Welcome to the Future!
Schools have been tracking students to make them safer and more efficicent. The more data that is collected, the more information there is that can be fruitful to the nefarious hackers.
This year Florida became the first state to ban the collection of biometric identifiers from students. In 2014, 36 states considersidered 110 bills on protecting data security of students.
What type of student data protections are we seeing?
The phrase “if any” is giving lawsyers fodder with California’s new data security law. The issue is whether “if any” means credit monitoring must be offered or may be offered.
As always, drafting matters. Read carefully. Consider propositions, conjunctions, and the placement of commas. It matters. [National Law Review]
Strong economies rely on investor confidence. According to a poll by the Center for Audit Quality, increased data security regulation leads to improved investor confidence.
Investor confidence in the U.S. economy stands at 70%. [Journal of Accountancy]
Early this year privacy advocates had a win when ICE retracted its planned policy to allow access to a national law enforcement license-plate tracking system.
Local ICE offices didn’t like this. So, they started buying access to a private company’s vehcile registration database. Houston ICE office is noted as buying the private company’s vehicle database.
On going criminal investigations, where constitutional protections apply, are one thing, but open access to a private co…
A New Jersey data security bill is called best practices for businesses and government, but also increases the costs of government and of doing business.
The bill would require notification for more data breaches. Like most states notification in New Jersey was required for traditional indentify fraud issues- like when a name and social security number are released.
The new legidslation requires disclosure of a breach if usernames and email addresses, in combination with a…
Washington Post points out that local regulations on ride share continuously forego obtianing access to anonymized ride share data. Its the same data local governments collect from taxicab drivers.
The data serves two purposes.
(1) It strengthens transportation systems and gives tools for transportation planners, and
(2)It provides an understadning of how many jobs ride share is creating.
Posted indata privacy, legislative trend
Does this sound familiar? A state entity sends unecrypted names and social security numbers? Yes, much like the Texas Comptroller incident, a Pension system in Arizona sent unecrypted filed in regular mail to a third party provider. The third party provider never received the unecrypted disks. Now, the state is spending $300,000 to provide indentity protection for the affected retirees. [News 4 Tu… Lots of nobel bills become studies and reports when the opposition is vocal. For the last years, the Attorney General of California has released data breach reports. In 2013, there were 167 breaches reported to the California Attorney General, exposing data of 18.5 Million Californians. The California Attorney General also makes the following recommendations: For the health care industry: – Use strong encryption to protect medical info… Canada is considering imposing $100,000 fines on businesses that fail to notify customers of data breaches. Currently Canada utilizes a regional patch work of data security legislation, the national fine for businesses would be a first for Canada. [Info Security Magazine] Refreshing Recollection: The FCC can and does impose fines on businesses, like it did on two telecom companies … RollCall argues that the down side of hightened data security legislation is that it makes consumers complacent. Consumers aren’t encouraged or empowered to protect their own personal data. Are more regulations on business the answer to data security? [Roll Call]AZ Pension Participants Data Breach
State Data Breach Reporting- Example California
Imposing Fines on Businesses that Fail to Notify Consumers of Data Breaches
Does data security legislation make consumers complacent to protect their own data?