States have hard time hiring data security experts.

The National Association of State Chief Information Officers, an organization for states’ chief information technology officials, found states are plagued by problems with hiring cybersecurity experts.

Why? 

  • “Nearly 92 percent of states said salary and pay grades presented a challenge in attracting and keeping employees.
  • 86 percent of states said they’re having trouble recruiting people to fill vacant slots. Four years ago, only 55 percent of states reported having that problem.
  • 46 percent of states said that it takes three to five months to fill senior positions.”

Governing

The difference between data security & data privacy?

Data security:

  • “knowing where your data is located”
  •  ” who may access the data. “

Data privacy:

  • “predicated on data security”
  • “requires further understanding how personal data is being collected, processed (and by whom), and transferred,”
  • “and the consistency of these practices with applicable laws, regulations, and the reasonable expectations of the relevant consumers”

National Law Review

The 5 Federal Data Breach Bills Circling

  • Sen. Pat Leahy of his Consumer Privacy Protection Act
  • Reps. Randy Neugebauer and John Carney Bill
    • Counterpart to the Seante’s Carper-Blunt bill
    • holding merchants to similar standards to financial institutions.
    • Not well received by retailers and merchants 
  • Sen. Bill Nelson bill filed in January, but not moving
  • Senators Kirk and Gillibrand filed this week
  • A bill in the works by Sen. Warner

Politico

No Pre-emption in new Federal Data Security Bill

The first data security bill that moved in Congress this year would pre-empt state laws. Some say it would be more lax than the majority of state data security laws.

A new federal legislative proposal removes preemption. The Consumer Privacy Protection Act introduced by Senator Leahy would require companies to take more affirmative steps to protect consumer data.

Health IT Security

6 Data Security Recommendations from the CFOs

  • “Develop specific policies and procedures regarding the handling of proprietary or sensitive information.
  • Improve information security training.
  • Ensure only the minimum necessary access to the information.
  • Communicate and apply consistent sanctions for information privacy or security violations.
  • Monitor employee activity.
  • Ensure adequate oversight or governance of information security programs.” 

CFO Magazine

US Supreme Court Wades into Data Breach Lawsuits

The US Supreme COurt has accepted a case to determine standing in data breach cases. We all know data breach law suits flow freely after a data breach. The question among courts has been is the injury to the person suing- that the information is out in the black market for information or does some economic damage have to occur before the individual can seek a court remedy.

The case that will shed light on data breach standing is Spokeo, Inc. v. Robins.

Orrick

Lege Trend: Marketing Information is Protected Personal Information

Illinois Legislature is moving a data security bill that adds marketing information to protected information. Which means, if marketing information about a consumer is breached, notice will be required to the consumer.

Illinois Bill, SB1833,  was drafted by the Illinois Attorney General and “will require notification in the event of a breach of “information related to a consumer’s online browsing history, online search history, or purchasing history.”” 

Advertisers and Marketers are displeased.

SC Magazine for IT Security Professionals