- NY rules will require credit reporting agencies to comply with the state’s Department of Financial Services cybersecurity standards
- An agreement between Equifax & 8 State Financial regulators will allow the states to:
- impose punitive damages against Equifax
- conduct annual security audits
- develop written data protection policies and guides
- monitor outside technology vendors
- improve software patch management controls
- The states:
- Alabama
- California
- Georgia
- Maine
- Massachusett…
Category Archives: regulatory enforcement
4th Largest Data Breach Fine Lands in Texas Healthcare Community
The data breaches: Data Breaches in 2012 and 2013 at M.D. Anderson in Houston
The regulatory agency issuing the fine: U.S. Department of Health and Human Services via the Office of Civil Rights
The Fine: $4.3 million
Houston Chronicle | MD Anderson to pay $4.3 million penalty for data breach
“MD Anderson hit with $4.3M privacy fine.” POLITICO
Lege TREND. How big are data security fines getting in legislation? 50x increases
Arizona’s recently passed, HB 2154 (AZ | 2018) , data breach reform bill increased data breach fines from $10,000 to $500,000 per breach.
The intent: the stick for the carrot of notifying consumers quickly
State Scoop | Arizona gets tough on businesses with new data breach reporting law
Legal TREND. Hacktivism in response to police shootings
- 19 year old hacktivist
- Nom de hack: Vigilence
- Faces 5 counts of computer crimes in Minnesota
- The hack attacked state computers
- The hack was in response to no conviction on charges for a police officer accused of shooting a civilian
The Register | ‘Vigilance’ hacker charged over Minnesota government attacks
1st State. Data Broker Regulation Bill. 4 Takeaways + 4 Talking Points + 4 Stakeholders
Vermont’s H.764 (2017-2018 | VT) creates the first data broker regulations that will:
- eliminates costs on credit freezes & thaws
- establishes a registry and security standards for 3rd party ‘data broker’ industry
- clarifies data security requirements for commercial entities
- criminalizes acquiring data for fraudulent purposes, including harassment & discrimination
Talking Points for H764 which will give Vermont residents:
- greater privacy
- saves them money
- gives them information and tools…
5 Points. Texas Cyber Security Experts Tell Texas What to Do.
Which Texas cybersecurity experts signed this letter to the Texas Secretary of State?
- Scott Aaronson, Professor, University of Texas at Austin
- Chris Bronk, Assistant Professor, University of Houston
- Alvaro Cardenas, Assistant Professor, University of Texas at Dallas
- Guofei Gu, Associate Professor, Texas A&M
- Murat Kantarcioglu, Professor, University of Texas at Dallas
- Jiang Ming, Assistant Professor, University of Texas at Arlington
- Dan S. Wallach, Professor, Rice University
- Brent…
The German Response to Protecting Critical Infrastructure from Hackers
Who is offering the suggested solution to combat hackers? The head of Germany’s domestic intelligence service
What is the proposed solution to combat hackers of Germany’s critical infrastructure? to plant malware that gets triggered when the critical infrastructure is hacked.
What does that mean in non-tech term? Fight back by hacking back.
dw.com | German intelligence head warns of cyber attacks on critical infrastructure
Lege TREND. Privacy Advocates from LEFT and RIGHT. What they want in legislation:
- No requirements for tech companies to build in backdoors
- The Secure Data Act
Cyber Crimes By the Numbers for 2017. New Report.
Cyber Crimes in the U.S. cost:
- reported losses exceeding $1.4 Billion (2017)
- total of 301,580 complaints (2017)
- In 2013, the losses were $781Million with 262,813 complaints
- Average of 800 complaints per day
- Victim losses are highest in TX. ($115.7Million) & CA ($214.2M)
3 Reasons for Veto of Data Security Bill that Tech Companies Opposed. 4 Steps to a Successful Bill in Veto Statement.
Georgia Governor Deal vetoed SB315 (2018 | GA) because:
- the bill could undermined national security
- harmed private businesses’ efforts to stop hackers
- Georgia needs more discussion on this bill
A future data security bill should:
- develop a comprehensive policy
- promoting national security
- protecting online information
- continuing to advance Georgia’s position as a leader in the technology industry