4 Recommendations for Protecting Student Data. Pay to Arm Yourself with IT Information. Stop being stingy.

Who is recommending student data protections?  A report from new report on data privacy from the Southern Regional Education Board

What are the 4 recommendations?

  • Clear & transparent state data governance policies. Make the policies easy to find for parents.
    • Print the policies out and pin them to parents at orientation
  • Fund & improve student data security
    • Stop being so stingy
  • Train the people who handle student data
    • Teach the teachers
  • Fund IT support at schools
    • Again, stop…

Case Study. Small School District. New Data Security Protocols. 3 Takeaways including Procurement.

Biggest data security concern: 3rd party vendors. Especially free web based vendors.

The school district’s solution: Training teachers and staff about data privacy standards

The contracting change the district made: Standard privacy clauses that do not shift privacy liability to the school district

EdScoop | Small Missouri school district thinks big about privacy and security

TREND. Requiring Notification to the State Attorney General of Data Breaches. 2 States.

Which states require notification to the state attorney general of a data breach? Nebraska and Rhode Island

How did Nebraska tackle the legislation? Requiring companies to notify the Attorney General in the same time that they notify a resident

How did Rhose Island tackle the issues? Requiring Attorney General notification if more than 500 people had their data compromised

National Law Review | Summer Round-Up: Four States Bolster Data Breach Notification Laws and More Changes on the Way

SECURITY TREND. 2 Legislatures Changed When Data Breach Notifications are Required.

What change did the Nevada & Rhode Island Legislatures make? Changed the definition of personal information for data breaches

What was added to the definition of personal information?

  • medical identification number
  • a health insurance identification number
  • a user name, unique identifier or electronic mail address in combination with a password, access code or security question and answer that permits access to an online account

The difference between the 2 states? Rhode Island clarified…

New State Database. New Data Security. Read an Example of an Opioid Database.

The state creating an opioid database: California

What will be required of physicians before writing an opioid prescription?  Physicians will have to check a database of patient prescription histories before recommending addictive drug.

The legislation: Senate Bill 482 by Lara

Bryan College Station Eagle | The Latest: Senate backs health plan pricing bill

Model law for Insurance Data Security is here. Like a Valentine + Birthday Wish Wrapped in a Rainbow.

What entity is proposing model data security laws for insurance?  the Cybersecurity Task Force (Task Force) of the National Association of Insurance Commissioners (NAIC)

Is it final? No, its a revised draft after taking into account stakeholder positions

What issues are covered in the model act draft?

  • Require licensees to create a “comprehensive written information security program”
  • Required Data Security programs will detail the:
    • administrative,
    • technical, &
    • physical…

Business Trend. Banks Fight Cyber Crime. 3 Keys to Informed Intel.

Which banks are invloved? The 8 largest banks are joining forces. This includes Bank of America, JP Morgan, and Goldman Sachs.

What will the 8 banks do to protect against cuber crime? Share intel and conduct war games to improve data security.

Why did they form? The large banks issues are similar unlike the data security efforts among all financial institutions and the large banks share information with the federal governmet but believe they get little information in return.

Wall…

Data Regulation of Marijuana. 3 Key Pieces Informed Intel.

Which state included data regulation of marijuana? Colorado

What is the goal of data regulation of marijuana legalization? safely and securely control the flow of the drug across the state

What state agency houses this data center? Marijuana Enforcement Division (MED) in the state’s Department of Revenue

Governing | Managing Marijuana: the Role of Data-Driven Regulation

2017. Southern State Pushing Forward on Student Data Protection.

The state: Alabama

The legislation: A State agency to track student data from early education through entering the workforce

What‘s the background? In 2015, the Governor issued an executive order to create a  longitudinal data system to track studnt data. This executive order requires legislation to fund it.

The projected cost to track student data? $1.6 million

What did the Governor’s Executive Order do?

  • Created an advisory board
  • “Developed a state talent pipeline capable of…