- data breach defined in new Orgegon law as:
- “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
- personal information that triggers the notification statute
- Social Security number;
- Driver license number or state identification card number issued by the Department of Transportation;
- Passport number or other United States issued identification number;…
Category Archives: student data privacy
INTERIM. 8 Elements of Data Security Laws & Regulations.
- Data Breach Definition.
- What data was breached?
- The level of knowledge the data holder must have of the breach before notification is triggered. Did they know? Is it reasonable that this data was breached?
- How to treat good faith access to data by an unauthorized employee
- How to treat the breach of account creditial information.
- user name, passwords, and security questions
- Timing.
- When must notification be given?
- How to treat data processors, people who hold the data but…
Library Data. Do Cities Protect it? Do Universities? 3 Points from the Pro-Delete User Records Side.
- The City University of new York began purging data because it believes libraries should only keep information users want
- American Library Association doesn’t believe you are what you read and opposes law enforcement use of library records.
- The Library Freedom Project supports protecting web searches on public computers, encouraging libraries to operte exit nodes and Tor, a difficult to trace web browser
The Guardian | You are not what you read: librarians purge user data to protect…
Hacking Mother Lode at the U.S. Department of Education. 5 Points to Know First. Education Contractors Be Aware.
- Treasure Trove of Data. House Oversight Committee Chairman Jason Chaffetz (R-Utah) is warning that a hack on the Department of Education would make the OPM data breach look like child’s play
- 1/2 of all U.S. government records are at the U.S. Department of Education
- Bad Inspector General Report. Deficiencies in security at Department of Education were called out by a November Inspector General report
- An F In Security. The agency also got an F in implementing security requirements…
INTERIM Lege Trend: Education Contractors Contracting Changes for Data Security
California revamped its data security statutes for education last year. California Education Code Section 49073.1 requires education contractors to:
• a statement that pupil records continue to be the property of and under the control of the local educational agency;
• a description of the means by which pupils may retain possession and control of their own pupil-generated content, if applicable, including options by which a pupil may transfer pupil-generated content to a personal…
INTERIM Lege Trend: State Proposes 6 Data Security Standards for Businesses.
New York Legislature, at the behest of its Attorney General, is strengthening its data security laws.
Assembly Bill 6866 adds new data to protection requirements and increases penalties.
This bill creates these standards that establish compliance with the law for businesses:
- a business that protects data more than the law requires
- a business that complies with Gramm-Leach-Bliley Act
- a business that meets international standards for information security
- a business that complies with…
INTERIM Lege Trend: State Data Security Laws. Upstate Ups the Ante on Health Care & Biometric Data. More fines for More companies.
New York Legislature is considering stronger data security laws which would:
- increase penalties against companies from $150,000 to $1,000,000
- in addition to current required protected information of Social Security, driver’s license and credit card numbers, this bill would require protection of biometrics like fingerprints
- user names, email addresses, securty questions and answers
- health information protected under HIPPA
- establishes reasonable safeguards for business
- establishes…
INTERIM: Data Breach. Kid data and pictures hacked.
VTech, a manufacturer of electronic educational gadgets for kids, has been hacked.
Hackers took:
- headshots of kids & parents
- chat logs
- audio files of kids
- names of kids & parents
- email addresses
- home addresses
- birthdays
Remedies:
- A hacker contacted a tech company to expose VTECH’s unsecured data storage.
- VTECH took down their portals that allowed for data storage until a resolution can be reached.
Motherboard | Hacker Obtained Children’s Headshots and Chatlogs From Toymaker…
U.S.E.D. Inspector General. Education Data is Not Safe. Activists on the Scene.
When did the Inspector General testify that U.S. Department of Education data is not safe? While testifying at a November 17, 2015 hearing of the House Committee on Oversight and Government Reform
Why is federal education data vulnerable to hackers?
- lax controls over who can access student data
- outdated technology
- inadequate data security
What type of student data does USED keep?
- 139 million Social Security numbers
- sensitive financial aid borrower information about students and…
A State Auditor Looks into 5 School District Student Data Collection
The Missouri State Auditor is looking into data security, data breach, data retention policies in 5 school districts.
The review also included reviewing the state education agency data policies. The state agency will soon adopt policies related to data breaches.
MissouriNet | Missouri education department to change student data collection after audit