Category Archives: legislative trend

Regulatory Trend: Agency Gives 3rd Party Contractor Data. Oops. 3rd Party Health Contractors Beware. 3rd parties Pay Costs of Data Exposure.

The Illinois Department of Insurance accidentally led to the posting of Social Secrity Numbers of health records online. 

How did a 3rd party get caught in a date release of health records? The agency sent records, including social security numbers, to Blue Cross Blue Shield which Blue Cross Blue Shield posted online. 

What happened to the 3rd party? The Department of Insurance took immediate corrective measures against Blue Cross Blue Shield

What is the 3rd party’s…

Data Security Bills Expedited Due to Terrorism

A push in the UK is campaigning to move forward with expedited data security legislation to secure networks in light of the November 13, 2015 terrorism in Paris. 

Why is this relevant?

  • Because legislation passed under the threat of security issues can bring in corporate client data security mandates
  • And, can include mandates for the world’s most valuable data security records– health care records.

Press Association | Lord Carlile wants communications data legislation ‘expedited’

Jail Contractor. Data Breach. Phone Records. 3 Reform to Follow.

  • Data Recording Limitations. Data breach included recorded attorney-client phone calls.
  • Data Retantion Limitations. If calls are recorded, how long are they to be kept and under which security protocols.
  • Data Protection. Attorney-client recorded calls were shared with prsoecutors.

Think Progress | Prison Phone Company Hit With Massive Data Breach

New Issue: Data Security. Insurance. Indemnification. 3rd Party Contractors.

Indemnification Clauses in Insurance Cybersecurity policies should do 3 things:

  • Be clear which entities are covered, none of this any and all other related entities mumbo jumbo
  • Explicitly state details like whether “indemnity for third parties extends beyond the policy’s expiration date”
  • Be flexible to constantly evolving laws and case law

Business Insurance | Precise policy language needed to cover affiliated businesses

Campaigns. Low Data Security. Liability Risk. 3 Reasons Why.

  • Campaigns have no legal obligation to protect personal information data that they gather.
  • Campaigns have a trove of information from credit cards, answers to personal profile questions, and personal identification
  • Its unclear which agency would regulate and enforce campaign data security

The Hill  How presidential campaigns could be putting your data at risk

76% of IT Decision Makers would Move Data Centers out of the US over Privacy.

Who was surveyed? 1000 IT decision makers across the UK and US

What did 76% say? 76% would “move their organization’s data to another country as a result of privacy concerns”

The privacy concern of businss: government snooping

How do the CEOs feel? 29% have moved data security to the top of the corporate agenda

Where are they moving their data storage? To Switzerland and Canada

The Data Center Journal | Information Exodus: 76% of IT Decision Makers Would Move Their Data to…

3 Recommendations to Minimize Liability in Outsourced Data Security. Hello Vendors.

  • “include specific data security procedure obligations in contracts with vendors

  • verify a vendor’s capacity to adhere to the prescribed data security procedures

  • look at data security practices from an expert’s perspective to determine whether such practices are reasonable”

National Law Review | Piercing Outsourcing Veil: FTC Says Data Security Obligations Remain 

U.S. Chamber on Data Security. 3 Points.

  • A patchwork of state laws is hard on business
  • Requires a single regulatory agency
    • Currently the FTC, FCC & state agency wrangle over regulatory authority
  • Clear legal standards on what constitute harm from a data breach

U.S. Chamber Institute for Legal Reform | A Perilous Patchwork: Data Privacy and Civil Liability in the Era of the Data Breach

Lege Trend: Data Security Bill Passes over Tech Objections. 3 Pros. 3 Opposition Points.

The U.S. Senate passed Cybersecurity Information Sharing Act on a vote of 74-21 this week.

Tech Companies continue their opposition. The main bones of contention:

  • Mechanism for sharing of cyber-threat information does not sufficiently protect users’ privacy ”  (Computer & Communications Industry Assoc.)
  • “[ Does not ] appropriately limit the permissible uses of information shared within the government” (Computer & Communications Industry Assoc.)
  • “Privacy-shredding” bill “in…

Federal Cyber Security Bill. 3 Points to Know Now. Which Businesses are on which side?

  • The Cybersecurity Information Sharing Act passed the U.S. Senate on Thursday, October 22nd.
  • Major Tech companies (Apple, DropBox) are opposed
  • National Retail Federation support amendment to CISA that offer liability protection for business that share threat data with the FBI and Secret Service, and not just the Department of Homeland Security.

Washington Post | Cybersecurity bill advances in Senate, but hurdles remain

National Retail Federation | Borad based Coalition Supports Cotton…