Category Archives: regulatory trend

State Regulators Impose Data Security Rules on Utilities. 3 Key Pieces of Intel.

Where: Michigan

The regulators who want to impsoe data security standards on utilities: Michigan Public Service Commission

What data security requirements would be added to utlities?

  • require annual reporting that overivews:
    • utility cybersecurity programs
    • staffing numbers
    • describes employee training
    • explains cybersecurity threats that have been experienced

Washington Times | State wants rules to toughen utilities’ cybersecurity

Data Security Pops Up in Self Driving Car Regulations. The Key Intel:

What’s missing from self driving car regulations? Assurances that governmental agencies aren’t trying to gather data.

What type of data could be collected about a self driving car?

  • identifying information including:
    • names,
    • phone numbers
    • credit card info
    • usage data
    • real-time and historic geolocation data

The legislative/policy/regulatory buzz word? Privacy.

Tech Crunch | Lyft wants more explicit protection of consumer data from NHTSA on self-driving

TREND. Anatomy of A State Cyber Security Quick Reaction Force

Germany has created a mobile Quick Reaction Force to quickly address cyberthreats.

Which cyber threats will the Quick Reaction Force respond to? Cyber attacks on government agencies & critical infrastructure

Will there be cyber threat information sharing between business interests and the state? yes.

Why did they enact this Quick Reaction Force for cybersecurity? To protect Germany’s elections from Russian or Chinese hackers

DW.com | German cabinet approves cyber security…

TREND. New Rules on Data Privacy. +1 Federal Agency with cybersecurity rules. 4 Points to be Informed.

The agency with new data protection rules: The FCC

The new FCC rules will require broad band and wireless providers to:

  • offer 3 tiers of privacy protections: opt-in, opt-out, and inferred
  • opt-in will be the standard for this information held by providers:
    • sensitive personal data
    • financial data
    • location
    • social security numbers
    • health or medical information
    • internet browsing or app history
    • message content
    • data belonging to minors.
  • opt-out standard for non-sensitive data…

The State leading the Way in CyberSecurity Regulations for Financial Institutions:

New York.

The pinnacle of these regulation is New York Department of Financial Services rule, known as Cybersecurity Requirements for Financial Services Companies. 

The New York rules target financial services companies and their advisors. Lawyers call the NY rules “… a more comprehensive framework for cybersecurity than has been seen in any other U.S. jurisdiction.”

insurance news net | New York Jumps Ahead In Data Security Regs

Insurance. Data Security. Bill of Rights for Consumers.

To whom does the model insurance-cybersecurity law apply?  To anyone who holds a license, registration or is authorized by a state insurance agency

There’s a revision to the model law, what’s changed?

  • No preemption by the model law
  • No private causes of action. tort reformers rejoice. 
  • No contractual requirements for 3rd party vendors, but 3rd part vendors must be capable of protecting information
  • Stronger notification requirements that trigger notification within 3 days of…

The Top Lines. U.S. Chamber of Commerce on Cybersecurity.

The U.S. Chamber of Commerce penned a cybersecurity letter to President #45. The highlights:

  • Cybersecurity is the most urgent threat to our security
  • Keep the cybersecurity public-private partnership between business and government growing 
  • Too many overlapping regulations among all agencies. Harmonize regulations.
  • Foster information sharing ecosystem
  • Cybersecurity is international our laws and regulations should take that into consideration

U.S. Chamber| Dear 45: Let’s Make Strides…

Colonial State. Attorney General. Gets into middle of College Data Breach. 3 Things to Watch Out for 3rd party vendors.

The state: Vermont.

The players in this drama: Vermont College, the Vermont Attorney General, and the 3rd party software company whose product was breached

Why did the Attorney General get involved?

  • the 3rd party vendor software affects more than just the Vermont College
  • the 3rd party vendor software will affect Vermont’s businesses
  • its an outreach opportunity to educate people about Vermont’s data breach notification law

Vermonth Biz | Attorney general enters data security…