data privacy – Page 11 – InfoHive

TREND. Business & Cybersecurity. 3 Cyber Issues. US Chamber of Commerce.

The U.S. Chamber of Commerce is making cyber security recommendations for regulators and policy makers, including:

agency leadership needs to work with business to “harmonize cyber regulations”
modernize government IT structure
clarify the roles and responsibilities of the public and private sectors when it comes to cybersecurity

Manufacturing is the 2nd most hacked industry, behind health care
Cybersecurity risks include:
- operational downtime
- physical damage
- product manipulation
- theft of intellectual property and sensitive data
Cybersecurity in manufacturing isn’t an IT issue, its a business issue

The Agencies: FTC and NHTSA

The goal of rulemaking: fight cybersecurity and privacy threats from vehicles with systems that connect to the internet

State: California

The legislation:

require manufacturers to secure the cyberprotections of consumer goods sold in the state
require consumer consent before the device stores consumer data

State: Indiana

Indiana legislation: HB 1444

What Indiana’s legislation does to penalize ransomeware users:

Do other states treat ransomeare differently from other cyber crimes? Yes, California and Wyoming

Wyoming legislature had a package of student data privacy bills which will:

A bill to protect college students’ work and privacy- passed
2 bills protecting students’ digital information privacy
A bill which would require the state superintendent and other agencies to develop guidelines for student data privacy, security and privacy- passed

The lawmakers: Rep. Joaquin Castro (D-Texas) and Sen. John Cornyn (R-Texas)

The legislative concept: Allow agencies, like Department of Homeland Security, to work with consortia

What could the private entities do for the agencies?

The State: Kansas

The issues that are clouding a bill to protect data stored in the cloud:

Language that protects attorneys who strore client information in the cloud.
- Opponents say it elevates this privilge above other privileges
Language that limits release of the information to the subscriber.
- Law enforcment says they can now gain access without a warrant to the information.
Language that requires a warrant.

88% of hackers at the 2016 DEF CON conference say they can hack a target in 12 hours
81% of hackers say that they can identify and exfiltrate a target’s data in 12 hours
50% of hackers change their method each time
84% of hackers social engineer their vicitms- hello Facebook profiles
52% say training employees is effective

A lawyer for Google says new laws are needed to cover data stored on the cloud for these reasons:

Clear guidance for law enforcement and corporations
Takes corporations out of the untenable position of being in the middle between customer privacy and law enforcement
Laws crafted before cloud storage are not keeping up. Cloud data can’t be treated like paper documents