- Fitbits will get hacked.
- The E.U. and U.S. fight on datat security will continue
- Businesses should have data security policy & do risk assessments
- Data Security will be guided by industry specific standards
- Telephone Consumer Protection Act will be a new source of data security lawsuits
- Company issued electronic devices vs. personal electronic devices means more now that we’re in the age of data security
- Curate and protect your social media like you do your health data from your…
Category Archives: 2017 legislative issue
Lege Trend: Data Encryption Bans. 4 Bits of Informed Intel.
- Which states have pending legislation to penalize fully encrypted cell phones? California & New York
- What fine is being imposed under these bills? $2500
- What’s the goal of these encryption bans?
- help law enforcement better combat human trafficking and other serious criminal activities that are being conducted over hidden encrypted networks and locked devices.
- What groups oppose these encryption penalties? The tech and privacy community
INTERIM Lege Trend: Creating a Privacy and Consumer Protection Committee
California Assembly has a new committee to handle privacy and technology issues. What’s the committee jurisdiction?
- drones
- data security & breaches including in health care
- Smart cities that use technologies to communicate with residents
- security of networks
- oversight of state computer data security
The Recorder | Calif. Lawmaker Forecasts Busy Year in Privacy
INTERIM. Home of the Ducks is now Home of Data Security. 5 Bits of Informed Intel from a new Data Security State Law.
- data breach defined in new Orgegon law as:
- “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
- personal information that triggers the notification statute
- Social Security number;
- Driver license number or state identification card number issued by the Department of Transportation;
- Passport number or other United States issued identification number;…
Trend: Police Officer Body Cameras Data Storage and Data Safety. Top 3 Concerns for 1 State.
Maryland’s concerns over data storage and security for police body cameras include:
- Price tag to store the data is prohibitively expensive
- The data costs have stopped police departments from using body cameras
- The storage retention policies differ for the recordings.
- General 90 day retention
- If there is an ongoing investigation data retention is for the length of the investigation
- any video considered evidence must be maintained for 4 years
INTERIM. 8 Elements of Data Security Laws & Regulations.
- Data Breach Definition.
- What data was breached?
- The level of knowledge the data holder must have of the breach before notification is triggered. Did they know? Is it reasonable that this data was breached?
- How to treat good faith access to data by an unauthorized employee
- How to treat the breach of account creditial information.
- user name, passwords, and security questions
- Timing.
- When must notification be given?
- How to treat data processors, people who hold the data but…
Model Health Care Data Security legislation. 3 Key Elements.
- A limited time healthcare industry cybersecurity task force
- The taskforce includes cybersecurity experts and healthcare stakeholders
- The charge to the task force:
- analyse the cybersecurity risks facing health care
- recommend ‘actionable cyber threat indicators & defensive measures
The legislation people are looking to: Congress cyber security legislation.
The Global Legal post | Healthcare sector suffers chronic data breaches
New Legal Trend. Suing the Company Hired to Stop the breach. 2 Take Aways for Government Procurement for Data Security Services.
What‘s happening? Affinity Gmaing, owners of 11 casinos, is suing the company it hired to contain a data breach.
How is this relevant to Texas government? Pay close attention to the enforcement actions and lawsuits that emerge from the federal government OPM data breach in which the company hired for remediation.
Why is this important? the laws related to data security are chaning at lightening fast speed. Faster than a lobbyist can walk, and on a very complex, technical topic which…
Trend: Financial Regulators Target Security. 3 Trends.
The SEC is getting tough on data security. State financial agencies likely to follow suit. Here’s what’s happening:
- Enforcement actions against companies with weak security protocols
- The SEC expects financial firms to have security planning in place before a hack
- Periodic risk assessments and encryption are key
Financial Times | Securities and Exchange Commission gets tough on cyber security
INTERIM. Auto Manufacturers. Hackers. United Front. The Impact to Lege Trends and Regulatory Trends.
Why is GM embracing white hat hackers? To help identify and notify of security risks.
What’s the industry response? Just announed Detroit’s first public security vulnerability disclosure program bringing together GM and HackerOne
What’s the benefit to white hat hackers? As long as thehackers follow basic published protocols, the hackers can challenge security without legal repercussions.
So, its creating charitable immunity for white hat hackers? in contract form, yes. It allows…