InfoHive – Data Security – Page 103

Lege TREND. Using Equifax Settlement Funds for Financial Literacy.

Where: New Jersey

What: S1196 (2020 | NJ)

How would S 1196 use Equifax settlement funds?

Establish financial empowerment centers pilot program
Oversight by Department of Community Affairs
Partnership with local officials and nonprofit
Offering forums, programs, & financial coaching to those in 3 economically vulnerable communities

NJ Spotlight | Bill Would Boost Financial Literacy for Some of State’s Poorest Citizens

By the Numbers. Campaigns Buying Internet User Data

The poll: Gallup in partnership with the John S. and James L. Knight Foundation

% who oppose internet companies sharing data with campaigns:

69% of Democrats
75 % of Republicans
72% of Independents

20% are ok with this data being shared with campaigns: gender, age, or zip code

7% support sharing any information with campaigns by internet companies

59% support these disclosures on internet political ads:

disclose who paid for the ad
how much it cost
whom the ad is aimed at

20% support NO online campaign ads, following the mode of operation adopted by Twitter

45% oppose internet campaign ads that misrepresent a candidate’s position.

The Hill | Most don’t want microtargeted political ads: Gallup

Lege TREND. Homeless Database

Where? California

Why? “Because you can’t manage what you don’t measure,” –Gov. Gavin Newsom

How? Two choices

Aggregate Data that is kept by local governments
Compile data from the 44 so-called continuums of care

What are the 44 so-called continuums of care? local agencies that administer federal homelessness programs that use the Homeless Management Information System

The Goal: Make the process of getting people off the streets more efficient

Los Angeles Times via Governing | Homeless Database Is Worthy Goal but Difficult to Achieve

Lege TREND. Limit Federal Access to State Databases.

Where: Maryland

What: SB 649 (2020 | MD) prevents federal access to Maryland’s DMV records

Why: To protect legitimate law enforcement work by the federal government in the state database, but disallow non-law enforcement work

Have other states done this? Yes, New York

Were there repercussions by the federal government? yes, short term blocking of New Yorkers from enrolling in Global Entry and other programs aimed at getting travelers through borders and airport lines more quickly

Governing | Maryland Lawmakers Want to Limit ICE Access to MVA Database

3 Takeaways. U.S.’s only Local Privacy Commission.

Where: Oakland, CA

What should I know about the Oakland’s Privacy Advisory Commission?

2016
its a citizen-led board
- Each member of the city council appoints a commissioner
the board can review any & all city policies and regulations through a privacy lens
original funding: DHS funding for a Domain Awareness Center

Takeaways:

Diverse memberships has benefited the commission.
Pushback is inevitable
- tech companies push back on constraints that will hamper innovation
- city staff push back on increased paperwork or other administrative burdens
Proactive solution. Cities tend to act reactively. The commission has moved the city to be proactive like new recommendations on privacy issues and licensing.

Governing | What Cities Can Learn from the Nation’s Only Privacy Commission

+1 State. Preempts Facial Recognition Software Use

Where: Washington State

What: SB 6280 (2020 | WA)

What does SB 6280 preempt? prohibits state & local government agencies from using facial recognition for ongoing surveillance

Exceptions: Search warrants & emergencies involving potential loss of life

Other requirements:

training for facial recognition operators
annual reporting on use of facial recognition software

Seattle Times via governing | Washington Anti Facial Recognition Bill Passes State Senate

New Regulations. Education Vendors.

Where: New York

What new requirements are being placed on education vendors?

Contracts with vendors who receive PII must state that the vendor will maintain all information in accordance with federal and state law and the school’s security and privacy policy.
Parent’s Bill of Rights in every contract with vendors who receive PII.
National Institute for Standards and Technology Cybersecurity Framework (“NIST CSF”) is the standard for data security and privacy.
July 1, 2020 deadline for all schools to adopt a data security and privacy policy
Online Privacy Policies. Schools must publish their data security and privacy policies on their websites.
Schools Must Train Staff. Schools must provide data privacy and security awareness training to officers and employees with access to PII.
Designate a Data Protection Officer (“DPO”) at each school to be responsible for the compliance program and to otherwise serve as a point of contact for the schools on data security and privacy matters.
Vendor Notification. Vendors that suffer a breach of PII must notify the affected schools within 7 calendar days
School Notification. schools must in turn notify within 10 calendar days of receipt of notification of a breach from the vendor & the schools must notify affected individuals without unreasonable delay but in no case later than sixty (60) days of discovery or receipt of breach notification from the vendor.

Jackson Lewis | New York Adopts New Data Security And Privacy Regulations For Schools And Their Vendors

+1 Country Regulatory Actions for Digital Currency

Where: Belgium

What did the Belgian financial institution of Belgium (FSMA) offer when asked to either support a prohibition or establishment of a national digital currency? FSMA recommended a national currency

Currency Market | Belgium establishes a regulatory framework for crypto-currencies

+1 Country CyrptoCurrency

Add Sweden to the list of countries pursuing a national crypto currency.

How will the e-Krona, cyrptocurrency pilot work?

users will be able to hold e-kronor in a digital wallet
send or receive payments
make deposits or withdrawals using their mobile phones
transactions will also be possible via wearables like smart watches, as well as bank cards

What is the country’s goal? create a longer-lasting electronic payment system that is safe and efficient

When did the country begin work on the e-Krona? 2017

Will Sweden’s national bank work with national banks in other countries? yes, the national banks of Britain, the Eurozone, Japan, and Switzerland

Micky | Sweden pilots central bank digital currency e-krona as cash declines

CryptoPotato | Sweden’s Central Bank To Begin Testing National Cryptocurrency