- A patchwork of state laws is hard on business
- Requires a single regulatory agency
- Currently the FTC, FCC & state agency wrangle over regulatory authority
- Clear legal standards on what constitute harm from a data breach
Author Archives: admin
Lege Trend: Data Security Bill Passes over Tech Objections. 3 Pros. 3 Opposition Points.
The U.S. Senate passed Cybersecurity Information Sharing Act on a vote of 74-21 this week.
Tech Companies continue their opposition. The main bones of contention:
- Mechanism for sharing of cyber-threat information does not sufficiently protect users’ privacy ” (Computer & Communications Industry Assoc.)
- “[ Does not ] appropriately limit the permissible uses of information shared within the government” (Computer & Communications Industry Assoc.)
- “Privacy-shredding” bill “in…
Federal Cyber Security Bill. 3 Points to Know Now. Which Businesses are on which side?
- The Cybersecurity Information Sharing Act passed the U.S. Senate on Thursday, October 22nd.
- Major Tech companies (Apple, DropBox) are opposed
- National Retail Federation support amendment to CISA that offer liability protection for business that share threat data with the FBI and Secret Service, and not just the Department of Homeland Security.
Washington Post | Cybersecurity bill advances in Senate, but hurdles remain
National Retail Federation | Borad based Coalition Supports Cotton…
Regulatory Trend: Cybersecurity & Connected Cars. (Wifi Cars, not Trains)
What agency is talking cybersecurity & cars? The FTC
What committee heard from the FTC? Subcommittee on Commerce, Manufacturing and Trade of the House Energy and Commerce Committee
What did the FTC testify to?
- FTC is the “the nation’s lead privacy and data security enforcement agency”
- Proposed legislation is weaker than the FTC rulemaking on “connected cars”
- Proposed safe harbor for auto manufacturers that submit privacy policies to the Department of Transportation was too…
5 Ways Federal CyberSecurity Bill will Impact Health Care
- It will “create a framework that would allow different healthcare entities to exchange information regarding cybersecurity”
- Allow for the exchange of various potential threats
- Allow health care entities to share best practice security measures
- Cybersecurity bill would make the health care cybersecurity netowrk available to both private and federal healthcare entities
- Healthcare Information and Management Systems Society supports the bill
East Coast State Has Potential Medicaid Data Breach
What happened and where? North Carolina Health Department announced a possible Medicaid data breach.
What personal data was included? confidential health information of 1,615 Medicaid patients. Only 2 Social Security Numbers were included, as most patients used Medicaid ID numbers. No birth dates were included.
How did it occur? a state employee sent unencrypted data to a local health agency
A State Auditor Looks into 5 School District Student Data Collection
The Missouri State Auditor is looking into data security, data breach, data retention policies in 5 school districts.
The review also included reviewing the state education agency data policies. The state agency will soon adopt policies related to data breaches.
MissouriNet | Missouri education department to change student data collection after audit
Student Data Security Regulatory Trend from State of Huckleberry Finn. 4 Things the Agency Will Do Differently.
Which state is getting on the student data security bandwagon? Missouri
What prompted regulatory action by the Missouri Department of Education? An Audit that found the department of education “unnecessarily collected and kept personal information from students”
What chages will occur at this education agency?
- Missouri will no longer colelct and store student social security numbers when they don’t need social security numbers
- Missouri will destroy unneeded sensitive data from its…
Millions of Funding for Data Security for Electric Generation, Electric Grids & Oil & Gas.
- Cyber Resilient Energy Delivery Consortium heads the $28.1 effort
- Consists of 11 national laboratories and universities and is led by the University of Illinois
- Dartmouth received a $925,000 grant to “improve the protection of the electric grid and oil and natural gas infrastructure from cyber threats”
Concord Monitor | AP | Dartmouth College gets $925K cybersecurity grant
Lege Trend: Student Data Security Bills in KeyStone State. 9 Prohibitions for Education Vendors.
Multiple bills dealing with protecting student data have been filed in the Pennsylvania legislature.
The bills include provision to set standards on education vendors for:
- Prohibit tapping student information to target them with advertising;
- Prohibit amassing profiles of students for non-educational purposes;
- Prohibit the sale or sharing of student information outside of narrow circumstances.
- Require vendors to secure student data and delete it all upon the district’s…