Category Archives: 2017 legislative issue

INTERIM. Lege Trend: State Cyber Security Czar

From where did this cyber security czar idea eminate?  It was in the 2016 proposed federal budget from the White House. The feds had a gigantic data breach, so its time to fix it.

Are state’s picking up on a state cyber security czar position? Yes, including a proposal this week from California

What moves states to implement a state cyver security czar?  Here’s what motivated California legislators:

  • 160 state departments hold personal information about residents…

INTERIM. 98% of health care data breaches caused by…

…hackers. Yes, that’s right 98% of the data breaches in 2015 that occured in health care were initiated by hackers.

That’s an 80% increase over 2014.

What is the intent of the hackers that seek health care information? 

  •  identity theft
  •  leverage the health care data to access medical care
  •  conduct corporate extortion 

AJMC.com | Cyberattack on Hollywood Hospital Part of a Growing Trend

3 lessons from a data breach lawsuit. Specs Liquor v. Insurance.

Spec’s experienced a data breach that resulted in legal fees. Spec’s was insured and has sued its insurer over the coverage of costs incurred from the data breach.

3 Take aways from a Texas Company with data breach insurance coverage:

  • Spec’s wants its insurance company to pay its legal fees for a legal fight between Spec’s and the credit card processor that experienced the data breach
  • Insurance companies have become good at covering the initial expenses (notifications, initial legal fees,…

INTERIM State Attorney General Releases Data Security Recommendations. 3 Bits Informed Intel.

Which Attorney General office analyzed state data security breaches? California

What is the most popular data to breach?

  • social security numbers
  • credit card information
  • medical information

What recommendations to policymakers emerged?

  • Follow all the 20 controls in the Center for Internet Security’s Critical Security Controls, otherwise your company isn’t offering reasonably data security
  • multi-factor authentication must be available
  • encryption must be standard business…

Business Trend & Lege Trend: Data Security Regulation Impact to Car Manufacturing & Dealers. 3 Keys .

  • Auto Manufacturers are facing data security issues related to connected cars
  • Car Dealers are facing dats security issues related to customer data, the link of that customer data ties to car data
  • This combination that ties customer data privacy to hackable connected cars requires “robust cyber security infrastructure could give his firm competitive advantages against their competitors.”

Computer Business Review | Cyber security showroom – How Lookers put data security into car dealership

INTERIM Lege Trend: State Data Collection Bills. 5 Bits of Informed Intel.

The Virginia legislature is considering the Government Data Collection and Dissemination Practices Act which would:

  • prohibit the state from secretly collecting data
  • prohibit data collection “without a clear need for its collection”
  • prohibit data collection by “fraudulent or unfair means”
  •  targets of data collection would be notified about the purpose of the information gathering and would be given the opportunity to amend, correct and erase “inaccurate, obsolete or irrelevant…

INTERIM Lege Trend: Protect Student Data Leading the Pack in the North. 3 Bits of Informed Intel.

Minnesota wants to do a better job protecting student data privacy. Here’s what the land of 10,000 lakes is proposing in its House Bill 2386:

  • prohibit schools from forcing students to supply their access information to personal social media accounts
  • prohibit school employees from forcing students to alter the settings of their accounts to make information visible to the public
  • opens violating schools up for legal action on the part of the affected student

Governing | 7 Tech Policy…

INTERIM Lege Trend: State Data Security Commission from the East Coast. Public Private Partnerships. 4 Bits of Informed Intel.

New Jersey Legislature is considering SB 808 that would:

  • Create a 6 member Cybersecurity Commission under the Department of Law and Public Safety
  • tasked with evaluating New Jersey’s “informational infrastructure”
  • private and public collaboration on cybersecurity
  • Issue recommendations on:
    • securing state networks
    • offering strategies to bolster the cybersecurity industry in the state
    • providing cyberhygiene and awareness

Governing | 7 Tech Policy Issues to Watch in 2016