Federal Cyber Security Bill. 3 Points to Know Now. Which Businesses are on which side?

  • The Cybersecurity Information Sharing Act passed the U.S. Senate on Thursday, October 22nd.
  • Major Tech companies (Apple, DropBox) are opposed
  • National Retail Federation support amendment to CISA that offer liability protection for business that share threat data with the FBI and Secret Service, and not just the Department of Homeland Security.

Washington Post | Cybersecurity bill advances in Senate, but hurdles remain

National Retail Federation | Borad based Coalition Supports Cotton…

Lege Trend: Model forms for Data Breach Notifications

California amended its data breach notification statutes this year to do 2 things:

1. Expand the definition of what type of information breach requires a notification for information gathered by an automatic license plate reader.

2. Provide a model form for entities that experience a data breach

National Law Review | California Amends Data Breach Notification Statute by Requiring Specific Notification Content and Expanding the Definition of Personal Information 

Drones & Data Storage. A Legislative Trend.

Drones collect data. Data everywhere. Private data. Public Data.

Legislatures and local governments are focused on …How long that data is stored, under what conditions, and under what dislcosure requirements is legislative fodder.

Are these private drones or public drones? Data release and data storage could apply to either. Here’s some of the legislative questions:

  • Are there penalties for a person’s private drone that collects data of someone’s orivate property?
  • How long can law…

Lege Trend: New State Data Security Laws. New State Cyber Security Agency. 8 Goals.

The New Jersey Legislature moved forward a data security law that will:

  • Create the New Jersey Cyber Security Commission
    • It will be a 13-member commission within New Jersey’s Department of Criminal Justice.
    • 6 members will be:  representatives from the state Attorney General’s Office, the chief technology officer of the Office of Information Technology, the chief executive officer of the state Economic Development Authority, the commissioner of the Department of Education, the…

6 Trends in State Data Breach Laws

  • Greater Enforcement Powers for State Attorneys General
  • Protecting More types of data = more reasons to notify consumers
  • Expanded liability for private companies that store state data
  • Requiring companies that have a data breach to offer, at their cost, mitigation services that protect data- think Life Lock etc…
  • Protecting Student Data
  • Requiring encryption for stored data
    • As an example, see: 
      • “The new Washington law goes even further as it identifies a minimum standard for…

Lege Trend: Peach Blossom State Passes Package of Data Security Bills: Internet Providers. Education. Employers. Healthcare.

Delaware this year enacted a package of data security bills, including:

Cybersecurity & Infrastructure. Cities Collect Data. Hackers Want Data.

Local governments colelct volumes of data from infrastructure such as:

  • fiber optics and wireless broadband data
  • data from sensors embedded in buildings
  • data sensors  in roadways 
  • data from water, waste and energy use

The data security risks:

  • hackers get into stop light and traffic management systems, security systems, electric grids or water systems
  • internal unintentional or intentional leaks
  • sensors being intentionally fed bad data

National Institute of Standards and Technology…

North Texas Congressman Front & Center on Cyber Security Legislation

In the political hot spot that is Denton County, Congressman Burgess noted the importance of bringing all stakeholders together on data security legislation by saying,

“I wanted to take an opportunity to hear from people who are working in the research area and the private sector and pull everyone together in a room for the morning and hear what the state of the industry is, and where they thought we might do things to improve it,” said Burgess, R-Lewisville.

Denton Record Chronicle

Regulating Data: License Plate Readers. 3 Concerns. 7 States take action.

In 2007, 17% of police departments were using license plate readers. That number increased rapidly. By 2012, 71% of police departments used license plate readers.

Whats the concern if these help lower crime? The data. Regulations seek to:

  • How long the data is kept. Minnesota keeps it for 48 hours. New Jersey keeps it for 5 years.
  • How safe is the data
  • How much data is collected about law abiding citizens

6 states have limited the use of license plate readers or prohibited the use…