Category Archives: regulatory enforcement

TREND. INTERIM. Fine businesses for data breaches.

Citizens in the UK dislike both the European Union and Businesses that have data breaches. 

An overwhelming majority supporting fining businesses & the recommendation has made it to Parliament.

Computer Weekly | UK consumers support fines for firms that lose personal data

UK Parliament | Cyber Security: Protection of Personal Data Online

Business Trend. Regulatory Guide for Data Safety. 29 Point Data Security Inspection for Business.

The Federal Trade Commission publishes “Start with Security: A Guide for Business” & offers these recommendations for business:

  • Don’t collect personal information you don’t need.

  • Hold on to information only as long as you have a legitimate business need.

  • Don’t use personal information when it’s not necessary.

  • Restrict access to sensitive data.

  • Limit administrative access.

  • Insist on complex and unique passwords.

  • Store passwords securely.

  • Guard…

INTERIM. Data Security. Health Care. White House Proposal. 3 Pieces of Info to Keep you Informed.

What White House Proposal on data security affecting health care? On May 25, 2016 the White House released its final Data Security Policy Principles and Framework (Security Framework) for President Obama’s Precision Medicine Initiative (PMI).

What are the goals of the White House data security proposal?

  • Build patient trust
  • Adapatable security protocols
  • Dependable data preservation
  • Identify risks
  • Transparency with patients
  • Responsibility
  • Sharing. Collaboration

What requirements…

TREND. State Attorney General Announces Increase in Data Breach Notifications. Get your Business Clients Up to Speed Fast

Which Attorney General announced a 40% increase in data breach notifications? New York Attorney General Eric T. Schneiderman

Why does the state A.G. track data breach notifications? In NY, businesses must notify the A.G. of a data breach and the A.G. assists in reaching consumers

Has the state improved efficiency for businesses reporting data breaches? Yes, the state moved to an electronic, web-based reporting system

Hudson Valley News Network | A.G. Announces Record Data Breach…

Government Reviews Health Care Contractors Data Security. Intel to Inform you.

An Office of Inspector General, Security Concerns, and health care contractors– Sound like a familiar mix?

Which health care contractors is the HHS OIG looking into? Medicare administrative contractors

What is the data security concern that is raised? the number of health care data gaps is INCREASING

Healthcare Dive | OIG report: More data security gaps at Medicare administrative contractors

Attorney General Opinion: Data Retention. License Plate Readers. Procurement FAIL.

What is the question answered by Attorney General Opinion KP-0076? Whether Bowie County can engage a private company to use a license plate reader data looking for vehicles that don’t have liability insurance?

Is there a fee splitting arangement in this scenario? Yes, the vehcile owner will get a letter from the District Attorney office, and fees will be split 50-50 between the County and the company.

Can this fee splitting arrangement with automatic license plate readers…

INTERIM. Retailers v. Financial Institutions. Data Security Legislation Cage Fight. 4 Key Points Informed Intel

Retailers and Financial Institutions are like the Hatfields & the McCoys when it comes to federal data security legislation.  

Here’s what you need to know when this fight comes to your state legislature:

  • Fairness.  Retailers think it unfair to hold retialers to the financial institution standards for customer notification upon a data breach.
  • Impact Beyond Small Businesses. The impact of imposing financial institution standards on businesses will impact businesses large and small…

INTERIM. TREND. Data Breach Law Changes. Read the Bill. New Requirements for Business.

Which state jumped on the enanced data breach notification law bandwagon? Nebraska

What 3 changes did Nebraska make to its data breach laws?

  • Expand the Data Triggering Notification to incude:
    • user name or email address along with
    • a password or security question and answer
    • that would permit access to an online account
  • Expands who Receives notice of a breach. Companies also have to notify the State Attorney General.
  • Encryption standard changed so that if the hackers got a hold…

Tech & Privacy Interests Do Not Like Data Security Legislation. 3 Keys Informed Intel

  • Tech & Privacy Interests don’t like provisions forcing technical assistance to government investigations
  • Why the hestiancy over forced assistance? It will lead to greater data insecurity
  • Ties the hand of businesses that want to provide their customers greater security

The Hill | Encryption bill draft worries tech community

CNET | Encryption bill would force companies to surrender user data