Author Archives: admin

INTERIM. Banks v. Retailers Round 300. Federal Data Security Bills. 3 Key Pieces of Intel.

  • Financial Services support national data security standards & require nationwide data breach notification requirements for business
  • Retailers oppose federal legislation for the detrimental effect on retailers
  • The detrimental effect on retailers: applying banking rules on non-banks 

The Hill | Financial industry spars with retailers over data breach bill

The Hill | Retailers battle financial sector over data breach legislation

Schools Targeted by Data Collectors. The Intel to Know the Trend:

“Learning to be Watched: Surveillance Culture at School” report published  by the National Center for Education Policy at the University of Colorado at Boulder finds:

  • schools are soft targets for comapnies gathering data
  • free technology to school leads to data collection by the company
  • anonymized student data does not mean  students’ personally identifiable information (PII) is fully or permanently protected

Washington Post | Schools are now ‘soft targets’ for companies to…

INTERIM. TREND. Student Data Security Bills. 2016. 31 States. The Numbers you need to know:

  • In 2016, 31 states introduced student data security bills
  • in 2016, a total of 94 student data security bills were introduced
  • The 4 fastest states to act in 2016 were:
    • New Hampshire: a study to make recommendations
    • Utah: data governance standards
    • Virginia: contracting limitations, data limitations for student & teacher data
    • West Virginia: State Board level data governance standards

District Administration | CIO News | 31 states introduce student data privacy bills

Business TREND. Data Security Helps Business.

4 Key Pieces of Intel from how strong data security laws protect businesses:

  • Global market. EU contracts require strong data protections clauses
  • U.S. weak data security laws create uncertainty in the global market
  • Cost Opportunities. What might cost small companies to comply in the short run, the harm to innovation of not having high data standards cost U.S. businesses more. 
  • U.S. should be a leader in data security standards.

TechCrunch | Startups to Congress: Strong data security…

INTERIM. Another Student Privacy Bill. 7 New Requirements for Education Contractors & Vendors.

Who are the targets of Connecticut’s student data privacy bill?

  • contractors with local boards of education, the State Board of Education and the State Department of Education
  • operators of websites, online services and mobile apps

What will be required of education vendors?

  • outline and maintain security practices
  • prohibited from using personally identifiable student information for :
    • advertising purposes
    • any purpose apart from what their contract stipulates
  • vendors cannot retain…

TREND: Government Contracts + Data Security = New Federal Contracting Data Security Rule

Which entity promulgated the new federal contracting rule? Federal Acquisition Regulations (“FAR”) Council

Which data security rule for contractors are we talking about? Basic Safeguarding of Contractor Information Systems

Which contracts will be hit by the new rule?

  • all acquisitions by any federal executive agency
  • beginning June 15, 2016
  • If a contractor’s information system may contain “Federal contract information,” 
  • Applies to all subcontractors too

All contractors, and…

Pensions & Data Security. 6 Issues Identified.

  • Performing due diligence on all data and security protocols when selecting and monitoring vendors;

  • Developing privacy provisions for contracts with TPAs and other service providers over and above standard confidentiality agreements;

  • Limiting access to sensitive information to necessary personnel;

  • Training personnel on the law and the fiduciary responsibilities;

  • Developing written policies and procedures detailing for personnel the applicable state and federal…

Banking Regulator Announces 2 New Data Security Initiatives

The FDIC announced on May 9th, 2 new data security initiatives:

  • improved software to force encryption of portable devices
  • hiring of a third party to assess FDIC information technology security and privacy programs

Bloomberg BNA | FDIC Takes New Initiative on Data Security Following Breaches

Executive GOV | FDIC Plans New Security Measures After Retroactive Data Breach Report

TREND in data hacking. SEXTORTION.

Will this be a legislative trend? Yes, because sextorition is not a crime. Individuals are charged under usual hacking crimes.

How does sextortion differ from ransomware?

  • Ransomware is about money
  • Sextorition is about power
  • Ransomware holds your computer hostage
  • Sextorition threatens to expose “secrets” unless certain nude images are transmitted

Who are the victims?

  • 71% are under 18
  • 91% are targeted by social media manipulation
  • 7.3 years is the average state criminal sentence
  • 29…