Lege Trend. State CIO + State Cybersecurity Advisory Council. 3 Key Bits of Intel. Read the bill.

Oregon’s Senate Bill 90 creates a new position of Chief Information Officer who is responsible for:

  • Overseeing the Cybersecurity Advisory Council with 9 voting members and an indeterminate number of appointed, non-voting members
    • with required participation by law enforcement representatives
  • Creating the Oregon Cybersecurity Center of Excellence tasked with inter- and intra-agency coordination, threat response, & information-sharing
  • Mandates agency cooperation with the CIO

Government…

How to Move Grid Cybersecurity requirements by linking it to 2 other energy bills.

How to pass electric grid cybersecurity standards in 2 steps of legislstive logic:

  • Tie expedited permitting of pipelines to electric grid modernization
  • Tie electric grid modernization to grid cybersecurity

Natural Gas Intel | Senate Energy Policy Reform Bill Revived, Fast-Tracked

Promoting Good Cyber Hygiene Act. That's Real, Folks. 3 Bits Informed Intel.

A bipartisan, and awkwardly named piece of legislation, the Promoting Good Cyber Hygiene Act, calls for:

  • National Institute of Standards and Technology would establish a set of baseline voluntary best practices for safeguarding against cyber intrusions 
  • provide the public access to the cyber hygiene practices
  • require annual updates

The Hill | Senators introduce ‘cyber hygiene’ bill

How Cybersecurity Bills Can Hamper Self Driving Car Legislation.

Automakers say they need flexibility to adapt technology of self driving cars. 

What’s known for flexibility? the sarcastic answer: enacted statutes and their ability to keep up with technology

What’s the solution for cybersecurity for self driving cars? According to the American Center for Mobility self imposed rules by industry are the best option.

Automotive News | Cybersecurity push may tie up autonomous-car legislation

Business Trend. Hiring Attorneys, Consultants, Lobbyists to block internet service provider reform by states

21 States responded to President Trump’s repeal of Obama era internet privacy regulations, by offering state regulations for internet privacy. Let’s take a peak.

In California, one internet service providfer, AT&T, has spent $2.71M in the last year.

Federal preemption isn’t a concern because the FCC laws and rules share duties with the states and there is no explicit preemption.

NCSL | PRIVACY LEGISLATION RELATED TO INTERNET SERVICE PROVIDERS

The Recorder | Calif. Pushes Internet Privacy…

21 States Move to Protect Consumer Privacy on Internet. Au Revoir Federal Internet Privacy. Bonjour State Internet Privacy.

21 States responded to President Trump’s repeal of Obama era internet privacy regulations, by offering state regulations for internet privacy. Let’s take a peak.

In  California, Assembly Bill 375, will:

  • Customer information an only be used or sold after obtaining “opt-in” consent
  • Prohibit penalties or discounts based on consent

Federal preemption isn’t a concern because the FCC laws and rules share duties with the states and there is no explicit preemption.

NCSL | PRIVACY LEGISLATION…

National Governor Association Prioritizing Cybersecurity. 4 Highlights to be Informed.

Virginia Gov. Terry McAuliffe, Chair of the National Governor Association, urges states to:

  • not wait for the federal government to protect data security and privacy
  • federal funding is needed for states
  • states must lead with coordiantion with the federal government
  • Virginia’s Executive Order creating a Cyber Security Commission should be duplicated in other states

Politico | Governor Cyber Speaks

Bill to Require ID Protection at any State Government Data Breach. 3 Bits informed:intel

State: California

The legislation: Assemblyman Matt Dababneh sought to apply the standard applied to business of requiring 1 year of ID theft protection services for anyone who is impacted by any government breach in California. AB 241 (2017) 

The Opposition is winning as the bill stalls. The loyal opposition includes California State Assn. of Counties, the Urban Counties of California, and the League of California Cities

Opposition arguments:

  • it would cost cities & counties too much
  • state…

4 Future Data Security regulatory issues for Health Care.

The federal HEALTH CARE INDUSTRY CYBERSECURITY TASK FORCE released 27 recommendations in its June 2017 report, and set forth these 5 future regulatory issues for health care cybersecurity:

 

  • Develop a cohesive plan for implementing this report’s recommendations and develop appropriate metrics to measure data security implementation progress.

  • Conduct a risk analysis, similar to the National Infrastructure Protection Plan, with an overlay for health care cybersecurity and privacy.…