Category Archives: regulatory enforcement

Lege TREND. Fake Constituent Written Suport.

The allegations of fake constitutent support:

  • Comments to the FCC over net nuetrality rules
  • Of 20 million comments, almost 50% were provided without consent

The investigations:

  • FBI issuing subpoenas
  •  New York Attorney General with support of Attorneys General of Massachusettes and the District of Columbia

Targets of the subpoenas:

  • 14 organizations
  • 11 of which are either politically conservative or related to the telecommunications industry and opposed net neutrality, and three of which…

Lege TREND. Anatomy of a Public Private Hacking Cooperation Bill.

Is this bipartisan? Yes, Sen. Rob Portman, R-Ohio, and Maggie Hassan, D-N.H.

What’s the bill called? The Public-Private Cybersecurity Cooperation Act

What would it do?  Creates a vulnerability disclosure program, crafted by the Department of Homeland Securty,  to allow hackers to report problems to the proper authorities without being prosecuted 

S3707 (115th Congress)

NextGov | Senators Introduce Bill to Let Hackers Reports Bugs to DHS

Lege TREND. State Legislation Reacting to Marriott Breach. What you need to know:

New Jersey legislature is moving A3245 (2018 |NJ) which is in repsonse to the Marriott data breach and will:

  • Expands the state data breach notification requirements to include disclosure of:
    • usernames
    • email addresses
    • any passwords
    • security questions and answers
  • The authors say prompt notification is required for people to keep their online acocunts protected

Insider NJ | Assembly Panel Clears Caputo & Murphy Bill Requiring Disclosure of Online Security Breaches 

Regulatory TREND. Texas Attorney General Investigating Marriott Breach. 3 Key Points.

  • Lots of potential Texas impact.  potentially 100s of 1000s of Texans “vulnerable to the nightmare of identity theft”
  • massive hack.  “compromising the personal information of up to 500 million guests”
  • enforcement actions include:

Texas Attorney General Office | AG Pax­ton Begins Inves­ti­ga­tion Into Mar­riott Data Breach…

Lege TREND. State Cyber Law Enforcement and Protections. Anatomy of a Bill + Benefits to Cities.

HB 747 (2018 | OH) will estalish the Ohio Cyber Reserve to protect Ohioans from cyber terrorists.

Authors tout that the Reserve will also help cities with cyber inititatives.

How many aspects of cybersecurity will the reserve have its fingers in?

  • election security
  • local governments
  • critical infrastructure
  • businesses

Like the national guard, the reserve will act by Governor action.

Fox 8 | Ohio House passes bill to establish cybersecurity team

Government Technology | Ohio House Passes…

Lege TREND. Define Cyber Events like Hurricanes or Terrorism. Read the bill.

The Nevada Legislature will consider SB69 (2019 | NV) which is:

  • backed by the Division of Public Safety’s Division of Emergency Management
  • defines significant cyber events like invasions, disasters and riots
  • require schools, cities, counties and resorts to have emergency response plans
  • designates October as “Cybersecurity Awareness Month”
  • allows the governor to call on the national guard during a significant cyber event

Nevada Independent | New pre-filed bills take aim at education,…

Regulatory TREND. State Data Breach. State Pays for Lifetime Credit Monitoring. Ends Program within 6 years.

South Carolina Department of Revenue had a data breach impacting tax payers in 2012.

Then-Governor Nikki Haley promised those impacted life time credit mornitoring. 

The Legislature de-funded the program effective OCtober 31, 2018.

Government Technology | South Carolina Lawmakers Vote to End Post-Hack Credit Protections

 

Regulatory TREND. Medical Office Data Breach Settlement. State Attorney General Bans Business Ownership.

Where: New Jersey

Who: New Jersey Attorney General Gurbir Grewal

What: In a settlement of a data breach  of medical records, New Jersey Office of Attorney General banned those responsoible for the breech from owning or operating a business in New Jersey. 

Gov Info Security | Breach Settlement Has Unusual Penalty 

Refreshing our Recollection | 5 States. 5 Data Protection Bills. Health Care. Retailers. Notifications.

The Hill | States are leading…

Legal TREND. State Attorney General Recovers $6 M for state from Data Breach. WHO. WHAT. WHERE.

WHO has to pay $5.79 Million? Uber

WHAT is the $5.79 million settlement for?

  • a breach exposed personal information, including drivers licenses for 13,000 uber drivers
  • the company waited roughly 372 days to provide notice
  • failed to notify the state attorney general within the then required 45 days
  • $170 will be awarded to each driver

WHERE: Washington State

Washington State Attorney General Office | AG DATA BREACH REPORT FINDS 3.4 MILLION WASHINGTONIANS’ PRIVACY COMPROMISED BY DATA BREACHES