The Agencies: FTC and NHTSA
The goal of rulemaking: fight cybersecurity and privacy threats from vehicles with systems that connect to the internet
Category Archives: regulatory trend
Lege Trend. There is No Place Like Home. There is No Place Like Home. Home has a new Executive Cybersecurity Agency.
State: Kansas
Details of the new Kansas agency on cybersecurity:
- centralizing cybersecurity operations of state government within a new Cabinet-level agency
- Kansas Information Technology Enterprise Agency.
- $10 M in annual funding just to combat hackers
- Exempts:
- Elected state officials
- Board of Regents’ at Kansas’ colleges and universities
- Will exempt pension systems based on federal investment standards
3 Goals of the Peach State's Cyber Innovation Center
Goals of Georgia’s Cyber Innovation Center:
- bring together government, universities and the private sector to develop and practice protocols that will mitigate attacks
- protect Georgia’s citizens, businesses and institutions
- give Georgia’s technology economy a boost
Georgia’s Investment in the Cyber Innovation Center:
- Millions in state funds
- 15,000 sq.ft. facility to be an incubator for startup cybersecurity companies
State Tech Magazine | Q&A: Georgia CIO Calvin Rhodes on Launching a…
Public-Private Partnership to Improve State CyberSecurity Training. Improve Student Cybersecurity
The Public Private Partnership: Virginia and Amazon
The role of Amazon: to support scalable cloud infrastructure and collaborate on cybersecurity educational efforts
How far down the state employee food chain will education go? The partnership will also help educate teachers with cybersecurity courseware
Lege Trend: State Agency on CyberSecurity. +1 More Western State.
Add Nevada to the list of states moving to create an Office of Cyber Defense. Governor Sandoval proposes funding it with $3.5 million.
The Office of Syber Defense will be within the Nevada Department of Public Safety and will offer assistance to local government agencies and private industry.
Las Vegas Review Journal | Marijuana, cybersecurity among debates to happen in Nevada Legislature
2 Concerns. Local Governments Have about Federal Data Security Standards for Elections.
Local governments are concerned about federal DHS cybersecurity regulations for local elections, because those federal regulations may :
- Add an unnecessary layer of bureaucratic oversight
- Would centralize an inherently local — and decentralized — system
What did DHS do to trigger these concerns? Declared elections to be critical infrastructure, which triggers additional protections and resources from the federal government.
Governing | New Election Cyberprotections Cause Confusion and…
New Regulations. Medical Device Hacking.
What entity promulgated new medical device cybersecurity rule guidance? The FDA
What prompted the new guidance? Claims of heart device hacking
Policy Issues around medical device hacking:
- assess whether the risk of patient harm is sufficiently controlled or uncontrolled
- protection of PHI- protected health information- by devices
- comprehensive risk management programs
- NIST cybersecurity protocols should be the standard
State Financial Data Security Rule Proposal Revision. 6 Key Pieces of Intel.
The state upping the ante on data security rules for the finance industry: New York
The new New York rules announced December 28th will:
- Effective Date will be March 1, 2017 instead of January 1st
- Require annual reporting to the state about data security compliance
- Requires financial institutions to maintain comprehensive audit trails
- Mandatory reporting of any cybersecurity event within 72 hours
- Financial institutions must appoint a Chief Information Security Officer…
Legislating. Regulating. Information the Vehicles Store.
On the horizon is rulemaking to make cars talk to each other. Cars will transfer information about how the car is moving and where it is, that gives rise to these legislative and regulatory questions?
- Can the data stored or transmitted by cars be used in tort litigation?
- Can the data stored or transmitted by cars be used in any litigation?
- Do data breach standards apply of this information is hacked?
The future is here. U.S. Department of Transportation is proposing new rules to require…
3 Ways State Attorney Generals Play a Role in State Data Security Legislation
- 23 of the 47 states that have data breach laws require the state Attorney General to be notified
- State Attorney Generals litigate data breaches
- in Texas, the Attorney General reached a settlement with Paypal app, Venmo, for $175,000 requiring the company to “improve disclosures regarding security and privacy”
- many state Attorney Generals set policy like hio Attorney General who launched, CyberOhio
Lexology | McGuirre Woods | In Data Privacy, Don’t Forget the State Attorneys General