The learning unit aims to give an overview of the legal and regulatory aspects of information security. The LU analyze the new data privacy European regulation and its administrative and technological implications in companies, in order to let the learners understand the consequences and the action for their own companies. The data privacy will be analyzed also considering regulations in data transfers. The LU depicts also the regulation on informatics crimes (at European level with some details for Italy), digital forensics and how it can be applied in organizations.