2017 legislative issue – Page 7 – InfoHive

Data Breaches By the Numbers. How Constituents are Impacted.

How constituents feel about data breach laws:

68% of internet users believe current laws are not good enough
64% believe the government should do more to regulate advertisers
Favor limits on how long the records of their activity are stored
74% of Americans say it is “very important” to be in control of their personal information
64% of Americans have personally experienced a major data breach
49% feel that their personal information is less secure than it was 5 years ago
41% of…

adding biometric and geolocation data to the definition of personal information that triggers a data breach notification
regulations related to surveilance equipment used by law enforcement
protecting disclosure of a a person’s religious affilaition from the government

State Affairs recommendations:
- a dedicated and collaborative cybersecurity initiaitive
- clear legislative direcetives
- direct agencies to collaborate
- a central repository for its cybersecurity program
Urban Affairs recommendations:
- appropriate funds for a grant program to support cybersecurity training and information sharing costs for small municipalities and utilities
- creation of cybersecurity training and information sharing programs within agencies
- increase the level of…

Massachusettes, home of the Draft Kings, passed new fantasy sports regulations.

The editorial board reactions: Fantasy Sports Regulations have no cybersecurity

The cybersecurity response from daily fantasy sports:

fantasy sports regulations do require comapnies to have security measures
comapnies are subejct to prosecution for not following the regulations
the beauty of fantasy sports is that the playing information is public information

What cybersecurity experts say:

CryptoMove embraces a business model that replaces encryption with breaking data into pieces and moving it around.

Instead of hackers having way to your document in a garbage can, hackers have to reassemble microshredded pieces.

Beware regulators who set a standard level of encryption as a requirement. The industry changes.

Multidisciplinary application. Cybersecurity is not just for the Information Officer.
Data is an asset. Protect it. Have a game plan for how long you’re keeping the asset.
Data lives on mobile devices and moveable devices too. Protect those too.
Know the information you keep.
Train employees. Employees create cybersecurity breaches too.
Legislative and regulatory data security standards are the floor, not the ceiling.

Train teachers in cybersecurity. Make data security part of the faculty and administrator school culture.

In 2013, 400 school data security bills were considered.

Only 1, Colorado’s, included teacher training.

Texas House Rules debate on Wednesday, January 11, 2017, added cybersecurity issues to the jurisdiction of the House Committee on Government Transparency and Operation.

What do you need to know about data breaches?

The carrot & the stick:

Increase the accountability of entities that hold data
By requiring the entities to shoulder more of the cost of a breach
Allow these entities to offer “credible security signals to the market” to provide a benefit to the entity