Welcome to the Future!
What data was shared? Chicago Public Schools improperly shared student information that led to direct advertising by a Charter School.
How did a 3rd party gain access to public school data? A school employee willingly shared it with the Charter School.
The legislative step that could protect utility districts from ransomeware threats? 15 minute backup intervals
The 15 minute regular backup allowed Nebraska’s Central Platte Natural Resources District to thwart a ransomeware attack.
SC Media | Nebraska irrigation district thwarts ransomware attack with automatic backup
How did San Francisco’s Muni system stop a ransomeware attack that held its system hostage? In 3 steps:
The success of Muni’s actions:
Where: Michigan
The regulators who want to impsoe data security standards on utilities: Michigan Public Service Commission
What data security requirements would be added to utlities?
Washington Times | State wants rules to toughen utilities’ cybersecurity
What medical information isn’t covered by HIPAA?genomic, lifestyle, financial, environmental and other information that wearbale devices and meters store
Is all the genomic and lifestyle data HIPAA worthy? Some of it probably should be covered
What do we need to know about geonomic and lifestyle data? We have to think about medical information outside the traditional format.
Security Privacy & the Law | Cybersecurity 2017 – The Year In Preview: HIPAA Compliance
Senate Business & Commerce interim report offers these recommendations on cybersecurity:
A plethora of procurement opportunities abound.
The U.S. Senate Cybersecurity caucus is compromising to move forward with a national commission to investigate the difficulties encryption has created for law enforcement.
What’s missing from self driving car regulations? Assurances that governmental agencies aren’t trying to gather data.
What type of data could be collected about a self driving car?
The legislative/policy/regulatory buzz word? Privacy.
Tech Crunch | Lyft wants more explicit protection of consumer data from NHTSA on self-driving
Can a business buy a list of breached users from another business for the purpose of notifying the hacked users?
uh, what? Facebook wants to buy a list of hacked users from another comapny so it can don the white hat and tell its members they were hacked.
For your consideration while legislatures consider how to protect consumers whose information has been hacked. Anyone for a prohibition on the sale of the hacked information?
+26 House: