The University of SydneyPage 4The Need for Law–Laws (international, national, state, city laws) can affect information privacy or secrecy–Laws regulate use, development and ownership of data, programs, intellectual capital, etc. (e.g.patents, copyright laws) –Controls within a firm may not be enough for IS security–Laws are required to investigate and prosecute violators