3 Recommendations to Minimize Liability in Outsourced Data Security. Hello Vendors.

  • “include specific data security procedure obligations in contracts with vendors

  • verify a vendor’s capacity to adhere to the prescribed data security procedures

  • look at data security practices from an expert’s perspective to determine whether such practices are reasonable”

National Law Review | Piercing Outsourcing Veil: FTC Says Data Security Obligations Remain 

Millions of Funding for Data Security for Electric Generation, Electric Grids & Oil & Gas.

  • Cyber Resilient Energy Delivery Consortium heads the $28.1 effort
  • Consists of 11 national laboratories and universities and is led by the University of Illinois
  • Dartmouth received a $925,000 grant to “improve the protection of the electric grid and oil and natural gas infrastructure from cyber threats”

Concord Monitor | AP | Dartmouth College gets $925K cybersecurity grant

Lege Trend: Student Data Security Bills in KeyStone State. 9 Prohibitions for Education Vendors.

Multiple bills dealing with protecting student data have been filed in the Pennsylvania legislature.

The bills include provision to set standards on education vendors for:

  • Prohibit tapping student information to target them with advertising;
  • Prohibit amassing profiles of students for non-educational purposes; 
  • Prohibit the sale or sharing of student information outside of narrow circumstances.
  • Require vendors to secure student data and delete it all upon the district’s…

6 Trends in State Data Breach Laws

  • Greater Enforcement Powers for State Attorneys General
  • Protecting More types of data = more reasons to notify consumers
  • Expanded liability for private companies that store state data
  • Requiring companies that have a data breach to offer, at their cost, mitigation services that protect data- think Life Lock etc…
  • Protecting Student Data
  • Requiring encryption for stored data
    • As an example, see: 
      • “The new Washington law goes even further as it identifies a minimum standard for…