Category Archives: 2019 legislative issue

3 Legislative Issues. Self Driving Car Data.

  • Privacy. Who owns the data. Who gave consent to collect the data.
  • Security. What data should be protected from transfer.
  • Public Safety. How can the data be used to protect the public and transportation systems in smart cities.

How can governments use data from self driving cars?

  • managing traffic
  • urban planning
  • allocating public funds 

phys.org | self-driving cars and geospatial data: Who holds the keys?

2019 Student Data Security State Standings. Legislative Trends.

What entity is ranking states on student data protection?  Parent Coalition for Student Privacy

Best State for student Data Protection? Colorado with a B

Worst states for student data protection? 11 way tie with Fs for Alabama, Alaska, Massachusetts, Minnesota, Montana, Mississippi, New Jersey, New Mexico, South Carolina, Vermont, Wisconsin

The populous states?

  • California C
  • New York B-
  • Illinois C+
  • Texas D+
  • Florida D+
  • Pennsylvania D-

Lingering Education Data Security Issue for all…

Regulatory TREND. Report on Election Security in the Keystone State. 5 Recommendations.

  • Use risk limiting audits for elections and voting practices
  • replace direct recording electronic systems with systems using voter-marked paper ballots 
  • No unfounded mandates for local election officials
  • train local and state election officials on cyber security
  • establish statewide cybersecurity practices

Blue Ribbon Commission on Pennsylvania Election Security (January 2019)

New Report. Key to State Data Security is Procurement.

Why is procurement key?

  • Procurement contracts can set the tone for state data security standards

  • Telecom infratructure is key to data security

  • States should offensively say what the data standards are, rather than what cannot be done

  • Private-public cooperation is the key for leading global solutions

  • Strengthen cyber security workforces

  • Contracted cloud solutions can fill in when funding does not exist for state data security experts

 

The Kosciuszko Institute| CYBE…

Lege Trend. Data Broker Registries

Tim Cook (Apple) is recommending a Data Broker Registry.

What’s a data broker? they buy and sell data from third parties

So how would it work?

  • every consumer can opt into their data being collected or not
  • consumers would be able to remove their data from the registry
  • the FTC would house the registry and consumers could see what info is being collected and by whom

Why does this sound familiar? Because in 2018 informed:intel told you about the first in the nation data broker state law in VT,…

Lege Trend. Anatomy of a Strict Data Breach Notification State Bill.

  • 30 days to provide notification to consumers
  • Greater disclosures to consumers about data collected and where it is stored
  • Free credit freezes and unfreezes for a year
  • 4 years of credit monitoring- free
  • Applies Deceptive Trade Practices Act penalties to Businesses (these accrue daily and per incident)

Who is backing this bill: North Carolina  State Attorney General 

What impact does this have to businesses?

  • healthcare comapnies would see their notifcation timeline cut from 60 days to 30…

Procurement Opportunity State Employee Cyber Security Training

What are states doing to train their employees to protect data?

  • Michigan, Oklahoma and Wyoming encourage but don’t require training
  • Idaho Governor Excutive order requires training for all executive staff
  • Illinois in 2017 made cybersecurity training mandatory for state employees
  • Indiana’s CIO has authority to make training mandatory for state employees
  • Utah sends out phony phishing emaisl to state employees to test them
  • CT offers voluntary training every 2 months
  • Alabama offers daily…

Lege TREND. Refresher Insurance Data Security Bills.

SB273 (OH |2018) does the following:

  • Adopts the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law
  • OH becomes the 2nd state after South Caroline to adopt the model law
  • Requires licesees develop, implement, and maintain a comprehensive information security program that contains administrative, technical, and physical safeguards to protect nonpublic information and the licensee’s information system within 1 year of the effective date of the Act;
  • Perform…