Category Archives: regulatory enforcement

3 Reasons Tech Companies Want a Data Security Bill Vetoed in the Cherokee Rose State

A group of tech companies, including:

  • Google
  • Microsoft
  • + 50 academics, researchers, cybersecurity experts and technologists

are asking Georgia Governor Deal to veto a bill that makes unauthorized cyber access a crime punishable with up to 1 year in jail because the bill will:

  • chill security research
  • harm the state’s cybersecurity industry
  • Why is that a big deal? Because the bill for the first time would “create new liabilities for security researchers who identify and disclose weaknesses…

+1 State Suing Over Equifax Breach. The Facts:

State: West Virginia

The lawsuit by the West Virginia Attorney General:  Violation of the the state’s Consumer Credit and Protection Act  

The potential penalty: $150,000 for each security breach and $5,000 for each violation of each of the 730,000 West Virginians affected by the Equifax breach

The statement from the WV Attorney General:

“Equifax’s failure to secure consumers’ personal information constitutes a shocking betrayal of public trust and an egregious violation of West Virginia…

Regulatory TREND. State Secretary of State Imposes Voting Machine Requirements in the Mountain Laurel Flower State

Pennsylvania Secretary of State imposed a 12/31/2019 deadline for:

  • each county in Pennsylvania
  • to order new voting machines
  • that keep a paper trail of each ballot

The total estimated cost for all counties: Between $95 million and $153 million

Penn Live | Pa. says counties must have new voting machines – with paper trails – for next presidential election

 

Lege TREND. Quick Read the The Customer Online Notification for Stopping Edge-provider Network Transgressions (CONSENT) Act.

The Customer Online Notification for Stopping Edge-provider Network Transgressions (CONSENT) Act. S2639 (2018) will:

  • require edge providers (Facebook and Google)
  • obtain opt-in consent from users before using, sharing  or selling their information
  • require reasonable data security practices from edge providers
  • require notifcation to users about all collection, use, and sharing of users’ personal information, and to inform users of a data breach
  • clarifies that enforcement authority trests…

What you Need to Know about Ransomeware Bills in the Apple Blossom State

State: Michigan

The 2 ransomware bills signed by Michigan’s Governor:

What problems was the Legislature trying address: 

  • Michigan had no recourse to charge cybercriminals that had ransomware on their computers that they hadn’t used  
  • In 2017 there were 1,300 reported cases of ransomware attacks in Michigan 

    • …

Editorial Prioritizes Cyber Security Over Border Security. 2 Key Supporter Arguments.

  •  Trump administration has elevated U.S. Cyber Command to a unified combatant command
  • The internet is a critically weak link for the U.S.’s military 
    • “Adm. Michael Rogers, the head of Cyber Command, recently told Congress he needs $647 million to build the cyber mission force and conduct cyber operations”

Richmond Times Dispatch | Editorial: Cyber security is far more critical than border security

3 Reasons 30+ State Attorneys General Opposition to Federal Data Breach Preemption.

32 Attorneys General oppose federal preemption of state data security laws because:

  • Reduces state enforcement by allowing entities to decide if a breach needs to be reported
  • Prevents proactive action by consumers in state law, which states currently have
  • Leaves a vacant enforcement loophole for breaches that impact fewer than 5000 

Pocono News | PA attorney general seeks stronger enforcement of data breach notification laws

Bi partisan Attorneys General Letter Opposing Federal Data Security…

4 Takeaways of the Stop Hacks and Improve Electronic Data Security (SHIELD) Act

State: New York

Stop Hacks and Improve Electronic Data Security Act: NY Senate Bill S6933A (2018)

What do I need to know to sound like I know about the SHIELD Act?

  • it covers both disclosure of hacks & securing information
  • for businesses it uses the increasingly common standard of :”“reasonable safe-guards to protect the security, confidentiality and integrity” of private information.”
  • The carrot: no new causes of action are created
  • The stick: violations fall under the Deceptive Trade…

Regulatory TREND. New Enforcement Agency for CyberSecurity. Copy it in your state elections & electricity.

The new cybersecurity office:  Justice Department’s Cyber-Digital Task Force

Cyber Digital Task Force Goals:

  • canvass the many ways that the Department is combatting the global cyber threat
  • identify how federal law enforcement can more effectively accomplish its mission

Task Force members:

  • CHAIR: senior Department official appointed by the Deputy Attorney General
  • Department’s Criminal Division
  • National Security Division
  • United States Attorney’s Office community
  • Office of Legal Policy
  • Off…

REGUALTORY TREND. More Transparency for Businesses on Data Security + Coming to a State Near You.

SEC adopted new rules this week to require greater disclosure of cybersecurity threats by businesses. 

What you need to know:

  • prohibits trading on insider cyber security knowledge
  • companies are urged to develop policies that allow them to quickly assess cybersecurity risks and decide when to tell the public
  • prohibits companies from using internal or law enforcement investigations as an excuse for not informing the public.

Tech Crunch | The SEC says companies must disclose more information…