Category Archives: regulatory trend

Cyber Crime Center. New State Agency in the Land of Silicon Valley.

The California Attorney General launched the California’s Cyber Crime Center (C4)

What’s the purpose of the state’s Cyber Crime Center? assist local law enforcement with investigations where digital expertise or assistance is required

What law enforcment collaboration will occur?  C4 will bring together:

  • California’s eCrime unit that investigates & prosecutes large-scale identity theft and technology crimes
  • California’s DOJ’s Office of Cyber Security experts
  • California’s Digital…

TREND. State Data Security Regulation. 3 Pieces Informed Intel. The Businesses That are Paying Attention.

What sparked the push for more and new state regulation on data security? New York’s Cybersecurity regulations

Which industries are taking note? Finance & Insurance

Do legal experts think New York’s regulations will be a model for other states?  Yes, yes and yes. 

Law.com | NY Cybersecurity Regs Could Spur Legal Work Nationwide

New York’s Cybersecurity regulations

Agency wants enforcement over communications common carriers in data security

Federal Trade Commission wants enforcement powers over communications common carriers for data security and data breach issues.

Currently the FTC enforcement powers have an exemption for communications common carriers.

Inside Cybersecurity | FTC commissioners call for data-breach legislation, repeal of ‘common carrier’ exemption

Shortcut to the 3 Criticisms of State Financial Cyber Security Regulation

Critics lambast New York’s proposed financial cyber security regulations as:

  • unlikely to improve security at financial institutions
  • financial institutions need a consolidation of cyber security regulations at all governmental levels
  • this is nothing more than more paperwork and overregulation

CNBC | Critics are skeptical of New York’s proposed financial cybersecurity rules

 

Your Informed Intel on the 14th of September 2016:

Reg. Trends. Gov. & Banking Regulator. State Banking Cyber…

Reg. Trends. Gov. & Banking Regulator. State Banking Cyber Security Requirements.

Which state? New York

Which state officials are proposing cyber security regulations for banks/financial institutions? Governor Cuomo & New York State top banking regulator.

What will be required of financial institutions under these state data security regulations?

  • Required to hire a chief information security officer
  • Must implement measures that detect and deter cyber intrusions
  • Must meet consumer protection standards, with companies able to assess their own needs and adopt…

3 Issues for Legislators and Regulators. Data Security Class Actions.

  • Cyber Insurance policies are still new and prone to litigation.
  • Companies should vet all public statements through lawyers
  • 2 federal Circuits have loosened up when a suit can continue. Its not as easy to get these cases kicked out of the courtroom.

Texas Lawyer | 3 Things GCs Should Know About Data Privacy Class Actions

TREND. State Agency Faults School District. No Data Security Policy.

The state: New York

The NY State Agency: New York Comptroller

The School District: Avon School District

The Avon School District’s data security failings:

  • not adopting policies for managing passwords
  • not backing up data
  • not protecting its employees’ and students’ personal, private and sensitive information
  • making the school district more vulnerable to data breach
  • providing too many employees access to financial information of the school district
  • for failing to implment the…

TREND. Executive Agency for Data Security. 9 Point Data Breach Reporting.

Bonjour to Canada’s Privacy Commission who oversees the data privacy of Canadians. 

The Privacy Commissioner recommended these changes to national data security laws for 2016:

Data security breach reporting should include:

  • The company’s name;
  • Contact information for someone who can answer questions on the company’s behalf;
  • Description of the breach, including:
    • The estimated number of users affected;
    • The personal information leaked;
    • The date of the breach, if known, or an…