Topics
Cybersecurity & Tech
Cybersecurity & Tech
Universities & Election Officials. Partnership for Election Security.
The University of Chicago is pairing their cybersecurity experts with local election officials to assist with cyber security issues surrounding the November election.
What is the Univeristy of Chicago’s program called? Election Cyber Surge & began with 50 volunteer experts who have been vetted
MSNBC | Volunteer hacker army boosts U.S. election cybersecurity
TikTok Fallout for Government Contracts?
Writing on the wall with the FCC calling for comment on security threats in the existing supply chain rulemaking.
Why should this matter? Data security standards will fall into place in state and local government contracts too.
COVID. E-commerce By the Numbers.
How e-commerce is fairing in 2020 for retailers overall:
- forecast to grow 18% to $709.8 billion this year
- anticipated to represent 14.5% of total retail sales this year
For Home Depot specifically:
- e-commerce is more than 14% of the approximately $38.1 billion of net sales
- up from about 9% compared to 2019
- Total sales growth in the quarter—23%—was the company’s strongest in nearly 20 years
What tech devices were quickly adopted:
- services to provide for on sight pick up
- converting stores or warehouses into distribution centers for ecommerce
- capacity for mobile apps and web based shopping tools
COVID Improved the Digital Divide
Examples of how the digital divide was closer to closed because of COVID:
- Seattle’s Digital Bridge pilot program connecting low-income residents with low-cost refurbished laptops
- Seattle partnered with Wave Broadband to offer low-income households free home Internet for 60 days
- Washington State created Wi-Fi hot spots across the state
- Chattanooga, TN & Hamilton County, TN announced a 10 year initiative to offer no-cost high-speed home Internet to the 28,500 children who receive free or reduced-price school lunches — about 60% of the county school system’s students
- Philadelphia is connecting 35,000 families with no-cost Internet from Comcast for the next two years
- San Antonio, TX pledged to invest more than $27 million to provide broadband access through private wireless networks using existing fiber infrastructure on traffic lights
Governing | Some Encouraging Steps on the Path to Digital Inclusion
Corporations: Legislation to Prohibit Corporate Use of Facial Recognition Software
The legislation: National Biometric Information Privacy Act of 2020
What would corporations be prohibited from doing?
- keeping or maintaining biometric, including facial recognition, information
- prohibiting profiting from biometric information
- permits corporations to collect & maintain the information with consent
How would it be enforced? By state Attorneys General & individuals could bring suit
Quasi Govermental Officials + Cyber Security Training
Does Texas require cyber security training for government officials? Generally yes.
Does this apply to appraisal review board members? No because there is no definition of elected official even though the act specifically mentions that it applies to Appraisal Review Boards
Do I need to know more? To get to this conclusion, it relied on an Opinion from 1984 which said the election code didn’t apply to appraisal review board members.
Why do we care? Appraisal Review Board members handle property tax information, appeals, commercial property tax documents, zombie or dark store tax issues. This is going to include a lot of financial information that hackers might like or use for hacking fun times.
How a State Insurance Regulator Responded to CyberSecurity Insurance Laws
What’s happening? Connecticut passed the Connecticut Insurance Data Security Law which was modeled on the National Association of Insurance Commissioners Model Cybersecurity Law.
In response to this, the state insurance regulator, issued this guidance:
- Information Security Program
Licensees must develop, implement, and maintain a comprehensive written information security program (ISP) that complies with the Act by October 1, 2020. The ISP must be based on a risk assessment and contain safeguards for the protection of both nonpublic information and the licensee’s information systems.
- Third-Party Service Providers
Covered licensees must exercise due diligence in selecting service providers and must, by October 1, 2021, require each service provider to implement appropriate administrative, technical, and physical measures to protect and secure the information systems and nonpublic information that is accessible to and held by the service provider.
- Annual Certification by Domestic Insurers
Annually, beginning February 15, 2021, non-exempt Connecticut domestic insurers must certify compliance with the Act.
- Cybersecurity Event Investigations
Licensees or an outside service provider must conduct a prompt investigation in accordance with the Act after learning of a “cybersecurity event,” which is defined as “an event resulting in any unauthorized access to, or disruption or misuse of, an information system or the nonpublic information stored thereon, except if: (A) The event involves the unauthorized acquisition of encrypted nonpublic information if the encryption process for such information or encryption key to such information is not acquired, released or used without authorization; or (B) the event involves access of nonpublic information by an unauthorized person and the licensee determines that such information has not been used or released and has been returned or destroyed.”
- Notification of a Cybersecurity Event
Licensees must provide notice of cybersecurity events to the Insurance Commissioner as promptly as possible, but in no event later than three business days after the date of the event when either (1) Connecticut is, in the case of an insurer, the state of domicile, in the case of a producer, the home state of the producer; or (2) the licensee reasonably believes that the event involves nonpublic information of 250 or more consumers residing in Connecticut and state or federal laws require notification to a government entity, or there is a reasonable likelihood of material harm to Connecticut consumers or the licensee’s normal operations.
- Notification to Consumers
Licensees must comply with Connecticut’s data breach notification law and also provide a copy of any required notice to the Insurance Commissioner.
- Notice Regarding Cybersecurity Events of Reinsurers
Licensees acting as an assuming insurer must notify affected ceding insurers and its domiciliary regulator of a cybersecurity event involving nonpublic information that is used by such assuming insurer or in its possession, custody or control when it is acting as an assuming insurer with no direct contractual relationship with affected consumers not later than 72 hours after the assuming insurer discovered that the cybersecurity event has occurred.
- Notice by Insurers to Producers of Record
If the cybersecurity event involves nonpublic information that is in the possession, custody or control of an licensee acting as an insurer or a third-party service provider for an insurer, the Act requires the insurer to notify the producer of record for any affected consumer residing in this state who accessed services through an independent insurance producer of the occurrence of such event not later than the time at which notice is provided to such consumer, provided the insurer has the current producer of record information for such individual consumer.
Hinshaw & Culbertson – Consumer Crossroads | Another Cybersecurity Wake Up Call: Connecticut Insurance Department Issues Guidance on Cyber Law Set to go Into Effect
COVID Legislation. Notifying Workers of Exposure.
The State: California
The Legislation: AB (2020 | CA)
Supporters: Unions
Opponents: Business Groups
What would the bill do?
- require public & private employers to notify an employee within 24 hours of exposure to COVID
- imposes a fine up to $10,000 for failing to provide notification
- failure to notify is a misdemeanor
What kind of notification is required? “make every reasonable effort necessary to notify workers verbally”
What provision is most controversial? The bill’s ‘name and shame’ provision that requires state agencies to post on their websites company-specific coronavirus exposure information
Governing | California Bill Would Notify Workers of COVID Exposure
1st State Adopts Google Apple COVID Tracing App
Virginia became the 1st state to implement a COVID tracing app from Apple and Google
What did the Governor clarify?
- “Now, I want you all to listen to this very closely. I want to be clear, this app, Covidwise, does not — I will repeat that — does not track or store your personal information. It does not track you at all,”
How does it work? A person who tests positive may opt to anonymously notify the app to notify people who have been in their proximity
What data is used for notification? Bluetooth which means that the app dfoesn’t know where you are it only knows that you have been within a certain distance of another bluetooth device.
AP | Virginia first to roll out pandemic app from Apple, Google
+1 City Adding Internet for All
Add New Orleans to the cities adding citywide internet access to help students.
Where will New Orleans offer internet to help students with online classes this fall?
- rec centers
- parks
How will citywide internet access work? it will piggyback off city-owned fiber-optic cables
Is there a win for the city in addition to providing internet access to the estimated 30% of students who do not have access?
Yes, the city can use the internet access for traffic patterns or to determine whether streets are flooded
Governing | New Orleans Will Pilot Citywide Internet Access Program
BLM. Tech Companies + Diversity & Inclusion In Vendors.
Which tech companies are joining forces to improve diversity & inclusion?
- SurveyMonkey
- 23andMe
- Age of Learning (creator of ABCmouse)
- Box
- Chime
- Eventbrite
- Genesys
- HeadspaceI
- Intuit
- Leaf Group
- PagerDuty
- Slack
- Tile
- Tinder
- Upwork
- Zoom
What are these companies looking for in their vendors?
- representation of women in employees, leadership team, and board of directors
- representation of racial minorities in employees, leadership team, and board of directors
- representation of LGBTQ individuals within a vendor’s employee base, leadership team, and board of directors
How will diversity & inclusion be measured? By simple survey
COVID. Local TREND. Guaranteed Internet Access for all Students.
The City: Philadelphia, PA
What is Philadelphia promising students? Every student will have internet access (tools to access digital learning)
What partnership is necessary to achieve this goal? A partnership between the city, district officials, and internet service providers
What are some considerations to make this a reality?
- opening parts of school buildings, as well as city recreation centers and libraries
- providing child care for families who need it
- Meals and mental health services will be available to all students
Philadelphia Inquirer via Governing | Philadelphia Promises Internet Access for All Students by Fall
BLM +1 City Prohibiting Facial Recognition Software
Add Portland, Maine to the list of governmental entities prohibiting the use of facial recognition software.
Will the city permit lawsuits against city employees who violate the prohibition? No
Portland Herald Press via Governing | Maine’s Biggest City Decides to Ban Facial Recognition Tech
COVID Cares Act + Broadband Expansion
What are the competing interests in Cares Act funding of broadband projects?
- CARES Act is short-term funding response to COVID
- Broadband expansion is a long-term planning
- CARES Act requires that broadband projects be operational by Dec 31st to be funded
Which states are in this quagmire? Vermont, Alabama, Iowa, and New Hampshire
AP | States eager to expand broadband, wary of CARES Act deadline
COVID Tech Changes to Stay in Courts
The Courts keeping technology it relied on during DOVID: Ohio Court System
Why do Ohio Courts want to keep the technology changes from COVID?
- Judges realized the courts were actually behind in terms of technology
- They see the potential for ease & efficiency in the technology
- Webinar parenting classes were successful
Akron Beacon Journal via Governing | Ohio Courts Technology Upgrades Will Stay Post-Pandemic
California’s Blockchain Working Group Report
Recommendations for blockchain state implementation:
At the Department of Motor Vehicle:
- digital wallet for individual identification
- building a common blockchain platform for tracking a vehicle’s lifecycle
- creating a fine-grained security structure for sharing driver records across states
At the Department of Food & Agriculture
- To trace the source of food-borne contamination by collecting and organizing data from growers, transporters, wholesalers and retailers to locate products in the distribution system to speed recall and consumer notification
Move the State Archives online.
Recommendations for Blockchain industry:
- Offer incentives to blockchain companies that have an environmental sustainability plan or impact statement
- Industry should help the state develop blockchain policies and standards
California’s Blockchain Working Group Report to the Legislature
Meet the Texas Blockchain Council
Who are members of Texas Blockchain Council?
Hedera Hasgraph
Unchained capital
Ripple
A Real blockchain solution
Crestline Solutions
Foley
Kilroy Blockchain
Arski Tech
Vertalo
Austin Blockchain Collective
Dallas Baptist University
Houston Blockchain Alliance
Hyland
Vercey
Trammell Venture Partners
Mercintelli Healthcare Solutions
Interaxis
McCullough Sudan
HoneyComb Digital Investments
The goal: For Texas to become the top jurisdictions for U.S.-based blockchain businesses and investments
@txblockchain1
Cointelegraph | US State of Texas Saddles Up to Become the Next Blockchain Capital
+1 Country Adopts Collectible Bitcoin nationally
The country: Lithuania in coordination with the Lithuanian Bank
The name of Lithuania’s bitcoin? LBCOIN
What will a national bitcoin effectively be like? A credit card but Baltic & new
The numbers:
- €19.18 present value
- 4,000 collectable Independence currencies made by Lithuania
- 24,000 gatherer tokens
COVID partnership. Universities and health officials.
What partnership has emerged between health officials and universities? Utilizing university students as contact tracers
Where is this coming to fruition? Marin County, California in partnership with Dominician University & utilizing a contact tracing course from Johns Hopkins Univeristy
Route 50 | A Government-University Partnership to Train Students as Contact Tracers
COVID. Public Education Data Security Scrutiny
Who knows when in person school starts, but let’s face it before COVID schools relied more on technology. Technology that regulators can protect and used by children who regulators can protect. It is a regulatory free for all.
Leave it to the federal government to get to work. Congress is considering:
- the National Cyber Director Act that creates the federal cybersecurity director to oversee cybersecurity regulations nationwide
- PROTECT Act that will develop the cybersecurity skills of students in elementary and secondary schools
Why does this sound familiar? InfoHive subscribers will recall our easily digestible summary of the the Cyberspace Solarium Commission recommendations, including Cybersecurity Lessons from the Pandemic, released in May.
EdWeek | Congress Heightens Emphasis on K-12 Cybersecurity During COVID-19
COVID Contact Tracing Privacy Concerns
- North Dakota’s COVID contact tracing app collected GPS data that was being sold to FourSquare
- Apple & Google contact tracing tech is relying on blue tooth technology and not GPS
- 71% of Americans have said that they would not use a contact-tracing app
- Kansas passed emergency legislation prohibiting contact tracing that uses cellphone location data to identify or track individuals
State Scoop | Privacy concerns have states taking it slow on contact tracing apps
Legislative TREND. Laws against weak passwords
Where: The UK
What? UK wants to reign in hacking, especially hacking of the internet of things, like your thermostat that could come with a preset password like hello, by prohibiting weak passwords.
Anatomy of North Carolina’s Data Security Bill
The North Carolina Legislation: HB 904 (2019-2020 | NC)
The goal: Protect the personally identifiable information of North Carolina residents- even if the business is located elsewhere
What requirements are on businesses? reasonable security procedures must be in place + 30 day notification requirements after discovery of a breech
This legislation also rolls in Equifax response legislation of free credit freezes & notification to all credit reporting agencies of freezes.
WRAL Tech Wire | States enacting protections against data breaches – here’s what NC is proposing
COVID Greets Emerging Technologies + New Regulations
The COVID reality has bestowed attention on these emerging technologies:
- thermal imaging is being bought by private industry & governments to measure temperatures
- social distance measuring tools, mostly from cellphone data
- delivery robots
- drones
Government Technology | Pandemic Acts as Trial Run for Many Emerging Technologies
Can a cryptocurrency transfer be traced?
When verified twitter accounts were held by hackers last week, questions emerged about crypto currency transactions. Here’s how our recollection was refreshed:
Crytocurrency transactions are irreversible
Cryptocurrency transactions are virtually untraceable
State Agency Innovation: a state grant portal
The state agency: California State Library
The grant portal: the California Grants Portal, more than 100 grants totaling more than $17 billion
What kind of information can be searched? applicant type, grant category, and timeframe for application deadlines
What grant categories are included? environment and water; disadvantaged communities; education; health and human services; housing, community, and economic development; libraries, parks, recreation and arts; disaster prevention and relief; and science, technology and research and development.
The legislation creating the grant portal: AB2252 (2018 | CA)
Government Technology | What’s New in Civic Tech: California Creates Grants Portal
BLM. Banning Facial Recognition Software in a Police Reform Bill.
Where: Massachusetts
The legislation: S2800 (2020 | MA)
How would the bill impact facial recognition and biometric software?
- Temporarily bans the state’s use of the software
- Prohibits a government agency, office, department, commission, bureau, agent or contractor from acquiring, possessing or accessing any form of biometric surveillance
- Creates a special commission to study the use of facial recognition by the Massachusetts Department of Transportation and law enforcement agencies
Government Technology | Massachusetts Police Reform Bill Could Ban Facial Recognition
Legislation to Exempt BitCoin from Ad Valorem Taxation
Where: Alabama
What: HB 177 (2020 | AL)
Include a constitutional amendment? Yes
Legislative TREND. Control Over Personal Data.
Which states have given residents control over the data collected about them? States that have adopted California’s Consumer Privacy Act
How can residents have control over their data under this legislation?
• Residents can know whether and why businesses collect and share your data.
• You can access your collected personal information.
• You can delete your collected data.
• You can opt out of the sale of your personal information.
• If you are under 16 years old, be explicitly protected from having businesses sell your information without your consent.
How do business websites comply with this?
- Pop up windows about the use of cookies with consent /opt out of tracking
- Access to an email contact that will help you exercise your rights
- Available downloadable form or a toll-free phone number to submit your privacy requests
- Responses within 10 days, & 45 days to complete your request
Which state agency has regulatory authority? The California Attorney General
San Francisco Chronicle | How to exercise your online privacy rights in California
BLM Data solution for pay and promotion disparities
Where: New Mexico
What: HB 15 (2020 | NM)
- Defines institutional racism
- Requires all state agencies to assess their anti-institutional racism policies in hiring, promotion, retention, pay equity, community engagement and workplace participation
- Requires the collection of data to track progress toward ending institutional racism
- Adopts statewide evaluation of race and gender gaps in hiring, promotion, retention, and pay and institute an action plan for rectifying inequities in hiring, promotion, retention, and pay
Anatomy of a Public Private Cyber Security Center
Who is proposing a public private cyber security center? U.S. Appropriation Committee wants to add one to the Cybersecurity and Infrastructure Security Agency budget
What would the partnership look like?
- $11.6 million funding to establish a new Joint Cyber Center for National Cyber Defense
- Establish a Joint Cyber Planning Cell to coordinate planning and readiness across government and industry
- Follows Cyberspace Solarium Commission recommendations
- (InfoHive subscribers can find a history of these recommendations summarized in quick bits in the InfoHive archive)
FCW | House’s DHS funding bill would create public-private cyber center
New Kid on the Block. Privacy Bee.
A new day. A new way to protect personal data. Meet Privacy Bee.
What does Privacy Bee do? “remove users’ data en masse from thousands of databases across the Internet”
What role do data scrubbing companies fill?
- the US has no strong national data protection laws
- the US is a developed country with no Data Protection Agency (most do)
ZDNet | Privacy Bee scrubs your personal data from companies to reduce your risk of identity theft
BLM Legislation. Legislative Caucus Opposition to Facial Recognition Software
Where: Michigan
The Caucus: Michigan Legislative Black Caucus
Where is the ban on facial recognition software being attached? A police reform bill
Why the opposition?
- data shows software misidentifies Blacks and POC
Detroit Free Press via Governing | Black Lawmakers Call for Ban of Police Facial Recognition
New Kid on the Block: PropTech
What are examples of prop tech?
- planning
- real-estate development companies improve labor efficiency & reduce overhead with digital platforms like LegalZoom, QuickBooks and Google Drive
- Citybldr to clarify land title issues
- Coda Compliance streamlines entitlement — the process of obtaining government permissions for a property’s specific use
- construction
- 3-D-printed prefab materials
- marketing
- Matterport cameras to offer virtual touring of units
- Latch smart door locks that allow self-guided in-home tours
- sale and rent of homes and commercial property
- for the management and maintenance of buildings
- digital dashboards to monitor and operate indoor utilities
Local government policy issues:
- is the data transparent?
- is the data tractable?
Governing | Why Local Governments Should Nurture the Growth of Proptech
Local Government Keeps Facial Recognition.
What local governmental entity has one of the longest running facial recognition software programs? Tampa Florida’s Pinella County
Has the software been used to identify protestors? No
What would cause the Sheriff to stop using the facial recognition software? Regulations
Tampa Bay Times via Governing | Tampa Has No Plans to Discontinue, Pause Facial Recognition
BLM Local TREND. Banning Predictive Policing.
First came local bans on facial recognition software.
Now, Santa Cruz, California is banning predictive policing.
What’s predictive policing? An algorithm that uses crime data to predict where crime is most likely to occur in the future
Arguments against the use of crime data for predictive policing:
- cements biased police practices
- disproportionately impact minority residents
- “put officers in conflict with communities” – Santa Cruz Police Chief
Santa Cruz Sentinel via Governing | Santa Cruz, Calif., Becomes First to Ban Predictive Policing
Anatomy of a Cybersecurity Bill for Autonomous Vehicles
The legislation: The Security and Privacy in Your Car S2182 (116th Congress)
What does the legislation require?
- Establish standards to guarantee cybersecurity in computerized vehicles
- Protect users’ privacy
- Establish a “cyber dashboard,” a rating system about a vehicle’s performance capabilities
- The Federal Highway Administration would develop a “cybersecurity tool,” to identify, detect, safeguard and respond to cybersecurity concerns
Transport Topics | Democratic Senators Raise Cybersecurity Concerns About Autonomous Vehicles
Legislative TREND. Mandating Encryption and Tech Companies
The legislative proposal: The Lawful Access to Encrypted Data Act
What would the U.S. Senate Judiciary Committee ask of Tech Companies? “end to “warrant-proof” encryption that’s disrupted criminal investigations”
What does this mean in practical terms? Requires tech companies to help law enforcement access encrypted data if their help would assist in carrying out a warrant
Is this the same as a backdoor into encrypted devices? Almost, but no, it is not the same
What else does the bill do? The Attorney General can create a competition for who can devise a way to access encrypted data while protecting privacy and security
CNET | Republicans push bill requiring tech companies to help access encrypted data
Legislative TREND. Banning TikTok
Where: New York
The legislation: So8600 (2020 | NY)
What limitations would be placed on TikTok? it could not be placed on any government owned device
Why ban Tiktok?
- data privacy concerns
- accusations it censors content critical of the Chinese government
Have there been other TikTok bans? Yes
- federal agencies including the State Department & Homeland Security
- The U.S. House passed an amendment to ban Tiktok
- A Republican U.S. Senator is also proposing legislation
Times union | Bill would ban TikTok from state-issued devices
Local Scooter Data = Federal Lawsuit. Who. What. Where. Why.
Who is suing over locally collected scooter data? ACLU
Where is this happening? Los Angeles
What data is in dispute? Data collected by Mobility Data Specification (MDS), developed by LADOT and a private-sector consultant that collects trip data
Why is this important to businesses & government?
- need clear data privacy rules. Privacy advocates want privacy protections and anonymized data
- need to document policy decisions tied to data collection. The lawsuit concerns whether there is a policy connection derived from the data collection
Governing | Los Angeles DOT in Federal Lawsuit over Scooter Data
BLM Legislation: Tracking Local Surveillance Methods
The Local Government: New York City
The legislation to shine light on surveillance methods: The POST Act
What steps would law enforcement have to take under the POST Act?
- Requires police to inventory & publicize all of the surveillance devices that they use
- Requires a “surveillance impact and use” policy, or privacy policy, that creates guidelines for data collection and protection
- Requires an annual audit by the Office of the NYPD Inspector General
Which cities are model cities for transparency & oversight? Oakland and Seattle
Government Tech | New Legislation Could Mean Oversight of NYPD Spy Tools
Tech Startup. Using Property Records to Find Unclaimed Tax Exemptions.
How does The Exemption Project identify un-utilized tax exemptions?
- Offers county governments an online portal and data service
- The data service identifies unqualified and unclaimed exemptions on tax rolls
- it’s like homestead exemption auditing
- By processing a county’s tax roll through more than 80 data sets that aren’t stuck at 1 single point in time
Why was the project created? 2 government data experts wanted to create a project that was socially responsible
Gov Tech Biz | Startup Aims to Modernize the Property Tax Exemption Audit
States Considering California Style Data Privacy Legislation
- Iowa SF 2351 (2020 | IA)
- Washington
- Arizona
- New Mexico
- Nebraska
- Minnesota
- Wisconsin
- Illinois
- South Carolina
- Mississippi
- Virginia
- Maryland
- Florida
- Pennsylvania
- New York
- New Jersey
- Rhode Island
- New Hampshire
- Hawaii
States that have enacted California style data privacy laws: California, Nevada, Maine
COVID Data Privacy Issues
Contact Tracing.
- Unpopular among Americans
- Concern from tech companies about implementation while protecting privacy
Governing | Contact Tracing Apps Aren’t Going to Solve the Pandemic
COVID testing and data privacy
- Community testing centers in Florida were collecting social security numbers at testing sites
- Testing labs have no healthcare experience, and thus, no experience with HIPPA
Governing | Florida Residents Worry COVID-19 Tests Risk Personal Data
BLM Legislation. Moratorium on Facial Recognition Software
Where: New Jersey
What legislation is New Jersey considering? A4211 (2020 | NJ)
What will A4211 do? Prohibit the use of biometric recognition software by law enforcement
Why? Biometric software (facial recognition software) has been pulled by developers for its potential to contribute to racial profiling
COVID Funds + Broadband Service. Anatomy of a Auction Program.
Who is awarding broadband funding? The FCC
How much funding will be awarded? $16 billion
When will the funds be available? The FCC will commence the auction on Oct. 29
Could broadband under this auction be delivered by satellite? Yes. “SpaceX is developing a low latency, broadband internet system using low Earth orbit satellites.”
Reuters | FCC awarding up to $16 billion to address U.S. areas lacking broadband service
This week in Facial Recognition Software
Amazon halted sale of its facial recognition software to police forces for the next year.
CNET | Amazon announces one-year pause on police use of its facial recognition tech
Microsoft & IBM cease selling their facial recognition software
Massachusetts faces stronger calls for statewide prohibition of facial recognition software.
Governing | Call to Ban Mass. Facial Recognition Grows Amid Protests
Key Legislation to Bring BroadBand to Rural Areas
Where: Mississippi
What legislation has closed the internet divide and brought broadband to rural areas? Mississippi Broadband Enabling Act, HB 366 (2019 | MS), allowing electric cooperatives to offer broadband service
How can Electric Co-ops offer broadband?
- by establishing, acquiring and wholly or partially owning 1+ broadband affiliates
- co-ops can create a separate entity that provides and sells broadband service
What gap in service is being filled? traditional internet providers aren’t providing accessible service in rural areas
Governing | Mississippi’s ‘Broadband Revolution’ Picks Up Speed
Paper Ballots + Electronic Voting = Election Security?
Say you’re a state that replaced its former electronic voting system with electronic voting systems that also produce a paper ballot.
What 2 data security issues still exist?
- The electronic voting systems could still be connected to the internet (hackable)
- The paper ballot requires the voter to check that their votes are correctly recorded. Will voters do that? Would you do that?
Governing | Georgia Bolsters Election Security with Upgraded Technology
Lege TREND. Protecting Seniors from COVID Scams
The legislation: Protecting Seniors from Emergency Scams Act S 3824 (116th Congress)
What does S3824 require to protect seniors from COVID scams?
- FTC will track senior scams & list them on their website
- FTC will provide seniors guidance on avoiding scams
Supporters of this legislation: AARP, the Elder Justice Coalition, the American Society on Aging, and the National Adult Protective Services Association
The Hill | Senators introduce bill to protect seniors from coronavirus scams
COVID Era Hacking of Water Facility
Where: Israel
Which parts of Israeli water facilities were hacked? water pumping stations and treatment plants
What portion of these plants were targeted? control systems
What did the head of Israel’s National Cyber Directorate say? “The coronavirus pandemic has reaffirmed that hackers are unwilling to refrain from attacking critical infrastructure.”
Cyberscoop | Israeli official confirms attempted cyberattack on water systems
New Tech. Face Blurring Software Goes Mainstream.
Which company is offering face blurring services? Signal, an encrypted messaging app
Which photos can have faces blurred? any photos are shared on the app
What else is Signal Foundation doing? Seeking a manufacturer to make physical face coverings for demonstrators free of charge
Cyberscoop | Signal wants to protect protesters’ privacy with new face-blurring feature
Data Security Standards Amended for COVID
Who is amending their data security recommendations? Cyberspace Solarium Commission
What is the Cyberspace Solarium Commission? A bicameral, bipartisan organization with co-chairs, Senator Angus King (I-Maine) and Representative Mike Gallagher (R-Wisconsin). Its 14 Commissioners include 4 legislators, 4 senior executive agency leaders, and 6 nationally recognized experts from outside of government
What are the new COVID recommendations ?
- Pass an IoT law: The law would subject IoT devices to “reasonable security measures” and compliant with basic security protocols
- Think about medical devices that can be hacked
- IoT= internet of things (connected devices from lamps to pace makers)
- Collaborate with trusted nonprofits that are capable of and flexible enough to disrupt cybercrime
- Establish the Social Media Data and Threat Analysis Center
- Increase nongovernmental ability to find and defense against foreign misinformation campaigns
CIO | Commission amends cyber recommendations to reflect COVID-19 vulnerabilities
Business TREND. Subscription Services.
Who is moving into subscription services? Tesla
How is Tesla moving into a subscription service?
- By adding software subscriptions to its app
- By moving autonomous driving to a subscription service
What do financial analysts think of subscription services?
- Tesla will be the only auto manufacturer fully monitoring its software
- The market has an appreciation for this emerging revenue stream
Electrek | Tesla going into software subscription service could become big business
Meet the New Kid on the Block: North Texas Innovation Alliance Consortium
Who are the 21 Founding Members of the North Texas Innovation Alliance Consortium?
Addison, Allen, Arlington, Coppell, Corinth, Dallas, Dallas County, Dallas Fort Worth International Airport, Dallas Innovation Alliance, Dallas Regional Chamber, Fort Worth Chamber of Commerce, Frisco, Garland, Irving, McKinney, McKinney Economic Development Corporation, North Texas Commission, North Texas Council of Governments (NCTCOG), Plano, Richardson, and the Texas Research Alliance.
What are its goals?
- Create the most connected, smart, and resilient region in the country
- Solve “pressing challenges to improve quality of life, inclusive economic development, and increase resource efficiency through the use of data, technology and community”
- Establish strategic advisory committees to tackle complex topics including data standards and privacy, cybersecurity, digital inclusion, financial models and procurement
Think Tank Policy Push State Laws to Limit Biometric Data
Where: Utah
The think tank: Libertas Institute
What does the Libertas Institute propose Utah Legislature pass?
- Create a new office of citizens’ privacy
- Led by the State Privacy Officer & a Personal-Privacy Oversight Committee
- Create standards for related laws, technology use and data security
- Inform citizens of their rights concerning their data
- Train government employees on best practices and civil liberty concerns
- Surveillance-reform legislation
Biometric Update.com | Anti-government nonprofit wants to rebalance biometrics law in Utah
3 Reasons Bitcoin Miners Heading to Oil Country
- The industry is expected to return to profitability in 2020
- Bitcoin miners can upload energy to the grid with bitcoin energy storage solutions
- They’re open to working with grid operators to switch off mining in peak times in exchange for lower rates
OilPrice.com | Why Bitcoin Miners Should Head To Oil Country
Data Security Risks + Chemical Plants
What: A newly released Government Office of Accountability report highlights the need for more cybersecurity at chemical plants
Why?
- outdated systems.
- There have been no upgrades to cybersecurity protocols in 10+ years
- no inspector oversight.
- There is no tracking of the cybersecurity knowledge of inspectors at chemical plants + training standards
- cyber integration.
- Better track facilities’ cyber integration levels
The Hill | Federal watchdog finds chemical facilities vulnerable to cyberattacks
Small Texas Town Welcomes Bitcoin Miners
Where: Rockdale, Texas
Why did Rockdale attract bitcoin miners? Rockdale was home to the country’s largest smelting operation, which has ceased its operations
What local governmental entities worked to recruit bitcoin miners? Rockdale Municipal Development District
Governing | A Small Town in Texas Turns to Bitcoin Mining to Survive
New COVID Tracing Tracker
Who developed this COVID tracing tracker? MIT
What is a Covid Tracing Tracker? “a database to capture details of every significant automated contact tracing effort around the world”
Why?
- No single, standard approach by developers and policymakers
- Radically different levels of surveillance and transparency
- No one was tracking all the methods
How many countries are using tracers? 23. You can see their methods here.
Texas Court System: Bonjour, Ransomware
The Texas Court sites impacted by a ransomware attack:
- Texas Supreme Court
- Texas appellate courts
- Office of Court Administration
When did the attack occur? May 8, 2020, during the overnight hours
What may have limited the attack? Disabling the branch network including websites and servers to prevent further harm
Was a ransom paid? No
CISO Mag | Texas Court Systems Affected by Ransomware Attack
More Data on COVID numbers legislative trend
Where: Massachusetts
The legislation: S2695 (2020 | MA)
What COVID data does the legislature want public?
- Daily data on resident and staff COVID-19 cases at state licensed facilities
- long-term care facilities
- skilled nursing facilities
- assisted living residences
- Daily reports on the number of cases and fatalities among inmates and staff at all correctional facilities
- staff cases would be listed by occupation to guide better training
- Daily number of people tested for the virus
- number who test positive within 24 hours
- including demographics: gender, race, place of residence, age, disability status, & primary language
+1 Local Ban on Facial Recognition Software
Where: Boston
Why is Boston City Council considering banning facial recognition software?
- Preemption. The State Legislature is considering a moratorium on facial recognition technology, biometric surveillance systems, including gait and voice recognition
- Polling. 8 of 10 people in the state support a moratorium
- Peer Pressure. Other cities in the state have passed bans
- Protect Rights. Civil liberties are preserved from a dystopian government + data indicates unequal impact of the software
MassLive via Governing | Boston Is Considering a Ban on Facial Recognition Technology
Lobby Hiring TREND. Cybersecurity + COVID
The increase in lobby spending by 12 large publicly traded cybersecurity firms:
- In 2019, spending more than tripled to $3.94 million
- In 2015 these firms spent $1.21 million
What COVID cyber security issues are on their radars:
- health data like temperatures collected by businesses
- health data collected by COVID tracking
- COVID relief funding
- electric grid security issues
- teleworking
- remote schooling
Wall Street Journal | Cybersecurity Lobbying Spending Mounts as Privacy, Security Laws Take Shape
COVID tracking. Legislating Privacy Policies.
Who: Congress
5 Key privacy elements:
- Transparency
- disclose to consumers at the point of collection how their data will be handled, to whom it will be transferred, and how long it will be retained
- Choice
- affirmative express consent
- Control
- over the collection and use of their personal data
- Data defined
- will include health, geolocation, and proximity data
- Hold businesses accountable if personal data is used to fight the COVID-19 pandemic
Engadget | Senate bill would set privacy requirements for COVID-19 tracking
The Verge | Senators’ plan for reining in contact tracing apps doesn’t make a lot of sense
COVID voting costs
To accommodate online voting, counties say the costs will be:
- $414 million for 5 states
- Georgia, Michigan, Missouri, Ohio, and Pennsylvania
- 10%-20% the amount of federal funds available in COVID stimulus to cover the local costs
- 50 new coronavirus cases were linked to voting in Wisconsin’s primary
What about state’s ability to match funds? Utah expects to draw down fewer federal dollars for elections because they don’t have 50% of the funds available needed
COVID remote working. More data security rules.
In response to July 1 enforcement of California’s novel data privacy rules, data privacy supporters say COVIDs work from home requires more data security protection.
In response to the July 1 enforcement of California’s novel data privacy rules, data privacy supporters say COVID requires more work from home data security protection.
People are more vulnerable to their data being used without their permission because:
- home internet connections are less secure
- financial transactions have moved online with more entities collecting financial information
- online socialization is moving private conversations online in recordable formats
There is also new data being collected by employers: health data related to COVID such as employee temperatures. Is this at a covered by the rules? What privacy protections are afforded to this data?
San Francisco Chronicle via Governing | Calif. Internet Privacy Deadline Complicated by Coronavirus
How COVID complicated State Data Security Rules
Where: California
How have California’s data security rules been complicated by COVID?
- Staffing. State orders to stay at home led to losses and layoffs leaving companies unable to comply
- No final rules. Have left small businesses unsure how to comply
- New health data. What do companies do with new employee data like when workers temperatures are recorded
San Francisco Chronicle via Governing | Calif. Internet Privacy Deadline Complicated by Coronavirus
COVID 3 Privacy Issues in Contact Tracing
Who is monitoring privacy issues? “Privacy Hawks” & Civil Liberties Groups
What top 3 issues are talked about?
- Will a person’s location be collected?
- Apple & Google apps will launch with bluetooth contact monitoring which does not collect location data
- Who will make contact to relay that a person has been in contact with a person positive for COVID?
- Favored are notifications by health agencies
- How willing are we to trust Tech Companies with this contact monitoring?
- Are there sufficient firewalls?
- Is there adequate encryption?
- Is there a mechanism to stop the app when contact monitoring is no longer necessary?
The Hill | Privacy hawks willing to see how new contact tracing project plays out
Economic Benefits of a Digitally Savvy Board
- 34% higher revenue growth
- Less than 1/4 of boards are digitally savvy
- More than 3 digitally savvy board members brings economic benefits
How does a company add digitally savvy board members?
- Use consistent terminology understood by all
- Treat digital strategies are business strategies
- Track company digital data (e.g. digital use, orders…)
- Talk about business digital achievements. Highlight it & highlight it again
- Coordinate work to draw broad board support for digital strategies
Local TREND. COVID Technology to Keep.
Innovation from local governments benefit a new normal?
- Electronic Signatures to reduce contracting times by days if not weeks
- Virtual Training for City Employees to allow employees to hit the ground running
- Courts Adopt Conference Calls to reduce courtroom time for conferences
- Electronic Bail Process speeds up the bail process and transfers documents electronically
Benefits to local government: Innovation reduces costs for local government.
Governing | Government’s Innovation Surge Shouldn’t End with the Pandemic
COVID: More Drone Uses by Law Enforcement
Most common drone use: Reinforce social distancing rules via loudspeakers and a recorded message. This method was first used by Spain and China.
Benefits of using drones for crowds/social distancing:
- drones can cover more ground
- drones have a greater vantage point over officers on the ground
- drones have an advantage getting to hard to reach areas
- can easily confirm whether a disturbance is occurring before sending officers
- can quickly clear a house before officers enter
What precautions are law enforcement following before using drones:
- drones are not recording video or sound
- drones are not being used for survelliance
Governing | Police Are Using Drones for Coronavirus Management
Business TREND. Right to Data Privacy + COVID Tracking
What companies are building COVID tracking? Apple together with Google
How will it work?
- via bluetooth
- Android and iOS phones will communicate & track when individuals pass within 6 feet of someone who tested positive
What privacy assurances are offered?
- “strong protections around user privacy”
- transparency and consent “are of utmost importance for the app
What legislative protections are data privacy supporters calling for?
- Create a right to digital self-defense
- Allow citizens to use anonymity, privacy, and cybersecurity tools to shield themselves
- Prevent widespread and relentless data collection by private and public actors
The Hill | A right to digital self-defense will prevent abuse of COVID-19 surveillance apps
3 Reasons Tech Group Call for more Cybersecurity Funding Courtesy of COVID.
Who are the Tech Groups:
- The Internet Association
- BSA, the Software Alliance
- CompTIA
- Cyber Threat Alliance
- Cybersecurity Coalition
- Global Cyber Alliance
- Alliance for Digital Innovation
- Information Technology Industry Council
What 5 Reasons do Tech Companies show that cybersecurity needs more government funding?
- chronic lack of workforce in state and local governments
- patchwork legacy systems
- under-sourced cybersecurity and IT services
- uneven federal assistance
- uptick in ransomware attacks
The Hill | Tech groups call on Congress to boost state funds for cybersecurity during pandemic
COVID related Malware & Phishing Scams by the numbers
Since April 1, 2020 Google found the following number of COVID malware & phishing scams:
- 18 million malware and phishing emails PER DAY related to the novel coronavirus
- + 240 million coronavirus-related daily spam messages
- 99.9% of spam, phishing, and malware is blocked by Google’s machine learning software
The Hill | Google reports 18M coronavirus-related malware and phishing emails being sent daily
COVID & 5G. Pros and Cons.
Supporting arguments for 5G expansion during COVID:
- 5G helps with working from home
- International Commission on Non-Ionizing Radiation Protection updated its standards to include that 5G poses no significant health risk
- COVID exposed education achievement gaps in low-income, rural and disadvantaged schools
Opposition arguments for 5G expansion during COVID:
- unknown adverse health effects like cancer and DNA damage
- A California petition has more than 3,700 signatures to stop the installation of 5G in schools
Sacramento Bee via Governing | Gov. Newsom Asked to Delay 5G Until Safety Is Tested
COVID Response. A State’s Reopening Plan with Surveillance
Where: Connecticut
What surveillance is proposed?
- medical surveillance proposed by a report by medical experts affiliated with the American Enterprise Institute
- + “voluntary” quarantines for those who test positive
- enforcement via mobile phone apps
- regional approach to reopening in coordination with New York, New Jersey, Massachusetts, Rhode Island, Delaware, and Pennsylvania
- contact tracing
What controls is the state looking at?
- leveling of the spread of the virus
- hospital capacity
How much spending for the state to do massive contact tracing?
- $44 million
- hiring 1,000 people to track the contacts of people who are infected
Hartford Courant via Governing | Lamont’s Plan to Reopen Economy: Testing and Tracking
COVID and Ransomware by the numbers
148% increase in ransomware during COVID
38% increase in cyberattacks against financial institutions (the largest hit to a industry)
70.9% of the attacks on financial services sector were from the Kryptik trojan
Cyber Crime Data. New Report. The COVID impact.
Who is the report from? Cyber Solarium Commission
Why is more cyber crime data necessary? to create better policies against cybercrime
What governmental entity should collect the cybercrime data? Congress should create a Bureau of Cyber Statistics within the Department of Commerce
How could this data help in COVID times? Better track cybercrime that some say is rising, including targeting of hospitals, testing labs, and a teleworking and vulnerable public.
COVID drone use: Informational & Temperature Testing.
Where: Daytona Beach, Florida
How are Daytona Beach Police utilizing drones?
- drones with speakers to remind people of distancing or curfews
- a drone with a FLIR (Forward-looking infrared) camera will monitor visitors and identify elevated body temperatures
Wicked Local Metro via Governing | Drones in Florida Remind Residents to Keep Their Social Distance
Local TREND. PROCUREMENT OPPORTUNITY. Local Governments Using Apps during COVID.
Where: Boston, Massachusetts
What Apps did Boston adopt to keep its citizens updated on COVID?
- A daily info graphic tracking COVID in the area
- COVID impact in Boston and the state
How did the apps come about? Using publicly available data from Centers for Disease Control and Prevention & the state’s Department of Public Health, the apps were built within a day
Other technology being used by Boston? text messaging to connect residents to up to date information, in multiple languages & up to date fact sheets and guides
Governing | Boston Mayor Keeps City Up to Date on Coronavirus with Tech
COVID To Bring More Tech Purchases by Government
Name an entity that has been slow to upgrade tech? Yes, government, like your parents is notoriously slow at adopting new technology
What is COVID doing to jumpstart more government tech investments? As government systems crash, the lag in technology upgrades by government is being exposed
What tech will be upgraded?
- mainframes
- proprietary software
- move to software that can scale to meet the demand
- email storage in the cloud
- moving call centers to VOIP so that call centers can be virtual
- hardware: laptops, tablets, headsets
- move away from paper transactions
Governing | Coronavirus Has Potential to Reshape Government Technology
Governing | Antiquated Computer System Hobbled by Flood of New Jobless Claims
Impact of COVID: More Personal Data in Government Hands.
How has data increased? White House has requested more data under the Stored Communications Act to track COVID
What regulatory/legislative issues are emerging?
- What limits are on the government on the backend to protect the data
- Can the government later sell the data?
- Can government compel companies to provide location data of their customers?
Is there funding involved? Yes, $500 million to the CDC for a coronavirus “surveillance and data collection system”
FedScoop | An unprecedented wave of personal data could be heading to federal agencies
GPS Tracking of College Athletes during COVID
Who: University of Alabama
What: Sent its football players Apple Watches to track locations during COVID
The justification: The Apple watches are resources to provide for the health and well-being of student-athletes during this crisis
USA Today | Alabama’s use of Apple watches to track football players sets off rules debate
Blockchain Investments in Nevada
When did Nevada first pass blockchain legislation? 2017
What type of investments in block chain have been made since 2017? $400 million
What applications of blockchain are included in the investments?
- financial transactions
- supply chain management
- Walmart rolled out a blockchain pilot to track food safety
- tracked food safety information in 3 seconds
- a pilot digital marriage certificate system using blockchain
- cost 30% less and processed with 24 hours
Lahontan Valley News | Blockchain investment growing in Nevada, but what is it?
Regulatory TREND + State Law: Sharing Data COVID 19 positive addresses
Where: Alabama
What: Alabama’s Department of Health is sharing the physical addresses of people who tested positive for COVID 19 with emergency responders
How does HIPPA calculate into this health information privacy issue? Alabama determined that public safety outweigh privacy concerns
Does Alabama have a law that also addresses this exception to health care information privacy? Yes, a state law permits the state to “notify a third party of the presence of a contagious disease in an individual where there is a foreseeable, real or probable risk of transmission of the disease.”
Have other states also released addresses of COVID positive individuals? Yes, Massachusetts
Alabama Media Group via Governing | Alabama Shares Addresses, Not Names, of COVID-19 Patients
Local TREND. Getting Cybersecurity help from the state CISO
Where: Michigan
How is Michigan’s CISO helping local governments with cyber security?
- a proactive step to build on the 2018 pilot that allowed local governments to treat the state CISO as the local government’s chief security officer
- works in tandem with the deployment of the Michigan Cyber Civilian Corps(often abbreviated as MiC3) to assist with recovery efforts after cyberattacks on local governments
- 2018 legislation created the Michigan Cyber Civilian Corp
- lessens the financial strain on local governments that can find cyber workforce & equipment costly
- offers monthly cyber education programs to local governments
Will local cybersecurity help the state too? Yes, a cybersecurity partnerships with local governments benefit the state.
State Tech | Michigan’s CISO as a Service Boosts Local Cybersecurity
Fintech and COVID stimulus funds
The association representing fintech interests: Innovative Lending Platform Association
How does fintech operating lending services in ways that differ from the traditional? underwrite loans using algorithms at speed and scale
How much COVID stimulus could be available for fintech startups? $450 billion in loans are set to be distributed through the Small Business Administration
Tech Crunch | Lending startups are angling for new business from the COVID-19 bailout
Business TREND. Tech to Slow COVID.
The company: Estimote
How can Estimote technology limit the spread of COVID? By monitoring the potential spread of the coronavirus from person-to-person
Why an Estimate device and why not just mobile phone or watch tracking? A dedicated wearable can help employers avoid doing something that may be seen as an invasive privacy issue
Tech Crunch | Estimote launches wearables for workplace-level contact tracing for COVID-19
Business TREND. Businesses Thriving in COVID.
A sampling of business booms in the time of COVID:
- Coursera, the Mountain View, Calif.-based online learning platform with university classes
- ZOOM, video conferencing
- Instacart has seen a 150 percent increase in demand
- a course from the Imperial College London on the science of COVID-19 has more than 66,000 students enrolled after launching less than two months ago
- Automation Anywhere, a San Jose-based leader in AI technology
- Safeway, the grocer, announced last week it wants to hire 2,000 workers
Who is hiring in droves:
- Grocery stores
- online delivery
- post office
The Mercury News via Governing | For Some Companies, Coronavirus Brought a Business Boom
Regulatory TREND. COVID-19 & Cryptocurrency
Which state regulator: New York’s department of financial services (NYDFS)
What is the regulator requiring of cryptocurrency companies?
- preparedness plans to manage the spread of the disease
- disclosure of preventive measures and the protection of employees
- evaluation of the potential increased risk of cyber-attacks and fraud by the epidemic
Covid-19 & Data Privacy Issues
Top 4 data privacy issues associated with the pandemic:
- Will surveillance & location tracking continue after the outbreak?
- Is the health tracking that occurred reversible?
- Was the location tracking anonymous?
- Was there consent for the location tracking?
EU Observer | Privacy issues arise as governments track virus
Covid-19 Opportunity to teach Data Security to Students at Home.
Who: “Cyber School,” by the Academy of Cybersecurity, operated voluntarily by cybersecurity experts
What: Daily live stream of coding and algorithms, online safety, ethical hacking and social engineering
Cyber Scoop | This team wants to teach your kids cybersecurity while they’re home from school
Which New York Data Security Law Could All States See in Legislation?
What did New York’s Shield Act, an amendment to the states data breach notification law, require that we may see replicated in mass?
requiring that state data security rules must be tailored to the size of the business
CSO | New York’s SHIELD Act could change companies’ security practices nationwide
Election Data Security in time of COVID-19
Where: Ohio
What election measures is OHIO considering for its now postponed primary election? Only mail in ballots
How many states allow elections to be conducted only by mail? 21
How many allow full statewide elections by mail? 4 — Colorado, Hawaii, Oregon and Washington
What is voter turn out in mail-in ballot states?
- Colorado 63%
- Oregon 61%
- Washington 58.9%
What’s Ohios voter turn out? 50.9%
Plain Dealer via Governing | Ohio Considers Vote-from-Home for Postponed Primary Election
TRENDING ISSUE: Government Access to Tech Company Data to Track COVID 19
What are tech companies saying and doing?
- Google: Issued statement it would limit government access to location data
- Facebook: CEO Zuckerberg: “I don’t think it would make sense to share people’s data if people haven’t opted in for that”
- Apple: Does not collect iPhone user location data
Politico | In another coronavirus-related security issue for tech giants
The Hill | Google to limit federal access to location data as it fights coronavirus
COVID 19 and Cyber Security
- Dark web ransomware sites offering coronavirus packages
- Trump Administration Relief plan includes the following data security funding:
- $21 million for Department of Energy cybersecurity
- $47 million for FEMA for data security + data networks
- $17 million for Interior Department for network upgrades
- $5.5 million for National Archives and Records Administration to provide electronic remote access and accelerate security upgrades
Morning Cybersecurity | Cybersecurity money part of emergency coronavirus request
Cannabis Companies & Data Security Laws.
Issues for Cannabis Companies:
- What customer and supply chain information are you retaining?
- Is that information protected?
- Does your company have a plan if there is a data breach or ransomware attack?
- Does your state have a track-and-trace requirement for cannabis businesses?
- How is notification of a breach impacted when a customer from State B, where cannabis is illegal, has its consumer information breached in State A where cannabis is legal, and notifies the attorney general in State B. What happens to customer B?
- Will cyber liability insurance policies be written for the industry?
JURIST | Cannabis Companies are Overlooking Data Security Laws and Regulations
Legislatures: Data Security Insurance Coverage for Contractors
Where: California
What: AB 2320 (2020 | CA)
Which contractors would be impacted?
- contractors that receive or are given access to records that contain personal information protected under the state’s Information Practices Act
What type of personal information is the state protecting?
- names
- social security numbers
- physical descriptions
- home addresses
- home telephone numbers
- education
- financial matters
- medical or employment history
Government Technology | California considers mandating cyberinsurance for contractors
Protecting Business from Litigation: Affirmative Defense
Where: Utah
What: HB 158 (2020 | UT) creates an affirmative defense from litigation for businesses that follow state law on maintaining cyber security programs
How does the state define the cyber security programs with which businesses will have to comply?
- conforms to an industry recognized cybersecurity framework
- example programs:
- NIST special publication 800-171;
- NIST special publications 800-53 and 800-53a;
- the Federal Risk and Authorization Management Program Security Assessment Framework;
- the Center for Internet Security Critical Security Controls for Effective Cyber Defense; or
- the International Organization for Standardization/International Electrotechnical Commission 27000 Family – Information security management systems;
- and if the protected personal information is regulated by a government, cybersecurity protection programs must comply with the law
Thank you for subscribing to our newsletter.
Great things are just around the corner!