Regulatory TREND. Higher State Regulations for Credit Reporting Agencies. 8 states.

  • NY rules will require credit reporting agencies to comply with the state’s Department of Financial Services cybersecurity standards
  • An agreement between Equifax & 8 State Financial regulators will allow the states to:
    • impose punitive damages against Equifax
    • conduct annual  security audits 
    • develop written data protection policies and guides
    • monitor outside technology vendors
    • improve software patch management controls
  • The states:
    • Alabama
    • California
    • Georgia
    • Maine
    • Massachusett…

4th Largest Data Breach Fine Lands in Texas Healthcare Community

The data breaches: Data Breaches in 2012 and 2013 at M.D. Anderson in Houston

The regulatory agency issuing the fine: U.S. Department of Health and Human Services via the Office of Civil Rights

The Fine: $4.3 million

Houston Chronicle  | MD Anderson to pay $4.3 million penalty for data breach

“MD Anderson hit with $4.3M privacy fine.” POLITICO 

 

Lege TREND. How big are data security fines getting in legislation? 50x increases

Arizona’s recently passed,   HB 2154 (AZ | 2018)        , data breach reform bill increased data breach fines from $10,000 to $500,000 per breach.

The intent: the stick for the carrot of notifying consumers quickly

State Scoop | Arizona gets tough on businesses with new data breach reporting law 

1st State. Data Broker Regulation Bill. 4 Takeaways + 4 Talking Points + 4 Stakeholders

Vermont’s H.764 (2017-2018 | VT)  creates the first data broker regulations that will:

  • eliminates costs on credit freezes & thaws
  • establishes a registry and security standards for 3rd party ‘data broker’ industry
  • clarifies data security requirements for commercial entities
  • criminalizes acquiring data for fraudulent purposes, including harassment & discrimination

 

Talking Points for H764 which will give Vermont residents:

  • greater privacy
  • saves them money
  • gives them information and tools…

5 Points. Texas Cyber Security Experts Tell Texas What to Do.

Which Texas cybersecurity experts signed this letter to the Texas Secretary of State?

  • Scott Aaronson, Professor, University of Texas at Austin
  • Chris Bronk, Assistant Professor, University of Houston
  • Alvaro Cardenas, Assistant Professor, University of Texas at Dallas
  • Guofei Gu, Associate Professor, Texas A&M
  • Murat Kantarcioglu, Professor, University of Texas at Dallas
  • Jiang Ming, Assistant Professor, University of Texas at Arlington
  • Dan S. Wallach, Professor, Rice University
  • Brent…

The German Response to Protecting Critical Infrastructure from Hackers

Who is offering the suggested solution to combat hackers? The head of Germany’s domestic intelligence service

What is the proposed solution to combat hackers of Germany’s critical infrastructure? to plant malware that gets triggered when the critical infrastructure is hacked.

What does that mean in non-tech term? Fight back by hacking back. 

dw.com | German intelligence head warns of cyber attacks on critical infrastructure

 

3 Reasons for Veto of Data Security Bill that Tech Companies Opposed. 4 Steps to a Successful Bill in Veto Statement.

Georgia Governor Deal vetoed  SB315 (2018 | GA)  because:

  • the bill could undermined national security
  •  harmed private businesses’ efforts to stop hackers
  • Georgia needs more discussion on this bill

A future data security bill should:

  • develop a comprehensive policy
  • promoting national security
  • protecting online information
  • continuing to advance Georgia’s position as a leader in the technology industry

Veto Statement on SB 315 May 8, 2018 Georgia Governor Deal

Politically Georgia | Computer…