Lege TREND. Data Miner Regulations. Legislation proposal.

How a state can legislatively protect its residents from data miners:

  • apply laws not only to 3rd party data miners but also 1st party data miners that do have a direct relationship with consumers such as:
    • retailers
    • social media companies

Also, what is a data miner? an entity or person that collects and sells personal information from consumers with whom the broker has no direct relationship

 

Electronic Fronteir Foundation | Vermont’s New Data Privacy Law

Lege Trend. Legislation to Regulate Data BROKERS. 5 Point Legislative Plan.

States can enacted legislation to address Data Broikers by:

  • impose a fiduciary duty towards the consumers whose data they harvest and monetize
  • establish a government office to assist the victims of data breaches
  • compensation for their financial & non-financial injuries 
  • require disclosures by data brokers like:
    •  consumer’s “right to know” what personal information a data broker has gathered
    •  how the broker obtained it
    • to whom they sold it
  •  require consumer consent for data…

Fresh Regulatory & Legislative Issue: Cybersecurity & Aerospace

Congress, and thus soon the states, will openly consider regulatory and legislative measures for cybersecurity in aerospace including:

  • aerospace equipment
  • airport cybersecurity
  • connected devices

Why should I care about this for my clients?  Atlanta’s airport 2017 ransomware attack costs  may be upward of $40 million in direct costs and loss of productivity

House Committee on Homeland Security | UNDERSTANDING CYBERSECURITY THREATS TO AMERICA’S AVIATION SECTOR

Local TREND. Procurement Opportunity. Business Partner for Smart City Planning

 City: Kansas City, MO

What does its RFP want? 

  • Technology Partner to make it the smartest city in the country
  • The partnership will design & build:
    •  a “full integrated suite of sensors, networks and data and analytics platforms,”
    • built off its  current smart city network
    • 30-month construction period
    • develop a long-term strategic plan for the next 10 to 30 years

Gov Tech | Kansas City, Mo., Issues RFP for Smart City Partner 

Lege Trend. 4 Pieces of Personal Information a Lawmaker wants Protected from State Disclosure in the Bluebonnet State

State: Texas

The pieces of information that State Representative Giovanni Capriglione wants to prohibit from being sold by the State of Texas:

  • A person’s precise geographic location
  • A person’s internet browsing history
  • A person’s application usage history
  • Teh functional equivalent of this information

What information is the State of Texas selling?

  • Voting records
  • Driver’s records

Houston Chronicle | Facebook may not sell the data it collects, but the state of Texas sure does

Anatomy of Rail Data Safety Bills. 2 abridged bills in 3 easy steps.

Congress is considering STB Information and Security Act (H.R. 4921) and The FRA Safety Data Improvement Act (H.R. 4925) that will:

  • implement a plan to improve railway nformation security system
  • improve the management and collection of railroad safety data
  • identifying and mitigating rail safety risks

Railway Age | Rail data security bills head to Senate

Legal Trend. Ride Share + Data Breach = State Attorneys General File Suit . +1 State.

Pennsylvania Attorney General has filed suit against Uber for violating the state’s data breach notification laws.

What are the alleged violations? (Also Known As red flags for drafting data breach notification laws)

  • 13,500 Pennsylvanians were not notified in a reasonable time
  • each violation has a $1000 fine, for a total of $13.5 Million

What ogther circumstances did the Attorney General mention?

  • The company waited a year
  • intentionally hid the breach
  • contracted with hackers concerning the…

TRENDing. EV Station Data Security Vulnerability. Building Data Security into EV Charging Station Bills and Regulations.

Two vulnerailities with EV charging stations have been spotted by tech experts:

  • EV charnging stations are not required to transmit charging authorization information in an encrypted format
  • EV charging stations are not required to prohibit duplicates of the same numbered card

Tech Crunch | Electric car charge-station payment systems may lack basic security measures

FTC Study identifies 4 cybersecurity issues with EV, Self Driving Cars, Connected Cars

This month the Federal Trade Commission released a paper on cybersecurity issues with conencted cars.

4 Points from the FTC paper:

  • lots of information is gathered and shared, the information must be protected
  • can a vehicle’s safety controlled fuctions be segregated from other functions for public safety?
  • how to best update cars when a new vulnerability is discovered?
  • how to set a base line security standard for connected cars