Colonial State. Attorney General. Gets into middle of College Data Breach. 3 Things to Watch Out for 3rd party vendors.

The state: Vermont.

The players in this drama: Vermont College, the Vermont Attorney General, and the 3rd party software company whose product was breached

Why did the Attorney General get involved?

  • the 3rd party vendor software affects more than just the Vermont College
  • the 3rd party vendor software will affect Vermont’s businesses
  • its an outreach opportunity to educate people about Vermont’s data breach notification law

Vermonth Biz | Attorney general enters data security…

Cyber Crime Center. New State Agency in the Land of Silicon Valley.

The California Attorney General launched the California’s Cyber Crime Center (C4)

What’s the purpose of the state’s Cyber Crime Center? assist local law enforcement with investigations where digital expertise or assistance is required

What law enforcment collaboration will occur?  C4 will bring together:

  • California’s eCrime unit that investigates & prosecutes large-scale identity theft and technology crimes
  • California’s DOJ’s Office of Cyber Security experts
  • California’s Digital…

Agency wants enforcement over communications common carriers in data security

Federal Trade Commission wants enforcement powers over communications common carriers for data security and data breach issues.

Currently the FTC enforcement powers have an exemption for communications common carriers.

Inside Cybersecurity | FTC commissioners call for data-breach legislation, repeal of ‘common carrier’ exemption

Legal Trend. Regulatory Trend. Settling with Companies that Gather Data about Kids.

The State: New York

NY Settled a suit with Hasbro, JumpStart Games, Mattel & Viacom for violating what law? The federal Children’s Online Privacy Protection Act

What did the companies do? Gather personal data about children under 13

The settlement: collective $835,000 in penalties plus regular reporting to New York regulators

Engadget | Websites settle with New York over online child tracking

Data Regulation of Marijuana. 3 Key Pieces Informed Intel.

Which state included data regulation of marijuana? Colorado

What is the goal of data regulation of marijuana legalization? safely and securely control the flow of the drug across the state

What state agency houses this data center? Marijuana Enforcement Division (MED) in the state’s Department of Revenue

Governing | Managing Marijuana: the Role of Data-Driven Regulation

INTERIM. TREND. Data Security. Businesses. 3 Regulatory Points from a Texas White Hat Hacker.

Why are businesses not securing all online information? Its profitable to not secure the data. The penalties for not securing data are not impactful.

What legislation or regulatory reform is crucial? Not government specifics on security but rather strong enforcement and meaningful fines from regulatory enforcement.

What’s the future in hacking? Its not buying and selling information, but rather modification of the data that is out there already.

Business insider | A security expert…

Largest Data Breach Settlement Against Health Care Provider.

The enforcing regulatory authority: U.S. Department of Health and Human Services

The data breach: 4 million patients personal data, financial information and electronic health information was exposed in 3 different incidents within 1 year. 

The Settlement amount: almost $6 million fine

Society for Human Resource Management | Health Care System to Pay Largest Data Breach Settlement Ever

Fantasy Sports Facing Data Security Questions

What data security issues are being bandied about against Fantasy Sports?

  • Communicating with consumers requesting personal information without the use of encryption
  • Asking customers to send sensitive information, such as Social Security Numbers, and credit card images, via unencrypted email

Is ther an investigation? A complaint filed with the FTC 

Daily Dashboard | Daily fantasy sports sites face data security questions

INTERIM. 2 Reasons a Regulatory Agency Leader Supports Comprehensive Data Security Laws.

Which regulatory leader wants comprehensive data security laws? The FTC Chairwoman Edith Ramirez

Why the push for data security laws?

  • Hacks aren’t going away
  • Laws need to address how entities gather, save and disseminate personal information

Daily Dashboard | FTC’s Ramirez calls for comprehensive data security laws