International CryptoCurrency Laws & Regulations Forthcoming

Who is calling for international rules for cryptocurrency?

deputy governor of the Banque De France, the central bank of France

Where were the remarks made?

Forum of Monetary and Financial Institutions 

Why now? Cryptocurrency isn’t that new? Facebook. Its proposed cryptocurrency “could become a threat to international stability due to its huge user base.”

IHODL | Deputy Governor of Bank of France: We Must Develop Standard Crypto Regulation

3 More Data Sets Covered by Data Breach Laws

Where: California

What: AB 1130 (2019 | CA)

Which new pieces of data are protected and trigger breach notifications?

  • passport information
  • taxpayer identification numbers
  • military identification numbers

Bloomberg Law | California Extends Data Breach Law to Passports, Biometric Data

Lake County News | Attorney General Becerra and Assemblymember Levine’s data breach notification bill signed into law

On Your RADAR: Facial Recognition Software Rules for Schools

What are the benefits of facial recognition software in schools?

  • SAFETY. Ability to identify who is in a school with proper permissions

What are the harms of facial recognition software?

  • WATCHING. Actively monitoring and watching students raises eyebrows to Dan Levy heights
  • UNRELIABLE. Facial recognition software is not reliable especially for people of color and women

What schools are in the spotlight for using facial recognition software?  Texas City High School, Putnam City Schools in Oklahoma,  West Platte, Missouri, Spring Hill Independent School District in East Texas

Are there schools prohibited from using facial recognition software? Yes, San Francisco, Oakland

Wired | The Delicate Ethics of Using Facial Recognition in Schools

3 Ways TX used disaster plan to counter ransomware

Who explained the situation? Texas CIO Todd Kimbriel

To whom was the situation explained? National Association of State Chief Information Officers annual conference in Nashville, Tennessee

How did the disaster plan work?

  • 1st city to detect something was wrong called its managed service provider in the early morning of Aug. 16. By 8:46 a.m.
  • Department of Information Resources had been alerted that several local governments around the state had been hit with ransomware
  • By noon, the state operations center in Austin was up and running
  • Coordinating several different agencies to begin responding to the attack

What agencies coordinated efforts?

  • DIR
  • Texas Department of Emergency Management
  • National Guard
  • Texas A&M University

What facilitated this coordination? 2017 legislation that expanded the Governor’s emergency declaration powers to cover cyber events

State Scoop | How Texas used its disaster playbook after a huge ransomware attack

RFRA Bills Meet Tech Companies

Where: Michigan

What’s RFRA? Religious Freedom Restoration Act

Why are new state bills being filed? To keep tech companies like Google and Facebook content neutral

What’s the actual issue? Whether tech companies should monitor fake news and hate speech

What’s the legislation in Michigan? HB 4801 (2019 | MI)

Governing | Michigan Bill Aims to Stop Facebook, Google From Blocking Speech

Data Sale Prohibition. First Responders.

Where: New York

The legislation: S4119 (2019 | NY) signed by Governor

Who can first responders sell patient information to under this bill?

  • health providers
  • the patient’s insurer
  • parties with appropriate legal authority

Who cannot buy 1st responder patient data under this bill?

  • advertisers
  • marketers
  • promoters
  • to any activity used to influence sales

Health IT Security | New York Law Bans First Responders from Selling Patient Data

5 GDPR Enforcement Issues for Governments

How do you make companies report breaches?

How to do you make companies comply with reporting deadlines?

How do you make companies comply with data security assessment requirements?

How do you get companies to conduct privacy impact assessments to understand cyber vulnerabilities?

How do governments manage fine penalty revenue?

CIO Dive | GDPR pains that won’t go away

Data Security Rulemaking Unintended Consequence

What is the unintended consequence? Public comments submitted by political operatives without permission or comments from a dead person

How many fake public comments are we talking about? The NY Attorney General estimates 9.6 million stolen identities submitted comments

Where is the image problem? The stolen identities have allegedly been traced to a political organization backed by the largest telecommunications companies

Politico via Buss Feed News | Political Operatives Are Faking Voter Outrage With Millions Of Made-Up Comments To Benefit The Rich And Powerful

Fiscal Impact of Data Breaches on Health Care Providers

Who gathered the data? American Medical Association, IBM, Ponemon Assoc., American Dental Assoc.

What does the data say?

  • 3 Alabama hospitals operating under emergency procedures since a cyberattack on Oct. 1
  • Healthcare has the highest cost per record hacked
  • More than $400 per consumer record cost to healthcare providers

Reasons healthcare data is sought by hackers?

  • sold for insurance-fraud purposes
  • used for extortion purposes against affected health organizations

Wall Street Journal | Smaller Medical Providers Get Burned by Ransomware