Lege trend: Keystone State Considering Student Data Protection Legislation. Eduction Vendor Data Sought.

Pennsylvania State Rep. Dan Miller, a former teacher, is crafting student data security legislation that will:

  • Require ed-tech vendors to delete their data on former students & alert victims of any data breaches.

Like other states, Pennsylvania is looking to California’s landmark student data protection legislation for guidance.

Post Gazette

Lege Trend: Peach Blossom State Passes Package of Data Security Bills: Internet Providers. Education. Employers. Healthcare.

Delaware this year enacted a package of data security bills, including:

Tech Joins Fight Against Federal Student Data Protection. 3 Reasons Tech Opposes Student Data Security Changes.

Family Education Rights and Privacy Act is undergoing an overhaul. Part of that overhsaul is to strengthen privacy protections for student data. 

The Internet Association opposes the current proposal  because:

  •  it is too broad/vague
  • it has unprecedented notification requirements
  • it does not preempt state law

The Hill  The Internet Association Opposition Letter 

North Texas Congressman Front & Center on Cyber Security Legislation

In the political hot spot that is Denton County, Congressman Burgess noted the importance of bringing all stakeholders together on data security legislation by saying,

“I wanted to take an opportunity to hear from people who are working in the research area and the private sector and pull everyone together in a room for the morning and hear what the state of the industry is, and where they thought we might do things to improve it,” said Burgess, R-Lewisville.

Denton Record Chronicle

Trend: Activist Hackers.

The last few weeks have cemented a growing trend of activist hackers. Examples from the last year:

Expect to see more moves into the realm of politics, social issues, and corporate interests.

Tech…

Trend: Student Data Protection. Hello, Education Contractors, its you They Are After. States Moving Fast to Protect Students.

Only a few States prohibit kids’ personal information from being shared by schools with third party vendors, like marketers.

  • California
  • Oregon
  • Delaware

States working to protect student data through legislation or regulation:

  • Maine
  • Maryland
  • Florida
  • Mississippi
  • Georgia
  • Hawaii
  • Iowa,
  • North Carolina
  •  Illinois

CBS This Morning: How Safe is Your Kid’s Digital Data at School?

Neiman Marcus Ruling Makes it Easier to Sue a Company for a Data Breach

Neiman Marcus experienced a data breach in 2013 that exposed credit card information for 350,000. And, as it is with every data breach, lawsuits ensued.

The 7th Court of Appeals answered a lingering legal and legislative issue– whether any actual injury has to occur before suit may be filed. “Chief Judge Diane Wood, who said that fear of hackers in the future is not too “speculative” for a day in court.”

The ruling is expected to apply to both pending lawsuits realted to Sony &…

Regulating Data: License Plate Readers. 3 Concerns. 7 States take action.

In 2007, 17% of police departments were using license plate readers. That number increased rapidly. By 2012, 71% of police departments used license plate readers.

Whats the concern if these help lower crime? The data. Regulations seek to:

  • How long the data is kept. Minnesota keeps it for 48 hours. New Jersey keeps it for 5 years.
  • How safe is the data
  • How much data is collected about law abiding citizens

6 states have limited the use of license plate readers or prohibited the use…

Trend: State Adds Data Security Requirements for State Contractors

Connecticut’s enacted Senate Bill 949 contains significant data security requirements for entities contracting with state agencies and entities in the health insurance and administration business. 

Contracting entities must provide:

  • Comprehensive data-security program, including:
    • the use of security policies,
    • annual reviews of such policies,
    • access restrictions, and
    • mandatory security awareness training for employees beginning July 1, 2015.
  • Restrict access to Confidential…