Category Archives: biometrics

Refreshing our Recollection | Internet Bill of Rights | Hello, Telecom: Hint, Hint: This is where the left & right meet.

Activists are promoting an Internet bIll of Rights, the kind of bill state legislatures love. What would it do?

  • Keeping your “browsing history” private
    • ​Except: fraud or potential crimes  
  • Full disclosure when being monitored, and the right to opt out
  • Preserving the privacy of your social media accounts.
  • Ownership of your personal, digital content
  • Notification of injurious data breaches
  • Fair play on social media platforms and/or internet providers
  • Protecting children on social media
  • P…

Lege Trend. 4 Data Security Law Recommendations. State Attorney General.

The State Attorney General, who recommended that Washington State require breech notification when more than 500 Washingtonians are impacted, recommends the following changes to the law after data breeches increase by 26% in the last year:

  • Reduce the deadline to notify affected individuals of a breach to 30 days after the breach is discovered;
  • Require preliminary notification to the Attorney General’s Office of a breach within 10 days after the breach’s discovery; and
  • Expand the definition…

5 States leading the way on Data Security Legislation. Medical Data. Retail Data. Data Businesses. All Businesses.

States are enacting more quickly and fully than the federal government on data security regulation. Here’s a look at the 5 states leading the way:

Health Care Data TREND. Governors Association Plan. 5 Steps.

  • 8 States collaborating with the Governors Association
    • Arkansas, Colorado, Delaware, Indiana, Iowa, Minnesota, Vermont and Washington
  • Establish best practices for health care data
  • Really long name:  “Harnessing the Power of Data to Achieve State Policy Goals: The Foundation for State Success in Improving Quality and Reducing Costs,”
  • 16 months 
  • Goals:
    • enable a fuller and better use of the countless health-care data streams they collect and maintain
    • legislative fixes
    • regulatory fixes

      • …

9 Proposed Health Care Cyber Security Policies from a Health Trade Association. Medical Supplier Liability is the Key.

Healthcare Supply Chain Association recommends these contract provisions for health care contracts:

  • Suppliers should warrant their compliance with FDA premarket and post market guidance relative to cybersecurity risks throughout their product’s lifecycle.
  • Products should be assessed and warranted to be free of known malicious code or other vulnerabilities at the time of delivery and/or implementation.
  • Suppliers should comply with all reasonable security practices required by the provider…

Lege trend. Increasing Consumer Protections in a Post-Equifax World.

A Rhode Island legislator wants companies that have had a data breach to:

  • notify the state and consumers in a “reasonable promptness”, quicker than the current 45 days
  • Increase the penalty from $100 to $150,000 per breach

WPRI | Lawmaker proposes law to protect victims of data breaches

Rhode Island HB 7387 (2018) 

Lege TREND. Office of Cyber Defense Coordination. 4 Bits informed:intel

The State Legislature that created the Office of Cyber Defense Coordination​: Nevada

Within which state agency will the Office live? Nevada’s Department of Public Safety

The Legislation creating the office: Nevada’s AB 471 (2017)

What do these cyber offices look like in other states?

2017 Data Security New Legislative Trends.

  • adding biometric and geolocation data to the definition of personal information that triggers a data breach notification
  • regulations related to surveilance equipment used by law enforcement
  • protecting disclosure of a a person’s religious affilaition from the government

The Recorder | What to Expect in California Data Security and Privacy in 2017

Data Security in beyond traditional HIPPA medical information.

What medical information isn’t covered by HIPAA?genomic, lifestyle, financial, environmental and other information that wearbale devices and meters store

Is all the genomic and lifestyle data HIPAA worthy? Some of it probably should be covered

What do we need to know about geonomic and lifestyle data? We have to think about medical information outside the traditional format. 

Security Privacy & the Law | Cybersecurity 2017 – The Year In Preview: HIPAA Compliance