Towards a Working Conceptual Framework: Cyber Law for Data Privacy and Information Security Management for the Industrial Internet of Things Application Domain

For Industrial Internet of Things (IIoT) and Big Data - Data Privacy presents significant challenges in Cyber Security - specifically in the technological and legal environment. The pervasiveness of computers with the advancement of network infrastructures, systems, and applications makes gathering, interpreting, and propagating personal information more streamlined. Therefore, in the UK, strict adherence to the law is inevitable. The General Data Protection Regulation (GDPR) is one of the EU’s most comprehensive legislative proposals. It is being developed to centralize the data protection law across the EU and help users and data subjects control their data better. Businesses are facing heavy penalties in the form of fines for non-compliance to this recent act - facing heights of 20 million euros (or 4% of their global turnover). This paper focuses on the key challenges and solutions to Data Privacy in the modern world with an enhanced focus on IIoT as an ideal application domain due to its rising innovations in the contemporary world. We propose a Methodology for analyzing Data Privacy incidents to optimize organizational GDPR compliance and aid through operational organization adoption to cybersecurity professionals and decision-makers. Furthermore, to make proficient updates and upgrades to their methods of handling data and ensure Data Privacy for their respective stakeholders aiming to protect and defend the business from financial loss, reputational damage, and stakeholder damage.