Regulatory Trend. Fining Mortgage Companies for Data Breaches.

4 ways mortgage companies can up their game and push back regulatory fines:

  • Proper security frameworks and policies that secure data both inside and outside;
  • Assess vendors and third parties for data breach risk;
  • Work with experts to assess and manage the “risk across the supply chain and build better defense-in-depth to prevent a breach;” and
  • “Use tools and analytics that are specially designed to monitor and assess the security posture of vendors in real-time, as well as improve…

Lege Trend. +1 State Adding More Stringent Notification & Mandating Identity Theft Services

State: Delaware

 What is HB 180 in Delaware trying to do?

  • Improve notification requirements
  • Require 1 year of identity theft mitigation services when Social Security numbers are breached
  • Require businesses to safeguard personal information
  • Require notice to Delawareans affected by a breach within 60 days of discovery
  • If more than 500 residents impacted, the Attorney General must be notified

If passed, Delaware would be state #2 to require ID theft services after a breach.

News.Delaware.Go…

Lege Trend. Link Licensing to Data Security Standards.

Legislative body is located where? Australia

What triggers licensing issues when failing to meet data security standards? 

  • Licensing enforcement is triggered only for companies valued at greater than $3 million in revenue

The goal: Move data security to the forefront with business leadership

Intelligent Insurer | New data breach reporting legislation deemed cyber game changer in Australia

Advocacy Trend. Education Data Privacy Toolkits. Activate against Schools and Ed Tech Companies

The advocates:  Parent Coalition for Student Privacy and the Campaign for a Commercial-Free Childhood

The toolkit for parents to empower them on student data privacy: toolkit

What’s the target: data privacy policies of school districts and ed tech companies

Education Week | New Student Data Privacy Toolkit Encourages Parent Advocacy

+1 State. Creates Executive Level State Cybersecurity Officer

The State: Rhode Island

The New Executive Level Office in Rhode ISland:  state cybersecurity officer

The goal of the office:  developing and putting into place a comprehensive state cybersecuritystrategy

How did the state cybersecurity officer position emerge? It was a “key recommendation of the governor’s Cybersecurity Commission, established in 2015 with the aim to lay out plans to protect the state’s IT infrastructure as well as grow a thriving cybersecurity industry”

State Tech | Rhode…

Lege Trend. Small Business Cyber Protection Bills. 3 Key Points.

the federal legislation: Making Available Information Now to Strengthen Trust and Resilience and Enhance Enterprise Technology (MAIN STREET) Cybersecurity Act

how it helps small businesses: Adds small businesses to the list of things that the National Institute of Standards and Technology must consider  when updating its voluntary guidance on how to guard against cyberattacks. 

the state commission recommendation: Missouri’s Cybersecurity Task Force recommended increased support for small…

Anatomy of a State Election Hack. 3 Key Points.

The state: Illinois

The election data target:  no specific data target, it was a broadly executed hack on the Illinois election system

The hack:  Retrieving voter information via voter identification number starting at “000000001 and incrementally adding one” digit

The Hill | Illinois voting records hack didn’t target specific records, says IT staff

Local Trend: City Writes Broadband Ordinance.4 Requirements on Cable Operators.

City: Seattle

Seattle’s Broadband Ordinance requires:

  • ​requires Cable Operators to obtain opt-in consent before sharing a customer’s web browsing history
  • Requires Cable Operators to obtain opt-in consent before they use customer web browsing history
  • The exception: unless it is necessary to render a service ordered by the customer or pursuant to a subpoena or valid court order authorizing disclosure, or to a governmental entity.
  • Cable operators must attest to compliance with this rule by…