- Ohio’s law doesn’t require action by businesses
- Ohio’s law incentives actions by businesses, by providing for liability protection
Tech Target | State data privacy laws, regulations changing CISO priorities
Monthly Archives: April 2019
Business TREND. Nonprofit for Campaign CyberSecurity
Who: Defending Digital Campaigns, the nonprofit spinoff of a Harvard cybersecurity project
What: FEC is considering allow campigns to get free cybersecurity help
Why? Elizabeth Warren, Kamala Harris are disclosing funds spent on cybersecurity and the retention of cybersecurity experts
The catch: the nonprofit is founded by Hillary Clinton’s campaign manager
Slate | This Nonprofit Wants to Offer Political Campaigns Free Help With Cybersecurity
Lege TREND. Revisiting How one State Responded to Equifax Breach
State: Massachusetts
Legislation: H 4806 (2018 |MA)
What did Massachusetts enact?
- consumer consent before any third party can obtain the consumer’s credit report
- free credit freezes and thaws
- entieis that have suffered a data breach have enhanced reporting requirements
- free credit monitoring to affected consumers
Leominster Champion | Governor Signs Bill to Enhance Credit Data Security
Lege TREND. Bill lets Texas Sue Social Media.
What? SB 2373 (2019 | TX)
What legal challenges would be allowed? Deceptive Trade Practices Act challenges
What does this mean? Know those press releases from the Attorney General Office about how much its collected in fines (hint: it is A LOT). Yes, it means business fines.
Lege TREND. Anatomy of an election security bill
Where: Georgia
The legislation: HB 392 (2019 | GA)
What would this bill require:
- the state Secretary of State
- required to create security protocols for voter registration information
- follow and be consistent with standards set by national cybersecurity and election organizations
Atlanta Journal Constitution | New safeguards for Georgia election security await Kemp’s signature
Local TREND. City Seeks to Ban Facial Recognition Software.
The city: San Francisco
The proposal:
- new regulations on the city’s process for acquiring surveillance equipment
- total ban on municipal use of facial recognition software
How many other cities have done this? none
Opponents: law enforcement
The policy goal: ““The propensity for facial recognition technology to endanger civil rights and civil liberties substantially outweighs its purported benefits,”
Government Technology | Will San Francisco Ban Facial Recognition Technology?
Lege TREND. Death of a Bitcoin Bill in a Gaming State.
State: Nevada
The legislation: SB 195 (2019 | NV)
Why did SB 195 die a legislative death?
- opponents say the bill was not beneficial to the crypto markets
- the bill would have implemented the ULC’s Uniform Regulation for Virtual Currency Business Act
- opponents say it doesn’t protect investors and traders enough
Read an opposition letter from the cryptocurrency industry.
CoinGeek | Nevada lawmakers scrap controversial Bitcoin bill
+1 IOT Bill. Lege Trend. Individual passwords for your Fridge and your Porch lightbulb.
State: Oregon
The legislation: House Bill 2395 (2019 |OR)
What would HB 2395 require?
- require manufacturers to take implement a process for each device a unique password
Why? So that a hacker could access only 1 device in 1 hack.
Oregonian | Oregon House passes bill requiring security for online devices
Lege TREND. Data Minimization in Cybersecurity bill drafts
What do I need to know about data minimization? It means that companies shouldn’t collect personal data “beyond what is adequate, relevant and necessary” for the product or service.
What’s an example? Your takeaway driver doesn’t need access to your photo library to scan your credit card
NextGov | Inside One Lawmaker’s Proposal for a Privacy Bill of Rights
3 State Variations in the Model Insurance Data Security Legislation
North Carolina: the 1st State to pass the model legislation imposed the 72-hour notice requirement in the model.
Michigan: opted for a 10 day notice requirement
Ohio: allows licensees that have certain cybersecurity programs to use an affirmative defense against tort claims
Bloomberg | States Imposing New Cybersecurity Requirements on Insurers