New Student Data Security Bill. 4 Pts. Adds Cloud Computing to Student Data Controls.

A bipartisan duo of Congressmen and women (Congresspersons?) has a new student data security bill.

Reps. Todd Rokita (R-Ind.) and Marcia Fudge (D-Ohio) rolled out the Student Privacy Protection Act this week. It will:

  • bar schools or private technology companies from selling or using student data for targeted ads.
  • set minimum data security standards for companies handling sensitive student information
  • update the Family Educational Rights and Privacy Act (FERPA) for mobile apps and cloud…

Hacking a Car. Brakes Controlled by Hacker.

A reporter for Wired details what parts of a car hackers can control while you’re driving. 

Hackers are able to control a vehicle’s:

  • A/C system, changing the temperature in the car
  • The radio, changing channels and volume control
  • Windshield wipers
  • Windshield washer fluid blurring the windows
  • dashboard functions
  • steering
  • brakes
  • transmission

All of the car functions above can be controlled from a laptop by a nefarious hacker. Wired. Congress is trying to stop it with the Spy Car Act.

Representation Opportunity: Insurance in Data Breaches

For the first time ever, Zurich Surety registers as a lobbyist in Canada amid interest in data security legislation.

Folks, data security insurance is a business that is growing exponentially. The well read will remember that just last week, Information Intelligence brought you news of the first lawsuit concerning insurance coverage in a data breach. 

Rapidly growing industry. Not Yet in Texas. Hello opportunities. 

Canadian Underwriter

Data Security and Electric Grids

Sen. Debbie Stabenow (D-Mich.) and Sen. Martin Heinrich (D-N.M) say the Energy and Water Development funding bill shortchanges our electric grid from being properly protected from a cyber attack.

They call for funding the following data security protections:

  • virtual forensics platform,” intended to detect malicious actors sitting on the network
  • Replace the $11M removed from the Cybersecurity for Energy Delivery Systems

The Hill

Trend: States Strengthening Health Data Privacy

Connecticut and Oregon both strengthened laws protecting health care data this year. Specifically the states , strengthened protections of personally identifiable information (“PII”).

  • Connecticut did this:
    • Effective October 1, 2015, S.B. 941 
      • Requires notice of a breach of personal information within 90 days of discovery
      • If a breach involves social security numbers, must offer a year of complimentary identity theft prevention and mitigation services, and the notifications must…

47 Attorneys General Oppose National Data Breach laws. Support States Rights.

47 Attorneys General signed a letter supporting state authority over data breach enforcement and strongly opposing any attempts at federal preemption.

 Gen. Paxton is notably absent from the list: Arkansas, Connecticut, Illinois, Indiana, Maryland, Massachusetts and Nebraska, was also joined by the following states and territories, according to the news release: Alabama, Alaska, Arizona, California, Delaware, District of Columbia, Florida, Georgia, Hawaii, Idaho, Iowa, Kansas, Kentucky,…

National Association of Professional (Insurance) Agents Ramps Up Data Breach Insurance

NAPA has new data breach compliance and certification. Data breaches are big business, people.  

Data breaches and protecting against data breaches generate:

  • Big legislative pushes
  • New regulations
  • Procurement Opportunities (hello, $21M emergency contract that the federal data breach sparked)

Data breaches impact:

  • bankers, credit unions, financial institutions
  • retailers
  • corporations
  • new lawsuit filings
  • health data
  • student data
  • +more

NAPA

All Data Breaches Lead to Court. 4 Lessons to Learn for Legislation & Corporate Governance.

Federal employees this week filed suit over the June 4th federal data breach. The breach is said to the largest in government history, and allegedly the result of Chinese hackers seeking super secret spy information. 

The crux of the lawsuit is something all corporations should pay heed to as its the same argument made by plaintiffs in Target and HomeDepot breaches too- how much knowledge did the government have about potential breaches and did the government fail to act? As for the feds,…

The Federal Government & Is Here to Help with Data Security. Never mind that massive federal government data breach…

The Federal Trade Commission has released new guidelines for corporate data security. FTC has the power to fine companies for data breaches, so take heed. 

Recommendations include:

  1. Start with security.
  2. Control access to data sensibly.
  3. Require secure passwords and authentication.
  4. Store sensitive personal information securely and protect it during transmission.
  5. Segment your network and monitor who’s trying to get in and out.
  6. Secure remote access to your network.
  7. Apply sound security…