Category Archives: data privacy

Lege TREND. + 1 Expansion of what triggers notification on a data breach

D.C. Attorney General new proposal  would add the following to the list of information that would trigger notification in a data breach:

  • passport numbers
  • military IDs
  • biometric data
  • health information
  • taxpayer identification numbers
  • health insurance info
  • genetic information
  • DNA profiles

Security Week | D.C. Attorney General Introduces New Data Security Bill 

Lege TREND. Parsing a LEgislative fight over notification of data breaches in 4 easy steps.

Debate over Michigan HB 4186 (2019 | MI) and HB 4187 (2019 | MI) focuses on the time period for notification.

The bills cut notification time in MI from 90 days to 45 days. Chamber of Commerce is as thrilled as a cat in the rain.

45 days is a standard adopted by 13 states.

An amendment proposal is for 75 days when the information is processed by a credit card processor.

Small Business Association of Michigan | New Data Breach Bill Moves Amid Latest Ransomware Attack

 

TREND. Blockchain Prevents Data Breaches. Add it to Talking Points.

Marriott CEO testified before the Senate Committee on Homeland Security and Governmental Affairs Permanent Subcommittee on Investigations and said that the hotel chain would now use encryptiona nd toeknization (blockchain, distributed ledger) to safely store data.

Security Boulevard | Marriott Could Have Prevented Privacy Data Breach with Tokenization

Local Data in Scooters. 3 Key Points in Legislation.

What data do scooter companies want to protect from local government?

  • real time data

Why do local governments want this data?

  • to see if scooter comapnies are complying with rules
  • pair it with service data for transportation efficiency

What enforcement actions have been taken?

  • By refusing to hand over data, Jump received a shorter operational permit in Los Angeles

What data concerns exist?

  • privacy of senstive data
  • Bird company policies prioritize privacy 

Mother Board | Scooter Companies…

3 Reasons States Should Act on Cybersecurity Standards

  • Timely. All 6 US Senators running for President in 2020 are cosponsors of cybsercurity legislation
  • History of federal Action. Standardizing cybersecurity practices at the federal level is difficult
  • Agency infighting  is creating disparate standards
  • State Success. State leaders have pushed legislative success to protect its citizens like:
    • TX, IL, WA and MA protecting biometric data
    • OH liability protection law
    • CA version of GDPR

The Hill | Why states should push forward with cyber laws

Lege TREND. Tort Actions in Personal Information Data Breaches

California’s SB 561 (CA | 2019)  would allow individuals to bring suit against a company for a data breach that includes their personal information.

The caveat: companies would have to have failed to provide reasonable security precautions.

Insurance Journal | California Bills Would Add More Punch to Consumer Data Protection Law

Lege TREND. Cleaning Up a Data Privacy Bill in the Golden State. 2 Lessons.

California is revising its first in the nation data protection bill by:

  • include passport and government ID numbers as data that trigger notification after a data breach
  • include biometric data, fingerprints, and iris and facial recognition scans, as data that trigger notification after a data breach

Tech Crunch | California to close data breach notification loopholes under new law

AB 1130 (CA | 2019)

Lege TREND. New Kid on the Block. Business Advocating for Data Privacy Fundamental Right.

Cisco is asking governmetns around the world to make data privacy a fundamental right.

The talking points:

  • Security: Assign responsibility to protect the confidentiality, integrity, availability, and resiliency of data;
  • Transparency: Explain how data is collected, used, transferred, and disclosed;
  • Accountability: Ensure governance for data under the entity’s stewardship, including a data protection team, applying a risk-based approach;
  • Innovation: Recognise multi-stakeholder-driven…