INTERIM. Another Student Privacy Bill. 7 New Requirements for Education Contractors & Vendors.

Who are the targets of Connecticut’s student data privacy bill?

  • contractors with local boards of education, the State Board of Education and the State Department of Education
  • operators of websites, online services and mobile apps

What will be required of education vendors?

  • outline and maintain security practices
  • prohibited from using personally identifiable student information for :
    • advertising purposes
    • any purpose apart from what their contract stipulates
  • vendors cannot retain…

TREND: Government Contracts + Data Security = New Federal Contracting Data Security Rule

Which entity promulgated the new federal contracting rule? Federal Acquisition Regulations (“FAR”) Council

Which data security rule for contractors are we talking about? Basic Safeguarding of Contractor Information Systems

Which contracts will be hit by the new rule?

  • all acquisitions by any federal executive agency
  • beginning June 15, 2016
  • If a contractor’s information system may contain “Federal contract information,” 
  • Applies to all subcontractors too

All contractors, and…

State Chief Information Officers Call for Improved State Data Security. 3 Key Informed Intel.

What group is calling for improved state data security systems? National Association of State Chief Information Officers

What sparked the call to arms? the cost of cyber crime world wide is $375 billion to $575 billion, which is labled a threat to democracy

What do the NASCIO propose states do? Create statewide cybersecurity ecosystem 

What would a statewide cybersecurity ecosystem link? 

  • state government

  • local government

  • federal government

  • higher…

INTERIM. Lege Trend: Data Security by Modernizing Government Computer Systems. 4 Key Informed Intel + Procurement.

Which legislative body is considering data security from the angle of improving existing computer infrastructure in government? Congress

What’s the cost associated with modernizing government computers? $ 3.1 Billion.

Bonjour procurement opportunities.

What’s the argument supporting infrastructure investment? “If we do not invest in our technology and cybersecurity now, we will have no one to blame for the next data breach but ourselves,” Rep. Ted Lieu (D-Calif.)

How will the…

West Coast State New Data Security Agency. Key Informed Intel. Read the Legislation. Find Procurement Opportunities for Texas.

  • The Bill creating the Washington State’s new Office of Privacy and Data Protection: Washington State House Bill 2875
  • What will be the purpose of the new Office of Privacy & Data Protection?
    • ​Determine what information state agencies are collecting
      • Do we know in Texas? No
    • Work with agencies to reduce the amount of consumer data being collected
    • Monitor & assist wit citizen complaints
    • Annual privacy review of state data collection
    • Educate Washington State residents about…

All the State Budget Data Security Items. Procurement. Procurement. Procurement.

In Legislative Appropriation Request Trends:

  • 3rd party contracts to assess security at agencies
  • HB 2783 (2013) required a study to see if agency computer systems were legacy.
    • Hello, 3rd party contracts to replace or upgrade legacy systems
    • Legacy systems are a higher security risk
    • Over 1/2 agency computer systems are

In 2015’s State Budget:

  • Article IX, Section 9.10 : DIR prioritization of state agencies’ cybersecurity projects
  • Article IX, Section 9.11, Cybersecurity…

INTERIM. 3 Ways 1 State Seeks to Tighten Education Contracts. Student Data Security. Read the Bill. Prepare an Offense. Prepare a Defense.

Which state is making a new move to protect student data? Colorado

What does it mean for education contractors? New Rules. New Data Security Requirements.

3 Key prohibitions in the bill:

  • prohibit education contractors from selling personally identifiable student information
  • prohibit use of student information for targeted advertising to students
  • Prohibitions follow to the subcontractors
  • Establishes data security protocols tied to education contractors

CO HB 16-1423

Chalkbeat…

INTERIM. 2 Points Informed Intel. Regulatory Guidance for Data Security while Government Teleworking. Contracting Opportunities.

What entity released guidelines on teleworking and cyber security? The National Institute of Standards and Technology

What suggestions in the guidelines that will direct procurement opportunities?

  • virtual mobile infrastructure technologies

    • that create temporary, secure environments for teleworkers who need to access organizational data that are destroyed when the session is over

  • mobile device management technology
    • technology to force devices to adhere to certain security…

What Major US Company is Advertising its Government CyberSecurity Services?

AT&T.

The ad:

Cyber Security for Government

Help keep your agency’s information protected. Our proactive network-based approach to managed security delivers some of today’s most powerful weapons to combat cyber security attacks — helping to safeguard the elements of your IP infrastructure. To learn more about security solutions for your agency, please visit www.att.com/govsecurity.

INTERIM. Lege Trend: Data Security Proposal. 3 Points to Know Now.

What kind of data breach triggered data breach law changes in Maine?  A health care data breach affecting 120,000.

What requirements does the legislator weant? Extended credit monitoring & fraud protection services requirement to total 2 years.

Are these legislative changes from a chairman? Yes, the Maine legislator behind this push is the House chairman of the Insurance and Financial Services Committee.

Kennebec Journal| Waterville legislator seeks more protection for victims of…