Category Archives: private corporations

Procurement Opportunities. 3 Data Security Recommendations. Senate Business and Commerce.

Senate Business & Commerce interim report offers these recommendations on cybersecurity:

  • the voluntary nature of state cybersecurity policies are a problem (i.e. need more requirements with hint, hint: more procurement opportunities)
  • require technical risk assessments at state agencies
  • USE PRIVATE SECTOR TECHNOLOGIES like cloud storage

A plethora of procurement opportunities abound.

Policy Consideration: Ethical to Purchase Data Breach Information?

Can a business buy a list of breached users from another business for the purpose of notifying the hacked users?

uh, what? Facebook wants to buy a list of hacked users from another comapny so it can don the white hat and tell its members they were hacked.

For your consideration while legislatures consider how to protect consumers whose information has been hacked. Anyone for a prohibition on the sale of the hacked information?

CSO | Security experts divided on ethics of Facebook’s…

4 Data Privacy Issues with Personal Fitness Tech. Ripe for Legislative Disclosures.

  • None of the companies will give users proper notice about changes in their terms
  • All of the wristbands collect more data than what is necessary to provide the service
  • None of the companies fully explain who they may share user data with
  • None of the companies state how long they will retain user data

Tech Crunch | Fitbit, Jawbone, Garmin and Mio fitness bands criticized for privacy failings

Insurance. Data Security. Bill of Rights for Consumers.

To whom does the model insurance-cybersecurity law apply?  To anyone who holds a license, registration or is authorized by a state insurance agency

There’s a revision to the model law, what’s changed?

  • No preemption by the model law
  • No private causes of action. tort reformers rejoice. 
  • No contractual requirements for 3rd party vendors, but 3rd part vendors must be capable of protecting information
  • Stronger notification requirements that trigger notification within 3 days of…

Legal Trend. Regulatory Trend. Settling with Companies that Gather Data about Kids.

The State: New York

NY Settled a suit with Hasbro, JumpStart Games, Mattel & Viacom for violating what law? The federal Children’s Online Privacy Protection Act

What did the companies do? Gather personal data about children under 13

The settlement: collective $835,000 in penalties plus regular reporting to New York regulators

Engadget | Websites settle with New York over online child tracking

Fantasy Sports Facing Data Security Questions

What data security issues are being bandied about against Fantasy Sports?

  • Communicating with consumers requesting personal information without the use of encryption
  • Asking customers to send sensitive information, such as Social Security Numbers, and credit card images, via unencrypted email

Is ther an investigation? A complaint filed with the FTC 

Daily Dashboard | Daily fantasy sports sites face data security questions

Tort Reform Issue in Data Breaches.

The key tort issue in data breaches: whether the consumer has been injured

What’s the argument if hackers have your information isn’t that a harm to a consumer? Some courts say yes, other courts say no.

Where are cases proceeding where the harm of the data breach is only having your personal information hacked? Judges in California, Illinois and other states

Wallstreet Journal | For Consumers, Injury Is Hard to Prove in Data-Breach Cases

 

TREND. Auto Data Security. Car Theft by Hacking. 3 Pieces Informed Intel to Protect from New Laws.

How? Via laptop theives can open doors, and start an ignition to steal late model cars prompting new laws against auto manufacturers to secure vehicle data

Is this in Texas? Yes. Houston has recorded theft of a 2010 Jeep

Which manufacturers are targeted? Known hacks of autombilies are of Fiat Chrysler, GM and Tesla vehicles

WallStreet Journal | Thieves Go High-Tech to Steal Cars