INTERIM. TREND. Student Data Security Bills. 2016. 31 States. The Numbers you need to know:

  • In 2016, 31 states introduced student data security bills
  • in 2016, a total of 94 student data security bills were introduced
  • The 4 fastest states to act in 2016 were:
    • New Hampshire: a study to make recommendations
    • Utah: data governance standards
    • Virginia: contracting limitations, data limitations for student & teacher data
    • West Virginia: State Board level data governance standards

District Administration | CIO News | 31 states introduce student data privacy bills

INTERIM. Another Student Privacy Bill. 7 New Requirements for Education Contractors & Vendors.

Who are the targets of Connecticut’s student data privacy bill?

  • contractors with local boards of education, the State Board of Education and the State Department of Education
  • operators of websites, online services and mobile apps

What will be required of education vendors?

  • outline and maintain security practices
  • prohibited from using personally identifiable student information for :
    • advertising purposes
    • any purpose apart from what their contract stipulates
  • vendors cannot retain…

3 Points Informed Intel. Why Hackers Target Healthcare Over All Other Industries.

Hacking incidents by industry:

  • 23% of data breaches occured in healthcare
  • 18% of data breaches occured in financial services
  • 16% of data breaches occured in education

34% of healthcare data breaches are caused by employee error

The average notification timeline after a breach:

  • 69 days to detect the incident
  • 7 days to contain it
  • 43 days to analyze what happened
  • 40 days to notify potentially affected individuals

Health IT Security | Healthcare Data Breaches Most Common in 2015…

INTERIM. 3 Ways 1 State Seeks to Tighten Education Contracts. Student Data Security. Read the Bill. Prepare an Offense. Prepare a Defense.

Which state is making a new move to protect student data? Colorado

What does it mean for education contractors? New Rules. New Data Security Requirements.

3 Key prohibitions in the bill:

  • prohibit education contractors from selling personally identifiable student information
  • prohibit use of student information for targeted advertising to students
  • Prohibitions follow to the subcontractors
  • Establishes data security protocols tied to education contractors

CO HB 16-1423

Chalkbeat…

University Policy Reaction to Hackers Backfires. 5 Keys to Keep in Mind.

What happened on University of California campuses to cause a UC hacker policy? In 2015 Hackers Broke into the UCLA Medical Center.

In response to the hack what policy did UC officials enact? UC installed data monitors that stores internet traffic on campuses for 30 days

Do faculty like this idea? No, UC has a policy dating back to the 1930s that providers for collaborative policy making in conjunction with faculty input. It’s all very Californian.

Did UC create a greater data security…

INTERIM. Home of the Ducks is now Home of Data Security. 5 Bits of Informed Intel from a new Data Security State Law.

  • data breach defined in new Orgegon law as:
    • “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
  • personal information that triggers the notification statute
    • ​Social Security number;
    • Driver license number or state identification card number issued by the Department of Transportation;
    • Passport number or other United States issued identification number;…

Teacher Data Hacked. 3 Keys from the ISD Response.

What did hackers breach? Lawrence, MA Public Schools’ online database

How did the hackers breach the school database? A phishing attack 

What did hackers take? Teachers’ personal information:

  • names
  • phone numbers
  • addresses
  • Social Security numbers
  • calendar year 2015 gross earnings

How did the school district respond?

  • email to teachers informing them of the breach
  • explained that the district would:
    • mitigate the breach
      • directing teachers to sign up for 90 days of free credit…