2015 House Interim Charges. 14 Committees. Data Security is Everywhere.

Data Security

Businesses | Financial Institutions | Law Enforcement | Education | Local Governments | State Data Safety | Data Security in State Contracting

THE INTERIM CHARGES

Business & Industry: data security in the sharing economy and business cybersecurity
County Affairs: County data security and data retention
Government Transparency & Operation: state cyber security standards, agency cyber security, data retention and protection of personal information, cloud computing,…

Congress takes Up Data Security in Wifi Cars. Welcome to Texas.

Background: Modern technology in cars was once 8 tracks. Today it’s wifi because no one wants to deal with a 5 year old who has no access to the internet on the highway.

How do internet connected cars and data security intersect? Hackers have shown how they can take over the controls of vehicles. It’s a Stephen King book come to life.

What’s Congress doing? Some say nothing. Others say on November 18, 2015 the House Oversight and Government Reform is having a hearing on the…

Hospital Association Hones in on Data Security. 5 Highlights.

California Hospital Association warns its members that health care is behind on data security
HIPPA compliance isn’t enough.
Hospitals also have to protect data in electronic medical equipment
Regulatory Fines are increasing exponentialluy every year.
A Cybersecurity firm recommends these 3 corrective measures:
- “1) adopt two factor authentication for access to databases containing sensitive patient information;
- 2) use behavioral analytics to identify suspicious behavior and encrypt…

Realtors Warn of Data Security Issues in Real Estate. 4 State Law Highlights.

Hackers are looking for personally identifiable information such as:
- credit card or bank account information
- login credentials
- employment details
- physical address, e-mail address, and phone
- social security number
Small Businesses account for the majority of the attacks according to the National Association of Realtors® technology policy expert
Real Estate can be impacted in 4 major ways:
- financial harm from expenses resulting from the breach
- legal risks from lawsuits…

Data Breach Enforcement: Cable Providers. Regulatory Enforcement. 3 Things to Know Now.

In 2014 Cox Communications was hacked. Millions of customer personal data was exposed.
Cox paid for notification and credit monitoring services for the millions of impacted customers.
Cox also faces regualtory enforcement from the FCC. The FCC is requiring:
- A comprehensive compliance plan
- A written information security program
- Cox will be monitored by the FCC for 7 years

JD Supra | FCC settles data security enforcement action with Cox

Regulatory Trend: Agency Gives 3rd Party Contractor Data. Oops. 3rd Party Health Contractors Beware. 3rd parties Pay Costs of Data Exposure.

The Illinois Department of Insurance accidentally led to the posting of Social Secrity Numbers of health records online.

How did a 3rd party get caught in a date release of health records? The agency sent records, including social security numbers, to Blue Cross Blue Shield which Blue Cross Blue Shield posted online.

What happened to the 3rd party? The Department of Insurance took immediate corrective measures against Blue Cross Blue Shield

What is the 3rd party’s…

Data Security Bills Expedited Due to Terrorism

A push in the UK is campaigning to move forward with expedited data security legislation to secure networks in light of the November 13, 2015 terrorism in Paris.

Why is this relevant?

Because legislation passed under the threat of security issues can bring in corporate client data security mandates
And, can include mandates for the world’s most valuable data security records– health care records.

Press Association | Lord Carlile wants communications data legislation ‘expedited’

Report: Health Care Woefully Unprepared for Data Breach. 3 Recommendations. 3 Conclusions.

A cybersecurity report from Forrester is not good for health care. The report concludes:

health care is ” woefully behind” in preparedness
HIPPA compliance is not enough. HIPPA doesn’t keep up with wearable technology like GPS astham inhalers or wearable tattoos that transmit health care data.
HHS is imposing sanctions on unprepared health care companies that suffer data breaches.

3 Recommendations:

1) adopt two factor authentication for access to databases containing sensitive…

Jail Contractor. Data Breach. Phone Records. 3 Reform to Follow.

Data Recording Limitations. Data breach included recorded attorney-client phone calls.
Data Retantion Limitations. If calls are recorded, how long are they to be kept and under which security protocols.
Data Protection. Attorney-client recorded calls were shared with prsoecutors.

Think Progress | Prison Phone Company Hit With Massive Data Breach