Category Archives: private corporations

Federal Cyber Security Bill. 3 Points to Know Now. Which Businesses are on which side?

  • The Cybersecurity Information Sharing Act passed the U.S. Senate on Thursday, October 22nd.
  • Major Tech companies (Apple, DropBox) are opposed
  • National Retail Federation support amendment to CISA that offer liability protection for business that share threat data with the FBI and Secret Service, and not just the Department of Homeland Security.

Washington Post | Cybersecurity bill advances in Senate, but hurdles remain

National Retail Federation | Borad based Coalition Supports Cotton…

Trump Hotel Data Breach

What happened to expose customer data at Trump Hotels? Hotel security systems were “compromised as a result of malware that went unnoticed on system computers for more than a year.”

How long did hackers potentially have access? 1+ year

What responses did Trump Hotels have?

  • Hired independent investgators who found no instances of data being accessed through the malware
  • “Immediately upon learning of a possible incident, we [Trump Hotels] notified the F.B.I. and financial institutions,…

6 Trends in State Data Breach Laws

  • Greater Enforcement Powers for State Attorneys General
  • Protecting More types of data = more reasons to notify consumers
  • Expanded liability for private companies that store state data
  • Requiring companies that have a data breach to offer, at their cost, mitigation services that protect data- think Life Lock etc…
  • Protecting Student Data
  • Requiring encryption for stored data
    • As an example, see: 
      • “The new Washington law goes even further as it identifies a minimum standard for…