Monthly Archives: July 2016

Hidden costs of data breaches. Business Costs.

Case Study: Target. Target’s Securities & Exchange Commission filings show:

  • costs thus far of $290 Million
  • estimated future costs will total $370 Million

Case Study: Anthem Insurance. Anthem’s SEC filings show it cannot estimate the cost of its data breach because:

  • ongoing investigation
  • early stage of legal proceedings progress
  • unknown damages
  • uncertain number of lawsuits that will be filed

In additional to actual costs, there are soft costs to a data breach such as:

  • lost contract…

INTERIM. 2 Reasons a Regulatory Agency Leader Supports Comprehensive Data Security Laws.

Which regulatory leader wants comprehensive data security laws? The FTC Chairwoman Edith Ramirez

Why the push for data security laws?

  • Hacks aren’t going away
  • Laws need to address how entities gather, save and disseminate personal information

Daily Dashboard | FTC’s Ramirez calls for comprehensive data security laws

TREND. State Agency Faults School District. No Data Security Policy.

The state: New York

The NY State Agency: New York Comptroller

The School District: Avon School District

The Avon School District’s data security failings:

  • not adopting policies for managing passwords
  • not backing up data
  • not protecting its employees’ and students’ personal, private and sensitive information
  • making the school district more vulnerable to data breach
  • providing too many employees access to financial information of the school district
  • for failing to implment the…

TREND. Student Data Law Changes School Curriculum.

Which state added curriculum changes in its student data protection laws? Delaware

What changes ere made to public school curriculum? data security training

Why train teachers and students on data security? because human error is the largest driver of data breaches

Delaware Public Meda | First State working to incorporate data privacy training into ed prep programs

TREND. Executive Agency for Data Security. 9 Point Data Breach Reporting.

Bonjour to Canada’s Privacy Commission who oversees the data privacy of Canadians. 

The Privacy Commissioner recommended these changes to national data security laws for 2016:

Data security breach reporting should include:

  • The company’s name;
  • Contact information for someone who can answer questions on the company’s behalf;
  • Description of the breach, including:
    • The estimated number of users affected;
    • The personal information leaked;
    • The date of the breach, if known, or an…

Lege Trend. 5 Key Points from Student Data Protection laws in the Mountains.

Which state passed student data protection bills in 2016? Colorado

What does the new legislation cover? 

  • the gathering of student data
    • requires notice & consent
  • the storage of student data
    • limits on the length of storage
  • require all contractors to maintain comprehensive information security programs
    • limits contractors from sharing information unless there is express consent
  • no target advertising 
  • no building student profiles

JD Supra | Thompson Coburn LLP| Colorado jumps…

Lege Trend. 5 Benefits of Student Data Protection Legislation. Procurement. Contracts Impacted.

Connecticut passed student data privacy legislation in 2016.

A group of mothers who started the push for student data privacy reform are touting its benefits:

  • Restricting student information use by contractors providing educational software and electronic storage of student records and by operators of websites, online services, or mobile applications (i.e., apps).
  • Clarifying ownership student data collected for school purposes is not owned by any of these third-party…