Category Archives: data encryption

Lege Trend. Exception to Data Notification.

Trendy new exception to data breach notifications: encrypted data

How Tennesee worded the exception in its legislation: 

(1) “Breach of system security”:
      (A) Means the acquisition of the information set out in subdivision (a)(1)(A)(i) or (a)(1)(A)(ii) by an unauthorized person that materially compromises the security, confidentiality, or integrity of personal information maintained by the information holder:

           (i) Unencrypted computerized data; or

           (ii) Encrypted…

Lege Trend. Procurement Trend. Expanded IT bidders.

State: Ohio

IT Procurement Issue: How to get innovative tech firms to bid on IT contracts, especially for data analytics.

The procurement change: Remove the old school, clunky procurement process

The procurement fix:

  •  streamline the procurement process by creating a request for proposal that prequalifies companies to provide analytics according to a range of disciplines, such as fraud, auditing, risk management, public safety…
  • remove the requirement that a vendor has to have worked for a…

Business Trend. Health Care Data Encryption and the Denton Health Group Breach

The data breach: Denton Health Group had thieves steal 7 years of patient data

The cyber theft: The thieves stole physical hard drives which were not encrypted

Encryption & health care:

  • 65% of health care providers encrypt in the cloud

Health Care Dive IT | Cyber thieves steal 7 years worth of unencrypted data from Denton Health Group hard drive

3 Issues Create a Quagmire. Plains State Cloud Storage Protection Legislation.

The State:  Kansas

The issues that are clouding a bill to protect data stored in the cloud:

  • Language that protects attorneys who strore client information in the cloud.
    • Opponents say it elevates this privilge above other privileges
  • Language that limits release of the information to the subscriber.
    • Law enforcment says they can now gain access without a warrant to the information.
  • Language that requires a warrant.

Topeka Capital Journal | Kansas House panel debates security of high-tech…

Polling hackers.

  • 88% of hackers at the 2016 DEF CON conference say they can hack a target in 12 hours
  • 81% of hackers say that they can identify and exfiltrate a target’s data in 12 hours
  • 50% of hackers change their method each time
  • 84% of hackers social engineer their vicitms- hello Facebook profiles
  • 52% say training employees is effective

SC Media | Survey explores the minds of hackers: 81% claim they can compromise target in under 12 hours

Business Trend: Encryption via Shredding Data. Cybersecurity Standards Need Flexibility.

 CryptoMove embraces a business model that replaces encryption with breaking data into pieces and moving it around. 

Instead of hackers having  way to your document in a garbage can, hackers have to reassemble microshredded pieces. 

Beware regulators who set a standard level of encryption as a requirement. The industry changes.

Tech Crunch | Security startup CryptoMove fragments data and moves it around to keep it secure

Fantasy Sports Facing Data Security Questions

What data security issues are being bandied about against Fantasy Sports?

  • Communicating with consumers requesting personal information without the use of encryption
  • Asking customers to send sensitive information, such as Social Security Numbers, and credit card images, via unencrypted email

Is ther an investigation? A complaint filed with the FTC 

Daily Dashboard | Daily fantasy sports sites face data security questions

Business TREND. Data Security Helps Business.

4 Key Pieces of Intel from how strong data security laws protect businesses:

  • Global market. EU contracts require strong data protections clauses
  • U.S. weak data security laws create uncertainty in the global market
  • Cost Opportunities. What might cost small companies to comply in the short run, the harm to innovation of not having high data standards cost U.S. businesses more. 
  • U.S. should be a leader in data security standards.

TechCrunch | Startups to Congress: Strong data security…