Regulatory TREND. State Agency Data Security Requirements for Student DATA. Civil Liability Education Vendors.

New York Department of Education is proposing new rules  that will:

  • Parent’s Bill of Rights applicable to 3rd party vendors and setting standards on disclosing student data
  • The National Institute for Standards and Technology Cybersecurity Framework (“NIST CSF”)
  • Annual training for school district employees
  • A Data Protection Officer in every school
  • Notice of a school data breach must be given to the Department of Education within 10 days
  • Civil Penalties that accrue per individual affected for 3rd party vendors.

National Law Review | NYS Education Department Proposes to Significantly Strengthen Data Security and Privacy Protocol 

3 Legislative Issues. Self Driving Car Data.

  • Privacy. Who owns the data. Who gave consent to collect the data.
  • Security. What data should be protected from transfer.
  • Public Safety. How can the data be used to protect the public and transportation systems in smart cities.

How can governments use data from self driving cars?

  • managing traffic
  • urban planning
  • allocating public funds 

phys.org | self-driving cars and geospatial data: Who holds the keys?

2019 Student Data Security State Standings. Legislative Trends.

What entity is ranking states on student data protection?  Parent Coalition for Student Privacy

Best State for student Data Protection? Colorado with a B

Worst states for student data protection? 11 way tie with Fs for Alabama, Alaska, Massachusetts, Minnesota, Montana, Mississippi, New Jersey, New Mexico, South Carolina, Vermont, Wisconsin

The populous states?

  • California C
  • New York B-
  • Illinois C+
  • Texas D+
  • Florida D+
  • Pennsylvania D-

Lingering Education Data Security Issue for all states: Teacher Data Protections

EdScoop | Controversial report shows many states fail on student data privacy

Regulatory TREND. Report on Election Security in the Keystone State. 5 Recommendations.

  • Use risk limiting audits for elections and voting practices
  • replace direct recording electronic systems with systems using voter-marked paper ballots 
  • No unfounded mandates for local election officials
  • train local and state election officials on cyber security
  • establish statewide cybersecurity practices

Blue Ribbon Commission on Pennsylvania Election Security (January 2019)

LEge TREND. Workforce Development. Cyber Security. Association Lobbying. What does it look like?

Let’s take a peak at what the National Assocaition fo Realtors spent on cyber security lobbying in 20198?

  • $19million in spending on the last quarter on 2018 on cyber security lobbying
  • Including a bill For Small Business Development Centers to offer cyber security training
  • And a bill that would  strengthen data breach notification

Politico | Morning Cyber Security

Legal TREND. Health Care Data Breach Leads to All Employers have Duty to Protect Employee Data

Pennsylvania Supreme Court rules that all employers must exercise reasonable care to protect worker data.

How did they get there? A health care provider employee data breach led to a lawsuit. Lower courts sided with the employer that there was no data security requirements for employee records. The PA Supreme Court disagreed. 

Pittsburg Post Gazette | PA Supreme Court rules UPMC — and all employers — must protect workers’ data. Doing so is harder

New Report. Key to State Data Security is Procurement.

Why is procurement key?

  • Procurement contracts can set the tone for state data security standards

  • Telecom infratructure is key to data security

  • States should offensively say what the data standards are, rather than what cannot be done

  • Private-public cooperation is the key for leading global solutions

  • Strengthen cyber security workforces

  • Contracted cloud solutions can fill in when funding does not exist for state data security experts

 

The Kosciuszko Institute| CYBERSEC 2018 RECOMMENDATIONS AND KEY TAKEAWAYS

Lege Trend. Data Broker Registries

Tim Cook (Apple) is recommending a Data Broker Registry.

What’s a data broker? they buy and sell data from third parties

So how would it work?

  • every consumer can opt into their data being collected or not
  • consumers would be able to remove their data from the registry
  • the FTC would house the registry and consumers could see what info is being collected and by whom

Why does this sound familiar? Because in 2018 informed:intel told you about the first in the nation data broker state law in VT, and we gave you the bill text to create one in your state

Wired | How Tim Cook’s Data Broker Registry Might Actually Work