- data breach defined in new Orgegon law as:
- “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
- personal information that triggers the notification statute
- Social Security number;
- Driver license number or state identification card number issued by the Department of Transportation;
- Passport number or other United States issued identification number;…
Category Archives: private corporations
INTERIM. 8 Elements of Data Security Laws & Regulations.
- Data Breach Definition.
- What data was breached?
- The level of knowledge the data holder must have of the breach before notification is triggered. Did they know? Is it reasonable that this data was breached?
- How to treat good faith access to data by an unauthorized employee
- How to treat the breach of account creditial information.
- user name, passwords, and security questions
- Timing.
- When must notification be given?
- How to treat data processors, people who hold the data but…
Hacking Mother Lode at the U.S. Department of Education. 5 Points to Know First. Education Contractors Be Aware.
- Treasure Trove of Data. House Oversight Committee Chairman Jason Chaffetz (R-Utah) is warning that a hack on the Department of Education would make the OPM data breach look like child’s play
- 1/2 of all U.S. government records are at the U.S. Department of Education
- Bad Inspector General Report. Deficiencies in security at Department of Education were called out by a November Inspector General report
- An F In Security. The agency also got an F in implementing security requirements…
Data Security Meets Sharing Economy Meets Regulatory Enforcement Powers
Which state has an agency enforcement action against the sharing economy? New York’s Attorney General
Which part of the sharing economy is the NY Attorney General looking into? Ride Share
What’s the issue? Buzzfeed reported that company execuitves had access to rider locations through the ride share app
Let’s get to know what could happen in Texas, and look at what enforcement deal was worked out in NY. The settlement included:
- a 20K fine
- requiring ride share entity to adopt a data…
INTERIM. 4 Points from the EU to Guide Texas Data Security Legislation
The EU is revamping its data security statutes, why should Texas care? Because E.U. courts have taken a very libertarian and conservative view to protect personal information.
Did the EU take any actions that might translate to Texas? Yes, 4 Points to consider:
- Stronger requirements for obtaining consent to collect/store data
- Memorializing the “right to be forgotten”.Sounds an awful lot like the Texas Do Not Call List.
- 72 hour noptification requirement for comapnies to notify the…
Lege Trend | Tuck Data Security Bill into Spending Bill
Change general law in a spending bill? No, say it isn’t so. Yes, it is so.
Congress is adding data security language to is spending authorization bill. Here are the highlights that have privacy advocaes on the right and left up in arms:
- The government already spies on its citizens too much
- Going light on businesses that share more information about data breaches with the government and other businesses isn’t helping privacy
- Protecting from disclosure under the Freedom of Information…
$45 Million in Cyber Security Research Grants to Universities. Any Universities in Texas?
Who is funding cybersecurity grants? The Hewlett Foundation Cybersecurity Initiative
How much in grant fudning is available? Started at $20 Million. It’s at $45 Million now.
The lucky recipients are? University of California at Berkeley, Stanford & MIT
Any Texas recipients? No. As Hewlett chief alludes, more private interests need to support research about how cyber security should look in the future. Specifically:
- develop a comprehensive conceptual framework for…
INTERIM: 5 Concerns Your Clients Have about Data Breaches
- More concerned about data breaches than lawsuits
- Worried about corporate image damage from data breaches
- Board Chairs and CEOs are more involved in data security than ever before
- Odds are high most comapnies have a data response plan
- Data breaches are increasing in severity and frequency
Credit Union National Association | Study: Companies losing confidence in data breach protections
Data Center Economic Development in South Texas
What data center project? Microsoft bought 158 acres in the Texas Research Park real estate controlled by the Texas Research & Technology Foundation.
How big of a project is this? It will be one of the largest data centers in the U.S.
Where’s the economic development angle? The Texas Research and Technology Foundation uses proceeds from the sale of the land to fund biotech companies
Puget Sound Business Journal | EXCLUSIVE: Microsoft buys nearly 160 acres in San Antonio for data…
INTERIM Lege Trend: State Proposes 6 Data Security Standards for Businesses.
New York Legislature, at the behest of its Attorney General, is strengthening its data security laws.
Assembly Bill 6866 adds new data to protection requirements and increases penalties.
This bill creates these standards that establish compliance with the law for businesses:
- a business that protects data more than the law requires
- a business that complies with Gramm-Leach-Bliley Act
- a business that meets international standards for information security
- a business that complies with…