Category Archives: 2017 legislative issue

TREND. New Rules on Data Privacy. +1 Federal Agency with cybersecurity rules. 4 Points to be Informed.

The agency with new data protection rules: The FCC

The new FCC rules will require broad band and wireless providers to:

  • offer 3 tiers of privacy protections: opt-in, opt-out, and inferred
  • opt-in will be the standard for this information held by providers:
    • sensitive personal data
    • financial data
    • location
    • social security numbers
    • health or medical information
    • internet browsing or app history
    • message content
    • data belonging to minors.
  • opt-out standard for non-sensitive data…

The State leading the Way in CyberSecurity Regulations for Financial Institutions:

New York.

The pinnacle of these regulation is New York Department of Financial Services rule, known as Cybersecurity Requirements for Financial Services Companies. 

The New York rules target financial services companies and their advisors. Lawyers call the NY rules “… a more comprehensive framework for cybersecurity than has been seen in any other U.S. jurisdiction.”

insurance news net | New York Jumps Ahead In Data Security Regs

Insurance. Data Security. Bill of Rights for Consumers.

To whom does the model insurance-cybersecurity law apply?  To anyone who holds a license, registration or is authorized by a state insurance agency

There’s a revision to the model law, what’s changed?

  • No preemption by the model law
  • No private causes of action. tort reformers rejoice. 
  • No contractual requirements for 3rd party vendors, but 3rd part vendors must be capable of protecting information
  • Stronger notification requirements that trigger notification within 3 days of…

Student Data Breach in Texas. 4 Pieces Informed Intel.

  • Katy ISD experienced a data breach
  • The data breach came  by way of a third party vendor breach that exposed Katy ISD student data
  • The data breached was on a secure server and included:
    • student names
    • birthdates
    • social security numbers/state ID numbers
    • email addresses
    • zip codes
  • The 3rd party vendor will offer identification monitoring to impacted students

KHOU | Katy ISD notifies parents of potential data breach of students’ info

Houston Chronicle | Katy ISD warns staff,…

Creative Solution from the Far East: Create a Fund to Aid Cyber Security Improvements

Where: Singapore and neighboring countries

What is this fund to help cyber security protections? Singapore is putting in $10 million to help Asean nations build up their cyber response capabilities

The goals:

  • strengthen regional responses to cyber threats
  • strengthen technical capabilities
  • train technical officers, policy makers, and prosecutors

The Straits Times | Govt launches $10m fund to help Asean fight cyber threats

TREND. State Data Security Regulation. 3 Pieces Informed Intel. The Businesses That are Paying Attention.

What sparked the push for more and new state regulation on data security? New York’s Cybersecurity regulations

Which industries are taking note? Finance & Insurance

Do legal experts think New York’s regulations will be a model for other states?  Yes, yes and yes. 

Law.com | NY Cybersecurity Regs Could Spur Legal Work Nationwide

New York’s Cybersecurity regulations

TREND. Legislation. Curb Election Hacking. 4 Pieces Informed Intel

Legislation aimed at curtailing election machine hacking would:

  • require electronic machines to generate a paper trail
  • declare voting systems to be critical infrastructure
  • establish security standards
  • establish protocols for security failures

H.R. 6072 by Congressman  Johnson (D-GA)

SC Magazine | Rep. Johnson introduces bill designed to deter electoral hacking

 

Shortcut to the 3 Criticisms of State Financial Cyber Security Regulation

Critics lambast New York’s proposed financial cyber security regulations as:

  • unlikely to improve security at financial institutions
  • financial institutions need a consolidation of cyber security regulations at all governmental levels
  • this is nothing more than more paperwork and overregulation

CNBC | Critics are skeptical of New York’s proposed financial cybersecurity rules

 

Your Informed Intel on the 14th of September 2016:

Reg. Trends. Gov. & Banking Regulator. State Banking Cyber…

Schools Access Kids Private Data. No Parental Consent. 3 Points of Informed Intel.

Scenario: School provides kid laptop/ipad. Kid uses laptop/ipad for school work and personal use.  School learns kid likes to watch YouTube at 3am and sleeps in class.

How can schools track students:

  • schools can access what programs/websites kids use
  • schools can access where the kids were when they used the laptop/ipad
  • some schools remotely monitor students through cameras on the devices

Are 3rd parties involved to monitor kids activity on school laptops/ipads? yes & they flag…