New Technology Device Being Hacked. Informed Intel on the Hacking of Wireless Mice. Why Regulators Pay Attention.

Why are wireless mice vulnerable to hacking? Unencrypted communication with computers is what guide the mice.

What does that mean? For $20, someone a block away can trick your computer into using its mouse and steal your data.

Why would regulators care? Because regulators stress encryption in data security. 

Reuters | Wireless mice leave billions at risk of computer hack: cyber security firm

New Agency Jumps into Data Security Regulations. Consumer Financial Entities. 3 Key Points.

  • the Consumer Financial Protection Bureau levied a fine against an online payment system company for the company’s data security practices in violation of the Consumer Finance Protection Act
  • Consumer Financial Protection Bureau? Sounds Like Consumer Credit Commissioner?
  • The regulators say the encryption touted by the company did not live up to its hype

Bloomberg BNA | Consumer Finance Agency Levies First Data Security Fine

National Law Review | Dwolla Fined $100,000 by CFPB in First…

INTERIM. Lege TREND: National Commission on Security and Technology Challenges. 3 Bits Informed Intel.

Data security and new government agency leadership posts and new agencies go hand in hand. 

Pending federal legislation would create the National Commission on Security and Technology Challenges.

Here’s the info you need abou the National Commission on Security and Technology Challenges:

  • its bipartisan: Senate Intelligence Committee member Sen. Mark R. Warner (D-Va.) & House Homeland Security Committee Chairman Michael McCaul (R-Tex.)
  • required new agency report detailing:
    • benefits…

INTERIM State Attorney General Releases Data Security Recommendations. 3 Bits Informed Intel.

Which Attorney General office analyzed state data security breaches? California

What is the most popular data to breach?

  • social security numbers
  • credit card information
  • medical information

What recommendations to policymakers emerged?

  • Follow all the 20 controls in the Center for Internet Security’s Critical Security Controls, otherwise your company isn’t offering reasonably data security
  • multi-factor authentication must be available
  • encryption must be standard business…

Lege Tren: Congressman wants to Preempt State Laws Barring Encrypted Devices

What do the feds want to stop the state legislatures from doing? barring the manufacture and sale of unbreakably encrypted smartphones

Why does this matter? California and New York have pending legislation to bar the manufacturing and sale of unbreakably encrypted smartphones.

Why would the state want to prevent unbreakably encrypted smnartphones? Law enforcement wants access to smart phone data.

What groups are involved in this policy fight? tech companies v. law enforcement

The…

Lege Trend: Data Encryption Bans. 4 Bits of Informed Intel.

  • Which states have pending legislation to penalize fully encrypted cell phones? California & New York
  • What fine is being imposed under these bills? $2500
  • What’s the goal of these encryption bans?
    • help law enforcement better combat human trafficking and other serious criminal activities that are being conducted over hidden encrypted networks and locked devices.
  • What groups oppose these encryption penalties?  The tech and privacy community

The Hill | Calif. bill would ban fully…

INTERIM. Home of the Ducks is now Home of Data Security. 5 Bits of Informed Intel from a new Data Security State Law.

  • data breach defined in new Orgegon law as:
    • “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
  • personal information that triggers the notification statute
    • ​Social Security number;
    • Driver license number or state identification card number issued by the Department of Transportation;
    • Passport number or other United States issued identification number;…

INTERIM. Lege Trend. State Suffers Major Breach. Responds with 2 Step legislation.

What was the state government data breach? in 2012, South Carolina suffered a data breach that exposed records for 6 million taxpayers.

What legislative fixes have emerged from South Carolina in wake of this data breach?

  • Support agencies’ preventive measures
    •  dual-password programs
    • laptop encryption
  • Centralize cybersecurity in an office under the governor.
    •  Allows an information security director to oversee and enforce statewide standards.

Governing | 2016’s Top…

Data Security Meets Sharing Economy Meets Regulatory Enforcement Powers

Which state has an agency enforcement action against the sharing economy? New York’s Attorney General

Which part of the sharing economy is the NY Attorney General looking into? Ride Share

What’s the issue? Buzzfeed reported that company execuitves had access to rider locations through the ride share app

Let’s get to know what could happen in Texas, and look at what enforcement deal was worked out in NY. The settlement included:

  • a 20K fine
  • requiring ride share entity to adopt a data…

INTERIM Lege Trend: State Proposes 6 Data Security Standards for Businesses.

New York Legislature, at the behest of its Attorney General, is strengthening its data security laws. 

Assembly Bill 6866 adds new data to protection requirements and increases penalties.

This bill creates these standards that establish compliance with the law for businesses:

  • a business that protects data more than the law requires
  • a business that complies with Gramm-Leach-Bliley Act
  • a business that meets international standards for information security
  • a business that complies with…