Welcome to the Future!
States have taken different approaches to how to regulate hacking by research, or white hat hackers, who identify and report data security vulnerabilities.
An example of this is a researcher who discovered in 2017 that USPS had left open all user information of the usps.gov website. There was no response from USPS, and the breach was disclosed this week.
Tech Crunch | U.S. Postal Service Data Breach Exposes Data of 60M Customers
Intel has drafted model data privacy bill that includes these 6 points:
New Hampshire voters approved a state constititional amendment to protect from government intrusion personal and private information.
The constitutional language: An individual’s right to live free from governmental intrusion in private or personal information is natural, essential, and inherent.
The passage rate: 80% of votgers supported it
Reason | N.H. Constitution Now Protects “Right to Live Free from Governmental Intrusion in Private or Personal Information”
What agency is involved? Employee Retirement System of Texas
What was the data breach? Personal health information data for other individuals was accessible when a person was logged into the agency portal
When did ERS receive notification? August 17 2018
How many people were impacted? nearly 1.25 million individuals
When did ERS report the incident? reported to the U.S. Department of Health and Human Services as a “unauthorized access/disclosure” health data breach on October 15th
The gold standard law: GDPR in the EU
What would a bill to protect ethical hackers do? Prevent liability for “white hat hackers” who find unsecured data
What group is behind this? Electronic Frontier Foundation
Do they have a campaign? Yes, the Coders’ Rights project
The Daily Swig | Campaign launched to protect ethical hackers in the Americas
SEC Commissioner Kara M. Stein raises these policy issues for regulators: