Lege Trend. Link Licensing to Data Security Standards.

Legislative body is located where? Australia

What triggers licensing issues when failing to meet data security standards? 

  • Licensing enforcement is triggered only for companies valued at greater than $3 million in revenue

The goal: Move data security to the forefront with business leadership

Intelligent Insurer | New data breach reporting legislation deemed cyber game changer in Australia

Advocacy Trend. Education Data Privacy Toolkits. Activate against Schools and Ed Tech Companies

The advocates:  Parent Coalition for Student Privacy and the Campaign for a Commercial-Free Childhood

The toolkit for parents to empower them on student data privacy: toolkit

What’s the target: data privacy policies of school districts and ed tech companies

Education Week | New Student Data Privacy Toolkit Encourages Parent Advocacy

+1 State. Creates Executive Level State Cybersecurity Officer

The State: Rhode Island

The New Executive Level Office in Rhode ISland:  state cybersecurity officer

The goal of the office:  developing and putting into place a comprehensive state cybersecuritystrategy

How did the state cybersecurity officer position emerge? It was a “key recommendation of the governor’s Cybersecurity Commission, established in 2015 with the aim to lay out plans to protect the state’s IT infrastructure as well as grow a thriving cybersecurity industry”

State Tech | Rhode…

Lege Trend. Small Business Cyber Protection Bills. 3 Key Points.

the federal legislation: Making Available Information Now to Strengthen Trust and Resilience and Enhance Enterprise Technology (MAIN STREET) Cybersecurity Act

how it helps small businesses: Adds small businesses to the list of things that the National Institute of Standards and Technology must consider  when updating its voluntary guidance on how to guard against cyberattacks. 

the state commission recommendation: Missouri’s Cybersecurity Task Force recommended increased support for small…

Anatomy of a State Election Hack. 3 Key Points.

The state: Illinois

The election data target:  no specific data target, it was a broadly executed hack on the Illinois election system

The hack:  Retrieving voter information via voter identification number starting at “000000001 and incrementally adding one” digit

The Hill | Illinois voting records hack didn’t target specific records, says IT staff

Local Trend: City Writes Broadband Ordinance.4 Requirements on Cable Operators.

City: Seattle

Seattle’s Broadband Ordinance requires:

  • ​requires Cable Operators to obtain opt-in consent before sharing a customer’s web browsing history
  • Requires Cable Operators to obtain opt-in consent before they use customer web browsing history
  • The exception: unless it is necessary to render a service ordered by the customer or pursuant to a subpoena or valid court order authorizing disclosure, or to a governmental entity.
  • Cable operators must attest to compliance with this rule by…

+1 State. Data Security Requirements for Finance.

First came New York. Now comes Colorado promulgating cybersecurity rules on their financial sector. 

The Colorado proposal will apply to:

  • financial advisers
  • broker-dealers
  •  entities with state securities licenses

The Colorado rules will require securities licensees to:

  •  conduct an annual assessment of their cybersecurity risks
  • require written policies and procedures explaining how they are protecting clients’ personal and financial information

Bloomberg Law | Colorado Moving to Set…