This course surveys the legal and regulatory environment that shapes cybersecurity decision-making and organizational liability. Students analyze privacy and security laws, breach notification obligations, contracts and third-party responsibilities, intellectual property considerations, and the legal dimensions of incident response and investigations. Through scenario-based learning, students practice applying legal concepts to real-world cyber events, including reporting, documentation, and stakeholder communication. The course prepares students to collaborate effectively with legal counsel and leadership while making security decisions that reduce legal exposure.