3rd Party Tax Collectors. 2 Data Security Issues.

Why is there a data security issue with 3rd party tax collectors? 3rd party tax collectors receive taxpayer information from taxing jurisdictions

Why is does this raise data security risks? data theft is on the rise & businesses aren’t keeping up with data security protocols to protect taxpayer information

Accounting Today | Saying No to Outside Agencies in Tax Collections

Attorney General Opinion: Data Retention. License Plate Readers. Procurement FAIL.

What is the question answered by Attorney General Opinion KP-0076? Whether Bowie County can engage a private company to use a license plate reader data looking for vehicles that don’t have liability insurance?

Is there a fee splitting arangement in this scenario? Yes, the vehcile owner will get a letter from the District Attorney office, and fees will be split 50-50 between the County and the company.

Can this fee splitting arrangement with automatic license plate readers…

Legal Trend: Sue over Data Breach. Can you remain anonymous?

No. Nien. Nyett. Nej. A federal judge ruled that people caught in the data breach at Ashley Madison cannot remain anonymous. 

Why did these plaintiffs want to be anonymous? Fear of the impact to the professional and personal lives.

Why did the court deny the request? Because the data breach is not equal to instances when a person can remain anonymous. Those instances are reserved for minors, rape, or other highly sensitive matters.

Washington Post | People suing Ashley Madison for…

INTERIM. TREND. Data Breach Law Changes. Read the Bill. New Requirements for Business.

Which state jumped on the enanced data breach notification law bandwagon? Nebraska

What 3 changes did Nebraska make to its data breach laws?

  • Expand the Data Triggering Notification to incude:
    • user name or email address along with
    • a password or security question and answer
    • that would permit access to an online account
  • Expands who Receives notice of a breach. Companies also have to notify the State Attorney General.
  • Encryption standard changed so that if the hackers got a hold…

Legal Trend: General Liability Insurance Cover Data Breach Liabilities. 3 Bits Informed Intel.

What have state courts been saying across the country about data breach insurance? General Liability policies don’t cover data breaches

What happened this week to alter this legal trend? The U.S. Fourth Circuit Court of Appeals in Virginia found that a ageneral liability policy covered a data breach

What does the insurance company say? The 4th Circuit Court of Appeals got it wrong. General liability policy that covered “electronic publication of material” with “unreasonable…

Lege Trend: Requiring Tech Companies to Decrypt. Read the Bill. Plan your Strategy.

What state legislature considered a bill to fine companies that do not decrypt after receiving a court order? California

What happened to this bill to fine companies? Died in committee without a vote

What did opponents to the bill say?

  • forced decryption weakens security and personal privacy
  • “Do we have a world where there’s no privacy whatsoever for the average citizen?
  • Assuming that this body is OK with every agency in the U.S. having access to everything, every application, every…

Tech & Privacy Interests Do Not Like Data Security Legislation. 3 Keys Informed Intel

  • Tech & Privacy Interests don’t like provisions forcing technical assistance to government investigations
  • Why the hestiancy over forced assistance? It will lead to greater data insecurity
  • Ties the hand of businesses that want to provide their customers greater security

The Hill | Encryption bill draft worries tech community

CNET | Encryption bill would force companies to surrender user data

Health care data Security. Non-HIPPA entities. Health & Wellness Apps Beware. Medical Billing Companies Hello. Bonjour Medical Transcribers.

What entities are the new targets for data security enforcement? HIPPA adjacent health and wellness companies. 

Why are HIPPA adjacent health and wellness companies the focus of regulators? These companies collect and store personal health information. For example:

  • Fitbit & health apps. That data from your fitbit gets stored somewhere and if it was collected and stored by a health care provider, it would be protected information. 
  • Medical billing companies
  • Medical Transcription…

Trucks. Buses. Ambulances. Cyber Security Issues. 3 Key Points.

  • Spanish hackers discovered that devices that make logisitics companies more efficient are subject to being controlled by hackers
  • Companies use “telematics gateway units” or TGUs, small radio-enabled devices attached to industrial vehicles’ networks to track their location, gas mileage and other data“
  • The ability to locate large vehicles and ambulences creates public safety concerns

Wired | Thousands of Trucks, Buses, and Ambulances May Be Open to Hackers

Lege Trend: Data Security in Probate

Providing mechanisms to address a decedent’s online presence is a growing trend. 

This sounds rather nerdy, why is it important to a corporate client? Because the state may tell your client what it can and cannot do with customer data.

So, what state is now wading into this territory? Wyoming

What could happen with data at death?

  • A user would be able to direct a service, like Facebook,  to turn their accounts over to a fiduciary at death
  • Or, if a will isn’t so set up, then a data…