Category Archives: contracting/procurement

Bill to Require ID Protection at any State Government Data Breach. 3 Bits informed:intel

State: California

The legislation: Assemblyman Matt Dababneh sought to apply the standard applied to business of requiring 1 year of ID theft protection services for anyone who is impacted by any government breach in California. AB 241 (2017) 

The Opposition is winning as the bill stalls. The loyal opposition includes California State Assn. of Counties, the Urban Counties of California, and the League of California Cities

Opposition arguments:

  • it would cost cities & counties too much
  • state…

Lege Trend. +1 State Adding More Stringent Notification & Mandating Identity Theft Services

State: Delaware

 What is HB 180 in Delaware trying to do?

  • Improve notification requirements
  • Require 1 year of identity theft mitigation services when Social Security numbers are breached
  • Require businesses to safeguard personal information
  • Require notice to Delawareans affected by a breach within 60 days of discovery
  • If more than 500 residents impacted, the Attorney General must be notified

If passed, Delaware would be state #2 to require ID theft services after a breach.

News.Delaware.Go…

Advocacy Trend. Education Data Privacy Toolkits. Activate against Schools and Ed Tech Companies

The advocates:  Parent Coalition for Student Privacy and the Campaign for a Commercial-Free Childhood

The toolkit for parents to empower them on student data privacy: toolkit

What’s the target: data privacy policies of school districts and ed tech companies

Education Week | New Student Data Privacy Toolkit Encourages Parent Advocacy

Lege Trend. Procurement Trend. Expanded IT bidders.

State: Ohio

IT Procurement Issue: How to get innovative tech firms to bid on IT contracts, especially for data analytics.

The procurement change: Remove the old school, clunky procurement process

The procurement fix:

  •  streamline the procurement process by creating a request for proposal that prequalifies companies to provide analytics according to a range of disciplines, such as fraud, auditing, risk management, public safety…
  • remove the requirement that a vendor has to have worked for a…

Smart Card Alliance is now the Secure Technology Alliance. 5 Goals

  • Influencing standards and best practices that are relevant to the understanding, adoption and widespread application of secure solutions, including smart cards, embedded chip technology, and related hardware and software
  • Serving as an educational resource to its members and industry stakeholders implementing secure solutions
  • Providing a forum for cutting-edge discussions and projects on issues surrounding the implementation of secure solutions
  • Maintaining a voice in public policy that…

Data Security Hits Federal Procurement Standards. Read the Tea Leaves for the States.

To meet federal data security requirements in contracts, GSA added Adobe’s data-centric security and electronic signature solutions to GSA’s IT Schedule 70.

The key facts from GSA:

  • Increased acquisition efficiency for data security and electronic signatures.
  • Over $350 million in potential cost savings for the American taxpayer.
  • Agencies will be afforded tiered discounts by leveraging the buying power of the federal government.
  • Reduced contract duplication and administrative cost with…

Procurement Opportunities. 3 Data Security Recommendations. Senate Business and Commerce.

Senate Business & Commerce interim report offers these recommendations on cybersecurity:

  • the voluntary nature of state cybersecurity policies are a problem (i.e. need more requirements with hint, hint: more procurement opportunities)
  • require technical risk assessments at state agencies
  • USE PRIVATE SECTOR TECHNOLOGIES like cloud storage

A plethora of procurement opportunities abound.

Colonial State. Attorney General. Gets into middle of College Data Breach. 3 Things to Watch Out for 3rd party vendors.

The state: Vermont.

The players in this drama: Vermont College, the Vermont Attorney General, and the 3rd party software company whose product was breached

Why did the Attorney General get involved?

  • the 3rd party vendor software affects more than just the Vermont College
  • the 3rd party vendor software will affect Vermont’s businesses
  • its an outreach opportunity to educate people about Vermont’s data breach notification law

Vermonth Biz | Attorney general enters data security…

2017. The Feds Have Weakened Student Data Privacy. Here's what groups want the states to do:

The Electronic Privacy Information Center (EPIC.org) wants states to pass bills that:

  • No Targeted Ads. prohibit K-12 mobile and online service operators from using student information to target advertisements to students;
  • No Profiling Students. prohibit online service providers from creating K-12 student profiles for commercial purposes; 
  • No Selling Info. forbid companies from selling student information;
  • All Students (K-16) extend protection to all students, including college…