Lege Trend: More States Move Fast to Protect Students. Districts Face $50,000 Fines per Breach.

A panel in rugged, independent Idaho is creating a task force to study:

  • how much student data is sold to third parties
  • how best to protect student data, and
  • how to reduce sharing student data. 

 State and federal agencies collect nearly 566 data points per student. Last year, Idaho passed a law that can fine school districts up to $50,000 for student data security breaches.

Lege Trend: Federal Data Breach Legislation

Last week Congressmen Barton (R-TX) and Rush (D-IL) filed data breach notification legislation. Feds want to protect personal, private information and the states are quickly passing bills that further protect their citizens. 

What you need to know about the federal bills:

  • Act Name: Data Accountability and Trust Act (DATA Act)
  • Bill Number: HR 580
  • Senators Feinstein, Pryor, Rockefeller, and Nelson filed similar, but not identical bill:
    • Data S…

4 Data Security Policy Trends

  • Health Information protected by HIPPA will put companies at risk.
    • Department of Health and Human Services Office for Civil Rights enforcement actions have led to multiple million dollar settlements against hospitals, clinics, and health systems
  • FTC will take enforcement action. That action will lead to lawsuits challenging the FTC powers of enforcement. 
    • Opportunity for state enforcement abounds.
  • More lawsuits against compa…

Public Ed Contractors Want Data. States Stop the Data Flow.

In 2014, California passed bills to protect student data from contractors. What did the bills do?

  • Require “school districts to maintain control and ownership of any data managed by a private vendor.” Cal AB 1584 (2014)
  • Give education technology companies until 2016 to stop selling student personal identifying information and to stop target marketing to students  

Mandatory Encryption for Health Care Data. States Imposing Higher Standards than HIPAA.

The Garden State has mandated that all protected health information be encrypted. This new requirement applies to:

  • health providers
  • hospitals 
  • medical insurance corporations

The NJ legislation, signed by Gov. Christie, exceeds HIPAA requirements and will require encryption of:

  • patient’s name linked with:
    • a Social Security number
    • driver’s license or other state-issued identification
    • address
    • …

Downsizing Health Care Data Sharing

Private companies want access to government health care information to build their business, but they’re access to health care data is shrinking fast. HHS is severely cutting the information it is sharing with third parties.

The change was sparked after the AP reported that healthcare.gov was sending personal identifying information to third parties for marketing, advertising, and internet data performance purposes. 

Privacy advocates, the Electronic  Frontier  Foundation, …

Lege Trend: Techies Want Data Security Supremacy & Tax Relief

Georgia techies are focused on tax incentives and making Georgia the Supreme Leader in Data Security. The economic incentive proposals:

  • Extend Angel Investor Tax Credit
  • Film Tax Credits
  • “triple the qualifying period on a sales-tax exemption for companies buying more than $15 million in computer equipment, from one year to three”
    • This tax credit has made Georgia a hot spot for data centers
  • Create a committee to make Georgia a l…