Category Archives: 2017 legislative issue

Lege Trend. Exception to Data Notification.

Trendy new exception to data breach notifications: encrypted data

How Tennesee worded the exception in its legislation: 

(1) “Breach of system security”:
      (A) Means the acquisition of the information set out in subdivision (a)(1)(A)(i) or (a)(1)(A)(ii) by an unauthorized person that materially compromises the security, confidentiality, or integrity of personal information maintained by the information holder:

           (i) Unencrypted computerized data; or

           (ii) Encrypted…

State insurance Regulators + Familiar State Cybersecurity Finance Rules= More Cybersecurity Rules in 2017

The National Association of Insurance Commissioners is being urged to adopt New York’s Cyber Finance Security Rules in each of their respective states.

NAIC will release proposed rules soon

Reuters | New York Regulator Wants Other States to Model Cyber Laws After Its Rules

Refresher on the New York Cyber Security Rules from January 2nd, 2017 informed:intel:

The state upping the ante on data security rules for the finance industry: New York

The new New York rules announced December 28th will…

3 Procurement Opportunities from the Dallas Emergency Siren Hack

Background on the emergency system hack:

  • all 156 of Dallas’ emergency sirens were hacked and triggered to sound last weekend
  • The hack of the system exposed that the system had to be shut down 

Procurement Opportunities for Emergency IT:

  • Mayor Rawlings called it “evidence of a need to upgrade and safeguard the city’s technology infrastructure”
  • The hack was tracked down because of the ability to coordinate with other security professionals
  • The sirens triggered a heavy load on the city’s 911…

Lege Trend. A Data Protection Bill Called Bad for Business. The Competing Interests…

The  Bill:  Illinois Right to Know Bill

What does the Right to Know Bill in Illinois do? It allows a person to know what information is collected about the person and to which businesses that information could be sold.

Why is it considered bad for business? 

  • complex compliance regulations, which would apply to businesses of all sizes,
  • enormous burden on small businesses statewide
  • “requires any business with a website — even a local flower  shop or pizza parlor — to draft privacy policies…

Legal Trend. New FBI Guidelines. Healthcare. Cybersecurity.

What guidance is the FBI giving medical and dental providers on cybersecurity? That file transfer protocols, FTP, transfers csn be accessed by anonymous users without passwords. Cyber secuity measures should be taken to correct server settings.

What speficially did the FBI say about protected health information (PHI) pr personally identifiable information (PII) ? PHI & PII should not be kept on FTP servers allowing for anonymous operation

National Law Review | New FBI Warning for Healthcare…

Lege Trend. What are businesses saying about turning over data to governments?

No, thank you. Or, thank you, but no. 

Microsoft has taken the stand  that the only way it will turn over data to the government  is if Microsoft is legally compelled to do so.

What is Microsoft saying? Sue me or more politically correct, “”We will not help any government, including our own, hack or attack any customer anywhere,””

SC Media | Microsoft president takes stand against turning over data

TREND. Business & Cybersecurity. 3 Cyber Issues. US Chamber of Commerce.

The U.S. Chamber of Commerce is making cyber security recommendations for regulators and policy makers, including:

  • agency leadership needs to work with business to “harmonize cyber regulations”
  • modernize government IT structure
  • clarify the roles and responsibilities of the public and private sectors when it comes to cybersecurity

The Hill | Chamber of Commerce urges Trump to get business input for cyber strategy