What survey reveals that 1 in 4 U.S. Consumers had a health care data breach? An Accenture survey released at HIMSS2017 in Orlando
What is the impact to health care providers? 25% changed health care providers
Author Archives: admin
National Governor Association Details State Role in Cyber & Data Security
The Chair of the National Governor’s Association lays out 3 ways states can tackle data and cyber security:
- share disruption response plans
- establish cybersecurity operations centers
- convening cooperation among public safety agencies, the National Guard, and private partners.
3 States with model public-private partnerships, task forces, and cybersecurity commissions:
- California
- Indiana
- Virginia
3 Reasons Cyber Security legislation More Harm than Good. 4 Ways to write good cybersecurity laws.
The state landscape: Virginia
The cyber security proposals: make it a felony for cyber criminals to use ransomware
The reasons that the change in law may do more harm than good:
- the laws a jumbled with overlapping enforcement of multiple agencies
- the jumbled laws make it overburdensome for businesses to comply
- technology advances more quickly than laws
What do good cyber security laws do?
- They are principle-based
- Specify outcomes
- Do not target specific methods of action
- Respect a…
New Mexico. Data Security Legislation 2017. 3 Key Points.
New Mexico’s House Bill 15 wants to put the state on par with other states by remedying a gap in our existing consumer protections by:
- Requiring notice within 45 days
- After Personal Identifying Information is Compromised
- With notification to the state attorney general and consumer credit reporting agencies
Los Alamos Daily Post | House Passes Data Breach Notification Act
3 Reasons New Laws Needed for Cloud Data
A lawyer for Google says new laws are needed to cover data stored on the cloud for these reasons:
- Clear guidance for law enforcement and corporations
- Takes corporations out of the untenable position of being in the middle between customer privacy and law enforcement
- Laws crafted before cloud storage are not keeping up. Cloud data can’t be treated like paper documents
The Recorder | Google Lawyer Says New Laws Needed to Govern Cloud Data
Oppose a Sin Tax. Become Target of Spyware. Sodas + Hackers.
Who was targeted by hackers? Backers of Mexico’s soda tax
The hack: text messages that family members had died, with funeral information. Dark, dark stuff.
It’s dark hacktivism in repsonse to activism. Indeed there are companies that sell services in these dark arts.
NY Times | Spyware’s Odd Targets: Backers of Mexico’s Soda Tax
Lege Trend. Data protection. Email Protection. Less Government Intrusion. More Warrants.
The Legislature: Congress
The data protection bill: Email Privacy Act to update a 1986 law on email
Where is the bill? It passed the House and is moving to the Senate
What’s the fundamental change in the Email Privacy Act? To universally require warrants for emails stored on 3rd party servers
Is this in line with industry standards? Yes, Google, Facebook, Apple, Microsoft and Verizon require warrants before they release emails stored on their servers
Lege Trend. Mandating ID Protection Post Hack. Who pays? A Win for Procurement.
State: California
Who pays for ID Protection when a private corportation has a data breach? The corporation
Who currently pays for ID protection when a locla government has a data breach? The person whose data was hacked
Is there a bill to make local governments pay for ID protection when a hack occurs? Yes, California Assembly Bill 241
Government Technology | When a Data Breach Happens, Will California Pay for Protection?
Lege Trend: Western Neighbor Data Breach Bill Applies to All.
Long gone are the days when data breach notifications only applied to retailers, or so says New Mexico.
The Bill: House Bill 15 (2017) The Data Breach Notification Act
What it does:
- Any person who possess personal information about a New Mexican has 30 days to disclose any data breach
- Requires the state attorney general office to work with any person who has suffered a data breach that triggers notification to New Mexicans.
KOB 4 | Lawmaker sponsors data breach notification bill
Regulatory Trend. Fining Companies That Track Your Electronics without Notice.
The Company: Vizio
The privacy breach: installed software in televisions that recorded consumers tv habits
The regulatory enforcement: Federal Trade Commission and the New Jersey Attorney General
The fine: $2.2 million + must delete customer data by March
Engadget | Vizio tracked and sold your TV viewing habits without consent (updated)