InfoHive – Data Security – Page 107

Talking Points. Model Data Security Legislation for Insurance Companies

Which states have adopted this model data security code?

Michigan
Ohio
Mississippi
Alabama
South Carolina
Delaware
Connecticut
New Hampshire

What does the model legislation do?

applies to insurers and other entities licensed by the department of insurance
requires the development, implementation and maintenance of an information security program
requires investigation of any cybersecurity events
requires notification to the state insurance commissioner of data breaches

The NAIC Insurance Data Security Model Law

Governor Proposes Data Security Rules for Insurance Companies

Where:

Minnesota

Why did the Governor propose 2020 legislation to add data security requirements for insurance companies?

“Minnesota Blue Cross Blue Shield allowed hundreds of thousands of serious cybersecurity vulnerabilities to collect on its computer systems over a period of years.”

What are announced pieces of the legislation?

adopt national standards for data security at insurance companies
- will follow Michigan and Ohio’s lead to adopt the model law was drafted in 2017 by the National Association of Insurance Commissioners
apply to all insurance companies, not just health care
state Commerce Department would have investigative & enforcement powers

Star Tribune | New data-privacy law proposed for Minnesota insurers

New Legislative & Regulatory Angle for CryptoCurrency

What’s the new cryptocurrency jargon? managed stablecoins

What’s an example of a managed stablecoins? Facebook’s Libra currency

Is there legislation floating around to look to? Yes, Congresswoman Sylvia Garcia has filed HR 5197 (116th Congress)

Roll Call | Rules, privacy issues loom for fintech industry in 2020

New Legislative & Regulatory Term for Data Security Laws and Rules.

Data Cooperative.

What is a data cooperative? An institution where individuals pool data for safekeeping and for use under certain terms.

Who is bringing this to our attention? MIT Sloan School of Business & ties to a push to permit credit unions to be holders of personal data and use under certain, agreed to, terms

MIT Sloan School | Data Cooperative

Data Security + Right to Repair Automobiles. New Coalition backed by Manufacturers.

Who: Coalition for Safe and Secure Data

Who are the members of Coalition for Safe and Secure Data?

Alliance of Automobile Manufacturers
Global Automakers Association
Computing Technology Industry Association

What concerns are they raising?

Right to Repair laws, like in Massachusetts
Exposes vehicle and driver data to security breaches

Collision Week | Vehicle Manufacturer Backed Coalition Raises Data Security Concerns with Massachusetts Right to Repair Proposals

Local TREND. Local Permits for New Tech Testing.

Where: San Francisco

How will San Francisco permit new tech testing:

The Office of Emerging Technology will issue permits
Permits will be issued if the Office declares the tech in question a “net public good.”
It will apply to any testing that occurs above or below city property or on public right-of-ways

What are industry stakeholders saying?

Vice president of public policy at Postmates, a member of the work group that crafted the legislation, said at a public hearing last month that the days of public-private head-butting are over.
“This is an era in which government needs to build empathy for technology, and technology companies must build more empathy for government,” he said.

AP | Streets of San Francisco no longer a free-for-all, city reins in tech testing ideas on public

New regulatory forefront for Tech Companies

What is the new regulatory landscape? encryption regulation

How did this start as a topic du jour? US Senators told tech giants, Apple and Google, that they either figure out how to handle court orders for data or lawmakers will do it for them

CNBC | Senators threaten to regulate encryption if tech companies won’t do it themselves

+1 airport bans facial recognition software

Where: Seattle, WA

What entity banned the use of facial recognition software? Port of Seattle Commission

What would be required to lift the ban? When the commission adopts “tangible, enforceable” policies to govern the use of facial recognition software

How does this impact corporate operations of airlines? Stops Delta from rolling out facial-recognition cameras at its Sea-Tac boarding gates

Does it stop federal agency use of facial recognition software? No, Custom and Border Protection can install facial-recognition cameras at a new facility to process arriving international travelers

Seattle Times | Seattle Airport Wrestles with Government over Facial Recognition

+1 Governor Executive Order Cybersecurity Committee

Who: Arkansas Governor Asa Hutchinson

What: Creates the Computer Science and Cybersecurity Task Force

Who will serve on the Task Force?

state agency executives
researchers from state research institutes
private vendors
businesses

What are the goals of the Task Force?

Careers. examine industry pathways into IT and cybersecurity
Education. post-secondary alignment strategies and goals, data science and cybersecurity in curricula, and work-based learning opportunities for students

Office of the Governor of Arkansas | EO 19-17

Government Technology | Arkansas Hopes Cybersecurity Task Force Increases Awareness