TREND: + 1 Governor Adding Cyber Security to Executive Branch

State: South Carolina

The Cyber Security Executive Level Entity: Critical Infrastructure Cybersecurity Executive Oversight Group

How was the Critical Infrastructure Cybersecurity Executive Oversight Group created? Executive order

 The Governor tasked the group with:

  • examine, enforce, and strengthen cybersecurity
  • aim to mitigate cyberattack

State Tech | South Carolina Establishes Cybersecurity Oversight Group

WISTV | McMaster looks to boost state’s cybersecurity through executive order

Lege Trend: Notify State Tax Agency of Some Breaches. Good for Businesses.Read the Bill.

State: Virginia

The breach that triggered legislation: rampant W-2 phishing e-mails that have plagued businesses

Why was a legislative fix necessary? These data breaches and scames cost many states millions of dollars as a result of payments made and investigations conducted on fraudulent tax returns.

The legislative fix:

  • Notification to Attorney General & VA Department of Taxation
  • When employers and payroll service providers experience a breach
  • The breach must involve taxpayer…

Utilities & Cyber Security. 3 Reasons Utilities Say CyberSecurity is the #1 issue.

The survey of utility professionals: Utility Dive’s fourth annual State of the Electric Utility Survey, surveying more than 600 utility professionals

The #1 most pressing issue facing utility companies: cyber and physical security 

what you need to know:

  • In 2015 & 2016 cyber and physical security was the 6th most pressing issue for utilities
  • Increased media attention to cyber threats has raised the issue’s importance
  • How the issues ranked as very important to the companies surveyed:
    • cyber…

Regulatory Trend. Election Hacking Unit. 3 Key Points for your state.

The U.K. Parliament is working to create an election hacking unit that:

  • The unit’s goal: help ensure the integrity of UK Democracy & public confidence
  • The unit will be monitoring only
  • Recommendations focus on an executive level, law enforcement driven unit

SC Magazine UK | Parliamentary committee proposes unit to combat ‘election hacking’

Lege Trend. Exception to Data Notification.

Trendy new exception to data breach notifications: encrypted data

How Tennesee worded the exception in its legislation: 

(1) “Breach of system security”:
      (A) Means the acquisition of the information set out in subdivision (a)(1)(A)(i) or (a)(1)(A)(ii) by an unauthorized person that materially compromises the security, confidentiality, or integrity of personal information maintained by the information holder:

           (i) Unencrypted computerized data; or

           (ii) Encrypted…

Lege Trend. A Data Protection Bill Called Bad for Business. The Competing Interests…

The  Bill:  Illinois Right to Know Bill

What does the Right to Know Bill in Illinois do? It allows a person to know what information is collected about the person and to which businesses that information could be sold.

Why is it considered bad for business? 

  • complex compliance regulations, which would apply to businesses of all sizes,
  • enormous burden on small businesses statewide
  • “requires any business with a website — even a local flower  shop or pizza parlor — to draft privacy policies…

8 States Data Privacy Laws. States Beating Feds to the Punch & the Koolaide.

  • Illinois
    • “right to know” bill
      • will let consumers find out what information about them is collected & what kinds of businesses the information is shared with
    • A bill to regulate when consumers’ locations can be tracked by smartphone applications
    • A bill to limit the use of microphones in internet-connected devices like mobile phones, smart TVs and personal assistants like Amazon’s Echo
  • California and Connecticut
    • Updated their laws to restrict government access to online…