Lege Trend. +1 State Adding More Stringent Notification & Mandating Identity Theft Services

State: Delaware

 What is HB 180 in Delaware trying to do?

  • Improve notification requirements
  • Require 1 year of identity theft mitigation services when Social Security numbers are breached
  • Require businesses to safeguard personal information
  • Require notice to Delawareans affected by a breach within 60 days of discovery
  • If more than 500 residents impacted, the Attorney General must be notified

If passed, Delaware would be state #2 to require ID theft services after a breach.

News.Delaware.Gov | Governor Carney and Legislators Announce Bill to Expand Cybersecurity Protections for Delawareans

Delaware HB 180 (2017) 

 

Lege Trend. Link Licensing to Data Security Standards.

Legislative body is located where? Australia

What triggers licensing issues when failing to meet data security standards? 

  • Licensing enforcement is triggered only for companies valued at greater than $3 million in revenue

The goal: Move data security to the forefront with business leadership

Intelligent Insurer | New data breach reporting legislation deemed cyber game changer in Australia

Advocacy Trend. Education Data Privacy Toolkits. Activate against Schools and Ed Tech Companies

The advocates:  Parent Coalition for Student Privacy and the Campaign for a Commercial-Free Childhood

The toolkit for parents to empower them on student data privacy: toolkit

What’s the target: data privacy policies of school districts and ed tech companies

Education Week | New Student Data Privacy Toolkit Encourages Parent Advocacy

+1 State. Creates Executive Level State Cybersecurity Officer

The State: Rhode Island

The New Executive Level Office in Rhode ISland:  state cybersecurity officer

The goal of the office:  developing and putting into place a comprehensive state cybersecuritystrategy

How did the state cybersecurity officer position emerge? It was a “key recommendation of the governor’s Cybersecurity Commission, established in 2015 with the aim to lay out plans to protect the state’s IT infrastructure as well as grow a thriving cybersecurity industry”

State Tech | Rhode Island Ups Cybersecurity With Creation of CSO Position

 

Lege Trend. Small Business Cyber Protection Bills. 3 Key Points.

the federal legislation: Making Available Information Now to Strengthen Trust and Resilience and Enhance Enterprise Technology (MAIN STREET) Cybersecurity Act

how it helps small businesses: Adds small businesses to the list of things that the National Institute of Standards and Technology must consider  when updating its voluntary guidance on how to guard against cyberattacks. 

the state commission recommendation: Missouri’s Cybersecurity Task Force recommended increased support for small businesses around cybersecurity threats

 

Financial Regulation News | Sen. McCaskill introduces bill to protect small businesses from cyber-attacks

 

Anatomy of a State Election Hack. 3 Key Points.

The state: Illinois

The election data target:  no specific data target, it was a broadly executed hack on the Illinois election system

The hack:  Retrieving voter information via voter identification number starting at “000000001 and incrementally adding one” digit

The Hill | Illinois voting records hack didn’t target specific records, says IT staff

Local Trend: City Writes Broadband Ordinance.4 Requirements on Cable Operators.

City: Seattle

Seattle’s Broadband Ordinance requires:

  • ​requires Cable Operators to obtain opt-in consent before sharing a customer’s web browsing history
  • Requires Cable Operators to obtain opt-in consent before they use customer web browsing history
  • The exception: unless it is necessary to render a service ordered by the customer or pursuant to a subpoena or valid court order authorizing disclosure, or to a governmental entity.
  • Cable operators must attest to compliance with this rule by September 30, 2017, and annually thereafter

 

Seattle.gov | Seattle issues rule to strengthen broadband privacy for consumers