legislative trend – Page 8 – InfoHive

Regulatory TREND. Report on Election Security in the Keystone State. 5 Recommendations.

Use risk limiting audits for elections and voting practices
replace direct recording electronic systems with systems using voter-marked paper ballots
No unfounded mandates for local election officials
train local and state election officials on cyber security
establish statewide cybersecurity practices

Let’s take a peak at what the National Assocaition fo Realtors spent on cyber security lobbying in 20198?

$19million in spending on the last quarter on 2018 on cyber security lobbying
Including a bill For Small Business Development Centers to offer cyber security training
And a bill that would strengthen data breach notification

Why is procurement key?

Procurement contracts can set the tone for state data security standards
Telecom infratructure is key to data security
States should offensively say what the data standards are, rather than what cannot be done
Private-public cooperation is the key for leading global solutions
Strengthen cyber security workforces
Contracted cloud solutions can fill in when funding does not exist for state data security experts

Tim Cook (Apple) is recommending a Data Broker Registry.

What’s a data broker? they buy and sell data from third parties

So how would it work?

every consumer can opt into their data being collected or not
consumers would be able to remove their data from the registry
the FTC would house the registry and consumers could see what info is being collected and by whom

Why does this sound familiar? Because in 2018 informed:intel told you about the first in the nation data broker state law in VT,…

30 days to provide notification to consumers
Greater disclosures to consumers about data collected and where it is stored
Free credit freezes and unfreezes for a year
4 years of credit monitoring- free
Applies Deceptive Trade Practices Act penalties to Businesses (these accrue daily and per incident)

What impact does this have to businesses?

healthcare comapnies would see their notifcation timeline cut from 60 days to 30…

SB273 (OH |2018) does the following:

Adopts the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law
OH becomes the 2nd state after South Caroline to adopt the model law
Requires licesees develop, implement, and maintain a comprehensive information security program that contains administrative, technical, and physical safeguards to protect nonpublic information and the licensee’s information system within 1 year of the effective date of the Act;
Perform…

Cybersecurity experts favor: hand-marked paper records processed by optical scanners

What did Georgia’s voting security commission recommend? paper records but not hand marked and processed by optical scanners

Paper products rejoice! South Carolina legislature will consider requiring paper ballots. S374 (2019 |SC)

What is special about Rhode Island’s newly implemented risk limiting audits?

data helps create more efficient permitting processes
- CT allows local governments to get occupational licensing data directly form the state
overdose data helps first responders and hospitals prepare for epidemics
Prevent fraud
- IN adopted its Indiana’s Management and Performance Hub to “integrate” data from several agencies to build custom analytics solutions.” Its addressing issues from car crashes and infant mortality to Medicaid optimization.
- TX shared data across agencies…