Lege TREND. Quick Read the The Customer Online Notification for Stopping Edge-provider Network Transgressions (CONSENT) Act.

The Customer Online Notification for Stopping Edge-provider Network Transgressions (CONSENT) Act. S2639 (2018) will:

  • require edge providers (Facebook and Google)
  • obtain opt-in consent from users before using, sharing  or selling their information
  • require reasonable data security practices from edge providers
  • require notifcation to users about all collection, use, and sharing of users’ personal information, and to inform users of a data breach
  • clarifies that enforcement authority trests…

Anatomy of Rail Data Safety Bills. 2 abridged bills in 3 easy steps.

Congress is considering STB Information and Security Act (H.R. 4921) and The FRA Safety Data Improvement Act (H.R. 4925) that will:

  • implement a plan to improve railway nformation security system
  • improve the management and collection of railroad safety data
  • identifying and mitigating rail safety risks

Railway Age | Rail data security bills head to Senate

What you Need to Know about Ransomeware Bills in the Apple Blossom State

State: Michigan

The 2 ransomware bills signed by Michigan’s Governor:

What problems was the Legislature trying address: 

  • Michigan had no recourse to charge cybercriminals that had ransomware on their computers that they hadn’t used  
  • In 2017 there were 1,300 reported cases of ransomware attacks in Michigan 
  • …

Lege TREND. The blockchain Bill Package from the State Wanting to be THE WORLD LEADER on blockchain.

Wyoming looks to be a world leader on blockchain technology.

To achieve its goal, Wyoming Legislature passed these bills:

What is Wyoming’s state strategy? Wyoming’s…

4 Impacts of the April Data Breach of US Pipelines.

Date of cyber attack: April 2, 2018

What part of a pipeline system was attcked? an Electronic Data Interchange for the pipeline system

What impact did the hack have on the piepline?

  • The interchange was handled by a 3rd party
  • allegations that the system was shutdown, with no known impact on the natural gas flow
  • later in the evening, it was  safe to transfer files through the EDI platform
  • no data or operations were affected by the attack

CISO Magazine | Energy Transfer Partners reports…

By the Numbers. Blockchain Bills by States.

  • 7 states have enacted blockchain bills
    • Arizona, Delaware, Illinois, Nevada, Tennessee, Vermont, and Wyoming
  • 8 States have amended wire transfer satutes to account for lockchain
  • $2.4 Billion in venture capital invested in blockchain since 2012
  • $120,000 to $150,000 average salary for a blockchain company employee
  • 19 states considering lockcahin bills in 2018
    • Including: Hawaii, New York, Colorado, Nebraska, Vermont, Virginia, Florida, Maryland, and North Dakota

The Verge | Blockchain…

Editorial Prioritizes Cyber Security Over Border Security. 2 Key Supporter Arguments.

  •  Trump administration has elevated U.S. Cyber Command to a unified combatant command
  • The internet is a critically weak link for the U.S.’s military 
    • “Adm. Michael Rogers, the head of Cyber Command, recently told Congress he needs $647 million to build the cyber mission force and conduct cyber operations”

Richmond Times Dispatch | Editorial: Cyber security is far more critical than border security

What's been the legislative & regulatory responses to Atlanta's ransomware attack?

Atlanta’s city services recently experienced a ransomware attack, the responses include:

  • Calls for more transparency for utilities about their cybersecurity to “keep consumers aware of the threats and their frequency”
  • Because electricity is a security issue, the market cannot resolve the issue & the government must act
  • FERC is beefing up mandatory reporting requirements

Eagle Tribune Opinion | Utilities should be more transparent about cybersecurity

Lege Trend. Anatomy of a Statewide Net Neutrality Bill in the Mayflower State that also limits ISP data collection

Massachusetts Legislature is moving a net neutrality bill, S2376,  that will:

  • create a central registry of internet service providers
  • require net nuetrality in government contracts
  • prohibit ISPs from collecting, using or sharing a consumer’s personal data without their consent
  • State rules would be developed by the state Department of Telecommunications and Cable
  • Requires ISPs to make the same disclosures to state regulatators that ISPs make to the FCC
  • An assessment on ISPs would be levied…

Lege Trend. What triggers a notification? How does that standard impact a business liability?

Draft Federal legislation will require notification of breach if and only if a business determines:

  • “a reasonable risk that the breach of data security has resulted in identity theft, fraud or economic loss”

Why does this specific statuory draft langauge matter? Courts are split on whether a business is liable when a data breach hasn’t resulted in actual fraud or economic loss, which means the language sets up a liability threshold.

Fox 13 | Report: Draft bill would allow credit reporting…