Category Archives: government data breach

Lege TREND. State Control over Local Government Cyber Security. Read the Bill.

 Senate Bill 2110 (2019 | ND) would give a North Dakota state agency, Information Technology Department, the power to:

  •  “advise, oversee and regulate cybersecurity strategy” for:
    • state agencies
    • higher education
    • cities
    • counties
    • school districts

What’s the state argument for a unified cybersecurity approach? the local govenrments and entities are connected at some point to a state network

Local government support? Yes, the North Dakota League of Cities supports the initiative because…

Lege TREND. State passes Equifax Fix. State Attorney General Proposes More Fixes. 2 Key Points.

In 2018, Vermont passed a data breach notification bill to address the Equifax data breach.

Vermont’s Attorney General is Recommending the following additional legislative fixes:

  • Create a new statewide office, Chief Privacy Officer,  charged with ensuring the state establishes best practices for handling Vermonters’ personal information
    • the position would advocate for additional privacy protections for citizens & hear concerns
  • Stronger protections for student data by educational…

Lege TREND. Top Data Security State Legislation in 2019.

  • California Privacy Act.  Will other states replicate it? Is it the US solution for GDPR?
  • Federal Preemption. Will Congress pass federal data breach notification standards?
  • Data Privacy Requirements for Internet of Things.  Privacy standards for your home thermostat, etc… See California’s SB 327 (2018)
  • Will small businesses get a carve out bill? See S770 (115th Congress)
  • Federal Preemption of Data Encryption Standards for Business

Sc Media | Top cybersecurity legislation of 2019

Lege TREND. Anatomy of a BlockChain Task Force.

The New Jersey Senate passed a Block Chain Task Force bill S2297 (NJ |2018) that will determine whether:

  • NJ should be using Blockchain technology to modernize government systems
  • it would safeguard personal data is good for NJ
  • if it would help with service delivery
  • whether it would be good for local governments

Touted benefits of blockchain/distributed ledger storage? could also help safeguard government systems from cyber-security attacks

Insider NJ | Kean/Beach Blockchain Task Force…

4 Reasons State Cybersecurity Laws Beat Federal Cybersecurity Laws.

  • More attention at the state level. States have been targets of hackers and that fuels their regulatory structures
  • Agility. States can respond more quickly legislatively
  • More to Lose. States are closer to local level data breaches and are as impacted by local breaches
  • Business Accountability State resources also support businesses that have been impacted by hackers

 

Baltimore Post Examiner | Why is State Cybersecurity better than Federal Cybersecurity?

Lege TREND. Anatomy of a Public Private Hacking Cooperation Bill.

Is this bipartisan? Yes, Sen. Rob Portman, R-Ohio, and Maggie Hassan, D-N.H.

What’s the bill called? The Public-Private Cybersecurity Cooperation Act

What would it do?  Creates a vulnerability disclosure program, crafted by the Department of Homeland Securty,  to allow hackers to report problems to the proper authorities without being prosecuted 

S3707 (115th Congress)

NextGov | Senators Introduce Bill to Let Hackers Reports Bugs to DHS

Lege TREND. State Cyber Law Enforcement and Protections. Anatomy of a Bill + Benefits to Cities.

HB 747 (2018 | OH) will estalish the Ohio Cyber Reserve to protect Ohioans from cyber terrorists.

Authors tout that the Reserve will also help cities with cyber inititatives.

How many aspects of cybersecurity will the reserve have its fingers in?

  • election security
  • local governments
  • critical infrastructure
  • businesses

Like the national guard, the reserve will act by Governor action.

Fox 8 | Ohio House passes bill to establish cybersecurity team

Government Technology | Ohio House Passes…

Regulatory TREND. State Data Breach. State Pays for Lifetime Credit Monitoring. Ends Program within 6 years.

South Carolina Department of Revenue had a data breach impacting tax payers in 2012.

Then-Governor Nikki Haley promised those impacted life time credit mornitoring. 

The Legislature de-funded the program effective OCtober 31, 2018.

Government Technology | South Carolina Lawmakers Vote to End Post-Hack Credit Protections

 

Texas State Agency. 2nd Largest Health Care Data Breach in US for 2018. What you need to know:

What agency is involved? Employee Retirement System of Texas

What was the data breach? Personal health information data for other individuals was accessible when a person was logged into the agency portal

When did ERS receive notification? August 17 2018

How many people were impacted? nearly 1.25 million individuals

When did ERS report the incident?  reported to the U.S. Department of Health and Human Services as a “unauthorized access/disclosure” health data breach on October 15th

Gov…