Category Archives: legislative trend

States have hard time hiring data security experts.

The National Association of State Chief Information Officers, an organization for states’ chief information technology officials, found states are plagued by problems with hiring cybersecurity experts.

Why? 

  • “Nearly 92 percent of states said salary and pay grades presented a challenge in attracting and keeping employees.
  • 86 percent of states said they’re having trouble recruiting people to fill vacant slots. Four years ago, only 55 percent of states reported …

The difference between data security & data privacy?

Data security:

  • “knowing where your data is located”
  •  ” who may access the data. “

Data privacy:

  • “predicated on data security”
  • “requires further understanding how personal data is being collected, processed (and by whom), and transferred,”
  • “and the consistency of these practices with applicable laws, regulations, and the reasonable expectations of the relevant consumers”

Posted byadminPosted indata privacy, legislative trend

Lege Trend: Marketing Information is Protected Personal Information

Illinois Legislature is moving a data security bill that adds marketing information to protected information. Which means, if marketing information about a consumer is breached, notice will be required to the consumer.

Illinois Bill, SB1833,  was drafted by the Illinois Attorney General and “will require notification in the event of a breach of “information related to a consumer’s online browsing history, online search history, or purchasing history.”” 

Advertisers and Mark…

2 States First to Update Data Security Laws for 2015

Montana and Wyoming, wrangling western individualism, passed new data breach notification laws. Here’s what they did:

Wyoming expanded what information triggers a data breach notification to include:

  • Username or email address with password or security question and answer
  • Birth or marriage certificate
  • Medical, biometric or health insurance information
  • Individual taxpayer identification number.

Wyoming also expanded what should …

New SEC Rules on Cyber and Data Security Forthcoming

The SEC is mulling over requiring disclosures by publicly traded companies concerning data security and data breaches. 

This should come at no suprise as in 2011, the Corporate Fiannce Division issued guidance on disclosing data security and data breaches in CF Disclosure Guidance: Topic No. 2, Cybersecurity, Oct. 13, 2011.

What’s the SEC considering risk factors that need to be disclosed?

  •  if the risk of data breaches would make an investment in the business r…

States Lose (Again) with Federal Data Breach Law

The federal data breach bill moving through Congress will preempt all state laws. Most states have stronger data breach laws than the federal bill.

Some say the federal bill is being pushed by the business lobby. It makes sense. Businesses are being sued after data breaches and it is costing millions and millions. Hundreds of millions. 

California, has stronger data security statutes and the California Consumer Federation says the federal bill will:

•Eliminate notif…

GAO: IRS Needs Better Data Security

The GAO found 69 data weaknesses at the IRS, which caught the attention of Sen. Grassley and the Treasury inspector general for tax administration.

The Treasury’s inspector general for tax administration ranks data security as the IRS’s top management problem for 2015. In response, the IRS claims that budget cuts have impacted its abaility to find security weaknesses.

The Hill<...