Data Security new Threats to Water and Wastewater. Regulatory & Legislative Fixes on the Horizon.

IN March 2019 hackers got into a small Colorado water utility.

Are there regualtory parallels that can be made to secure the water and waste water systems? Yes, Water utilities & power distributors share similar industrial control systems

Which states have taken water security measures forward? NJ, NY 

E& E News | Hackers force water utilities to sink or swim

Lege TREND. Cybersecurity legislation for state 911 systems.

Maryland HB 397 (2019 | MD) would increase telecom fees to harden the state 911 system.

Why the legislation? the Maryland 911 system has overloaded and resulted in death of injured residents

Why is data security an issue with 911?

  • to conenct to cell phones and via text message, it exposes 911 systems to the internet
  • 337 successful attacks (on public safety networks) across 49 states and DC in the past 24 months
    • 186 %increase over the previous 24 months

Baltimore Sun | Modern 9-1-1 system…

Lege TREND. State Contracting. Coalition Opposes Contracts with Software Requirements. 3 Key Points.

The Coalition: Organizations representing accountants, techNet, AGC, engineers and technology professionals, + ALEC. Separate opposition stems from National Association of Chief Information Officers

The coalition opposes: state legislative efforts to require contracts install monitoring software

What sparked this? 30 states have a legislative push by TransparentBusiness that claims to ahve software that stops contractors from over-billing their clients

State Scoop | Industry groups urge…

Lege TREND. Legislating Blockchain and Bitcoin in Western Independent States

Nevada’s Uniform Regulation of Virtual-Currency Businesses Act SB 195 (2019 | NV) would require:

  • crypto currency to register with the state  Department of Business and Industry
  • blockchain groups oppose the legislation since the industry is nascent and the legislation could inhibit growth

Are other states considering uniform bitcoin legislation? Yes, CA, HI and OK

Bitcoin Exchange Guide | Nevada Bill Regarding Multiple Uniform Standards Sees Pushback from Blockchain and Crypto Proponents 

Lege TREND. + 1 Expansion of what triggers notification on a data breach

D.C. Attorney General new proposal  would add the following to the list of information that would trigger notification in a data breach:

  • passport numbers
  • military IDs
  • biometric data
  • health information
  • taxpayer identification numbers
  • health insurance info
  • genetic information
  • DNA profiles

Security Week | D.C. Attorney General Introduces New Data Security Bill 

Lege TREND. Robocalling is a felony under this bill + telecom requirements

Know those calls to your mobile that look suspiciously like a number you know? Arkansas SB 514 (2019 |AR) would change the penalty for those calls.

The bill would increase the penalty for spoofing from a Class B misdemeanor to a Class D felony. That’s up to 6 years in prison &  a fine up to $10,000.

Telecom companies would have to:

  • implement preventative measures
  • report yearly to the Arkansas Public Service Commission concerning steps taken to identify and block the robocall perpetrators

Ark…

Lege TREND. Parsing a LEgislative fight over notification of data breaches in 4 easy steps.

Debate over Michigan HB 4186 (2019 | MI) and HB 4187 (2019 | MI) focuses on the time period for notification.

The bills cut notification time in MI from 90 days to 45 days. Chamber of Commerce is as thrilled as a cat in the rain.

45 days is a standard adopted by 13 states.

An amendment proposal is for 75 days when the information is processed by a credit card processor.

Small Business Association of Michigan | New Data Breach Bill Moves Amid Latest Ransomware Attack

 

TREND. Blockchain Prevents Data Breaches. Add it to Talking Points.

Marriott CEO testified before the Senate Committee on Homeland Security and Governmental Affairs Permanent Subcommittee on Investigations and said that the hotel chain would now use encryptiona nd toeknization (blockchain, distributed ledger) to safely store data.

Security Boulevard | Marriott Could Have Prevented Privacy Data Breach with Tokenization