Category Archives: legislative trend

9 Parts. North Carolina Data Security Bill. Post-Equifax.

The state Attorney General and a State Representative are promoting an forthcoming North Carolina bill, the Act to Strengthen Identity Theft Protections.

Here’s what the bill will do:

  • Include ransomware in definition of data breach
  • Protect more information by creating a duty for businesses to have reasonable data security standards, and include insurance/medical information in the data breach notification law
  • Quicker consumer notification.  15 day time limit to notify the consumer & the…

Lege Trend. 22 Groups of Banks & Retailers Join Forces. Wonder Twin Powers Urge 4 Point Data Security Bill.

The 4 Issues the group wants covered by federal data breach legislation:

  • A flexible, scalable standard for data protection that factors in:
    • the size and complexity of an organization
    • the cost of available tools to secure data
    • the sensitivity of the personal information an organization holds, as well as guarantees that small organizations are not burdened by excessive requirements.
  • Notification when a reasonable risk exists. A notification regime requiring timely notice to impacted…

Open Records TREND. Are election cybersecurity documents open records? See 2 different states work.

South Carolina Attorney General clarifies- financial info yes, but not security information

South Carolina Attorney General says that the South Carolina election commission can withhold from disclosure cybersecurity information. 

Can related information about election cybser security be released thbrough open records?

Yes, South Carolina election commission will release financial information about cybersecurity products & services purchased

Michigan considered a bill to protect election…

Lege TREND. 6 Standard Data Protocol For all State Data. Is the South leading the way in protecting personal information?

Mississippi is considering statewide standards for data that will:

  • how to long to store personal data
  • how to dispose of personal data
  • what personal data can be disposed of
  • how to store personal data
  • apply to all state entities that have personal data in their possession
  • what a state agency, Department of Archives and History, needs to store data in perpetuity

What prompted this legislative action by Mississippi?

  • A 2013 breach of health care data at the Univeristy of Mississippi
  • A…

Lege TREND. Bills Protecting Health Care Data in 2 States.

​Maryland HB 974 (2017)

  • Includes all HIPPA information in the defintion of personal information for state data breach law purposes
  • The bill also protects Biometric data, such as fingerprints, voice prints, and genetic prints

Delaware HB 180 (2017)

  • Includes medical history in the defintion of personal information
  • Requires “any person who conducts business in Delaware and maintains personal information must safeguard that information.”
  • Requires health insurance information to be protected
  • Es…

6 Data Security Policy Trends in 2018

  • Policies to improve data security workforce
  • Liability policy for businesses that utilize 3rd parties to manage and mitigate security incidents and challenges
  • Policies to encourage more women in data security workforce
  • Liability and notification requirements when comapnies utilize automated security security tools
  • Policies that Support Awareness and Training of existing workforce
  • Policies that ecourage businesses to maintain a base level of data security and notification requirements

Hea…

Data Security Legislation is a Driver to Increase Data Security Insurance.

Progressive Market’s analysis lists 3 drivers for an increased demand in cyber insurace/data security insurance including:

Draft Data Security Standards are here. National Institute for Standards and Technology Delivers. 3 Key Points.

Input on Draft Standards:

Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.

3 Goals of the draft standards is to align the needs of :

  • policy requirements
  • business needs
  • technological methodologies

Flexible Standards

The standards should eveolve as technology evolves

 

New buzz words are emerging in dagta security policy like: Cyber attack lifecycle

NIST | Cybersecurity Framework Draft Version 1.1