laws, Regulations, and Principles
That Have an Impact on Big Data ...............................34
4.3 The Foundations of Privacy Compliance ....................35
4.4 Notice ...............................................................................35
4.5 Choice ...............................................................................36
4.6 Access ...............................................................................38
4.7 Fair Credit Reporting Act..............................................39
4.8 Consumer Reports .........................................................40
4.9 Increased Scrutiny from the FTC .................................41
4.10 Implications for Businesses ..........................................43
4.11 Monetizing Personal Information: Are You
a Data Broker? ................................................................43
4.12 The FTC’s Reclaim Your Name Initiative ..................44
4.13 Deidentification .............................................................46
4.14 Online Behavioral Advertising .....................................47
4.15 Best Practices for Achieving Privacy Compliance
for Big Data Initiatives ...................................................49
4.16 Data Flow Mapping Illustration ...................................51
Notes ............................................................................................53