Several cloud customers were affected by a data breach from a cloud service provider (CSP) and
their credit card details have been used by malicious actors to commit fraud. A court of law has
identified that there was a lack of due care and due diligence by the CSP. The affected customers
are looking for remedies in a class-action against the CSP. What type of law applies in this case?
Criminal law
Civil law
Tort law
Privacy law