Cybersecurity & Tech
The state: Oregon
Why is a state privacy office necessary?
A fragmented system relying on each agency to protect data separately falls short in protecting personal data
What does Oregon have in place? Enterprise Information Services, a statewide data and information systems agency
How many states have a single point in charge of protecting personal data? 15
Statesman Journal | Audit suggests state take this step to protect Oregonians’ personal information
The Police Force: City of Los Angeles
The position on facial recognition software:
The catalyst: Officers had used third party familial recognition software without permission
Los Angeles Times via Governing | Los Angeles Police Ban Use of Third-Party Facial Recognition
Facial Recognition Software is a hot topic for policy makers.
The EU has new rules that allow for the sale of software, like facial recognition software, but adds a lot of transparency requirements.
What new rules will apply in the EU?
MIT Technology Review | Europe is adopting stricter rules on surveillance tech
Who ranked Texas as reactionary on blockchain policy: The Brookings Institute
Who is talking about the ranking? The Texas Blockchain Council
Why did the Texas Blockchain Council form? “Texas is positioning itself to pick up the mantle of leadership in the emerging technology space”
Long term goals: “public-private partnerships that include research institutes, regulatory agencies, private companies, and economic development entities to incubate and develop a blockchain innovation ecosystem “
www.texasblockchaincouncil.com
Texas Blockchain Council Launches to Make Texas a Leader in Blockchain Innovation
High Speed Access for all: Canada’s Connectivity Strategy.
Cities are trying to tackle high crime areas by collecting data on the cars that enter certain high crime portions of their cities.
What do privacy advocates say?
The most recent city to dip its toe in license plate reader pool? Wichita KS
Wichita Eagle via Governing | Wichita to Take License Photos in High-Crime Neighborhoods
S4833 (116th Congress | Hassan & Cornyn) would give states access tot he National Guard to enforce cyber security laws.
Goldman Sachs estimates that by 2022 the global data industry will be worth more than $250 billion.
So what are investors looking for? How will legislation and regulation impact data security, advertisement, marketing and the requisite data.
Add in pop culture…. with the Netflix documentary The Social Dilemma that echoed the phrase– “if you’re not paying for the product, you are the product”.
Stockhead | Data security is about to be big business as legislative winds begin to shift
Who made the recommendations? Governor’s Broadband Development Council
Where do I read all their fancy words? 2020 Texas Report Governor’s Broadband Development Council
What are their recommendations?
Reform Austin | Governor’s Council: How More Texans Could Have Broadband Access
What’s coming our way? Crypto currency credit cards
How? ZenGo, a c crypto currency start up, is working with Visa to develop a non-custodial crypto payment card
How will the credit card work? It will be the first card tied to a self-hosted, on-chain, multi-currency wallet where funds are controlled by the user
56+% California voters approved new data privacy standards in the state including:
Champions of the proposition:
Desert Sun | Proposition 24: Californians approve more data privacy rules
The legislation: AB 1864 (2020 | CA)
The revamped state regulatory body: California Department of Financial Protection and Innovation
What powers will California have that it did not before? The power to enforce laws against unregulated industries
What does the regulator say about innovation and fintech? The agency will have the ability to “Spur innovation in financial services by clarifying regulatory expectations for emerging products and services.”
California Department of Financial Protection and Innovation (DFPI) | California Consumer Financial Protection Law
Who: Crypto Cars Online
Where: Dallas, Texas, Crypto Cars Online partnered with local dealerships
Which cryptocurrencies are accepted for the transaction? Bitcoin, Bitcoin Cash, Ethereum, Litecoin, and USD Coin
Does Crypto Cars finance cars with bitcoin? Yes
Crypto Cars Online | The First Crypto Currency Auto Finance Company in the U.S.
Wyoming has granted Avanti authority to operate as a bank.
What does this mean? Avanti can offer a United States dollar-backed stablecoin, digital assets custody services & API-based online banking services
When did Wyoming create this crypto friendly environment? 2018 legislation HB 70 (2018 | WY)
BTC Manager | Bitcoin-Friendly Wyoming Grants Avanti a Bank Charter
The COVID hacking targets: health care providers and hospitals
The hackers: cyber criminal groups & nation states targeting COVID-19 research with the intent to sow chaos
Who is tracking cyber events against health care providers and hospitals? COVID-19 CTI League
The Hill | Hospitals brace for more cyberattacks as coronavirus cases rise
The state: Pennsylvania
The consolidation: SB 810 (2020 | PA)
How it would change IT in state government:
The goals:
Pennsylvania Business Report | Legislation would consolidate IT across agencies
Who: Innovation and Technology Caucus of the Texas House
Origins: 2015
Twitter: @ITCaucus
Which government has a new data security app called, NotifyUs? New Zealand
Who pushed for the app for New Zealand data breached? New Zealand’s privacy commissioner
What does the App do? helps entities based in New Zealand determine whether a data breach needs to be reported or not
Daily Swig | New Zealand launches data breach notification tool
Where: Portland, Maine
Didn’t Portland Maine city council ban facial recognition software? yes, but privacy advocates say it doesn’t go far enough so we have a November ballot proposition
What does the ballot proposition do beyond banning facial recognition software?
Biometric Update | Facial recognition legislation delayed in New Orleans, considered in Pennsylvania
WGME | ‘It’s a racist tool:’ Portland group wants voters to strengthen ban on facial recognition
What are the 7 elements in Pennsylvania’s framework to adopt new technology for state government:
Pennsylvania says these 7 steps helps ensure their technology investments are worthwhile and prudent.
Government Technology | CIOs on How to Reframe the Future with Emerging Tech
In the new economy, Technology and State Government go together like coffee and cookies in a Swedish Fika.
So, let’s look at how they do it in the Great State of Utah:
Government Technology | CIOs on How to Reframe the Future with Emerging Tech
Where: California
What: Proposition 24 would creates a dedicated state agency to enforce data privacy laws & adds dozens of specifics and exceptions for privacy in certain business
Why are privacy advocates opposed?
Los Angeles Times via Governing | California Hopes to Further Refine Online Privacy
Add Spain to the list of countries seeking financial disclosures for public officials of their bitcoin.
Why does this matter? Does your jurisdiction require crypto currency disclosures of public officials? Is your jurisdiction considering legislation related to crypto currency?
Reuters | Spain plans bill to force disclosure of crypto-currency holdings
Where: Birmingham, AL
What is happening: A purchasing agreement for law enforcement software included specific disclaimer language to prohibit the software use for facial recognition purposes
Alabama Media Group | Birmingham Reassures: Police Tech Won’t Use Facial Recognition
Since 2008, an estimated 700,000 Californians have moved to Texas.
The 2020 question is: Do the Californians that have moved to Texas vote in numbers that turn Texas to a swing state?
What do Texas experts say? Migration is an element, but so is the growth in Texas’ internal demographic shifts such as increased Latino population & growing metro areas
CalMatters | How California expats are helping turn Texas into a battleground state
How much did Missouri set aside from its CARES Fund for rural broadband? $50 million
How many estimated households will benefit? 10,000 new households
Who else will benefit in Missouri from the CARES Act COVID funds for internet service? telehealth, libraries and remote learning
Kansas City Star via Governing | Over 70,000 Kansas Homes Finally Getting High-Speed Internet
Where: Kansas
How were the COVID funds allocated in Kansas for rural broadband? The State Finance Council previously approved the use of federal coronavirus relief funding to improve broadband access
What else will also be getting improved internet access?
Kansas City Star via Governing | Over 70,000 Kansas Homes Finally Getting High-Speed Internet
Can local governments access private surveillance cameras- say like your doorbell’s camera or the cameras of your local improvement district?
Where is this happening? San Francisco, CA
What rules are in place for San Francisco to use private surveillance footage? They can if and only if they get approval from the local government
What’s alleged during BLM protests? That San Francisco police accessed real-time surveillance footage from private cameras in the Union Square area without first obtaining necessary approval from the Board of Supervisors
Why do we care?
San Francisco Chronicle via Governing | San Francisco Sued for Allegedly Video Surveilling Protests
The new kid on the Executive Council at Technet: The DoorDash CEO
The TechNet Executive Council:
What is perception hacking? Think of the election and social media.
Perception hacking is “manipulating people into thinking they are being manipulated”
Why do we care? perception hacking is being utilize din the 2020 election and could be a constant moving forward
Where: California
The legislation that Govern Newsom vetoed: AB 1138 (2020 | CA)
Why did the Governor veto this bill? it would not meaningfully protect children & there is existing federal law overlap
The goal os AB 1138: to obtain parental consent for social media use by any person under the age of 13
California’s AB 1281 (2020 | CA) extends an exception to California’s Data Privacy Law for information related to:
ADLaw | California Privacy Legislation Round-Up: Gov. Newsom Signs CCPA Employee Exemption Extension, Vetoes Others
The city: Detroit, MI
What did city councilors say in support?
What is Detroit’s background with facial recognition software? The city began a contract in 2017. This vote updates that software to improve it.
Does the police department use the software across the board? No, the department has a “strict policy” to only use it for the most egregious violent crimes and home invasions
Detroit News via Governing | Detroit Approves Police Use of Facial Recognition Software
Where: California
What legislation: SB 980 (2020 | CA) would have established privacy protections over the data collected by genetic testing companies like Ancestry.com and 23andMe
What privacy protections?
The veto rational? bill could “unintentionally impede” the critical COVID-19 reporting requirements
Let’s look at how the CIA is incentivizing tech employees, since they can’t compete with private sector salaries.
The CIA created CIA Labs that will allow:
MIT Technology Review | CIA’s new tech recruiting pitch: More patents, more profits
To remain competitive, an expanded use of AI is crucial for small business and education system, as members of the Congressional AI Caucus are calling for an use of artificial intelligence.
What kind o policy changes are we talking about?
The Hill | Lawmakers call for expanded AI role in education, business to remain competitive
The state: Colorado
The expanded use of facial recognition software: law enforcement agencies have asked Colorado’s DMV 227 times to run facial recognition software against its data base. Including of protestors.
Does Colorado have a law about the use of facial recognition software? No
Have Colorado cities opted out? Yes, Denver opted out.
Denver Post via Governing | Colorado Police Have Quietly Expanded Facial Recognition Use
The legislation: H.R. 1668: IoT Cybersecurity Improvement Act of 2020
What will it require? all internet-connected devices purchased by the federal government this includes computers, mobile devices and other products with the ability to connect to the internet to comply with minimum security recommendations issued by the National Institute of Standards and Technology
What burden would be on the private sector?
Why the legislation? There are no national standards to ensure the security of these connected devices
The Hill | House approves bill to secure internet-connected federal devices against cyber threats
What are the economic estimates if agricultural interests adopted the latest technology innovations? generate $18 billion to $23 billion annually
What does technology access look like for farmers?
Solutions to bring technology to rural areas:
Government Technology | The Future of Farming Relies on Internet Connectivity
The State: Pennsylvania
The App: COVID Alert PA
What technology does Pennsylvania’s App use? Exposure Notification System technology developed by Apple and Google
How does it notify app users of having been in close contact with someone who tests positive?
The App also provides COVID data for users.
Who composed the partnerships that brought the App to Pennsylvanians?
Pocono Record via Governing | Pennsylvania: Add Phones to the Fight and Download COVID App
Where: New Mexico
What connectivity issues does New Mexico have? lack of broadband and fiber. Residents within 10 minutes of the largest cities face connectivity issues as well as those in rural areas.
How has the connectivity issues impacted the Legislature?
How has the Legislature addressed some of these challenges? By offering 1 on 1 training for legislators by the legislature’s computer experts
Santa Fe New Mexican via Governing | New Mexico’s Legislative Activity Slowed by Bad Internet
Who started the Public Innovation Academy: Abhi Nemani of Code for America, former chief data officer of Los Angeles and CIO of Sacramento, CA
What will the Public Innovation Academy do?
Goverment Technology | Public Innovation Academy Offers Practical Training for Gov
The Report offers these concepts to consider for future legislation:
The report offers these recommendations:
Texas Privacy Protection Advisory Council Report September 2020
The State: Michigan HB 4186 (2020 | MI)
What new information will trigger a notification if hackers get access to it?
Notification timeline: Not more than 45 days from determining that a breach has occurred
Potential fines: $2,000 for each violation or not more than $5,000 per day for each consecutive day up to a total of $250,000
The State: Massachusetts
The Legislation: H4932 (2020 | MA)
The Bonds: $1.8 billion for critical investments in IT infrastructure to assist children, underrepresented populations
Add India to the list of countries considering a ban on cryptocurrency trading.
What have other Asian governments chosen to do with cryptocurrency markets? Regulation
What has China banned? initial coin offerings
Economic Times | India plans to introduce law to ban cryptocurrency trading
How many people have register to vote over Snapchat? 407,024
Were the registrations sparked by a paid ad by a political organization? No
How did the vote registration links to Snapchat work? Snap Chat added a new feature to its app that provided voter registration information
The industries most targeted by hackers from January-June 2020:
Manufacturing increased an uptick in cyberattacks by 11% over 2019.
The manufacturing equipment targeted:
Rational for the increase in cyber events for manufacturing?
CQ Roll Call via Governing | Cyberattacks on Manufacturing Industry Increase During COVID
Texas Economic Development Corporation has a new website that it describes as world class. So what does the new website offer:
Google is removing autofill in its search bars for that target candidates or voting.
What Google’s senior director of global policy and standards has to say: “We’re acutely aware that with this upcoming election … people have strong opinions and given the backdrop of COVID, there’s a lot of questions about voting information and how that might play out against the backdrop of the pandemic.”
So this means no autofill supporting, opposing or endorsing candidates or for voting information. The searches can occur, but will not be autofilled.
Tech Crunch | Google says it’s eliminating Autocomplete suggestions that target candidates or voting
Google | Our latest investments in information quality in Search and News
The Country: Japan
Which bank is pushing for a national cryptocurrency? one of the nation’s national banks, the Bank of Japan
Why the urgency in Japan? China has a forthcoming cryptocurrency. The result of this, and China and Russia’s move away from an economy dependent on the dollar, is that ” the global stage has likely pushed China to turn into a leader in the computerized cash race.”
What specific data should manufacturers be concerned about? protection of vital manufacturing data that contains controls, testing, and product performance
Which 3 stakeholders find the data security important for manufacturers? businesses, consumers, and regulators
Machine Design | Rethinking Data Security in Ultrasonic Welding and Manufacturing
Where: Portland, OR
What: City Council passed an ordinance, the 1st in the nation, to ban both the public and private use of facial recognition software in public accommodations
How is Portland’s ban on facial recognition software different than those in Boston, San Francisco and Oakland, CA? Portland bans private entities from using the software in public accomodation
The exceptions to the ban? Face ID to open your own mobile phone
What 3 reasons did elected officials offer to support the ban?
How have software companies pivoted? Amazon, IBM and Microsoft have scaled back their sales of the software to law enforcement
The Hill | Portland adopts landmark facial recognition ordinances
The non-profit that seeks out security breaches by apps:IDAC
What is IDAC goal? To protect consumer data
What recent discovery did it make? A fertility app on android phones was collecting a lot of personal data with no opt out for consumers
Why was the IDAC alerted? the App masked personal health data in the same way TikTok was masking data that it sent out
Is this new, finding a breach of personal health data on Apps? No, last year Consumer Reports identified Ovia, a pregnancy-tracking app that shares users’ data with their employers and insurers.
The Solarium Commission that delivered a list of policy recommendations earlier this year is working on supply chain policy recommendation next.
Why this new action? COVID
Are the recommendations being targeted at certain issues? Yes, ““We have to have a comprehensive information technology communications strategy to counter what could be perceived as Chinese aggression and to ensure the continued availability and trustworthiness of our critical technology supply chain,”
Inside Cybersecurity: The Cyberspace Solarium Commission is working up white papers
The pilot program is the brain child of: Multi-State Information Sharing and Analysis Center and the Johns Hopkins Applied Physics Laboratory
The governments that have joined: Arizona, Louisiana, Massachusetts and Texas, along with Maricopa County, Ariz
What is this pilot project? cybersecurity automation by identifying the threats that should be prioritized and triaged
The goals for the state governments: cut down on manual tasks & promote the sharing of actionable threat information
State Tech | States Join Automated Security Pilot with MS-ISAC, Johns Hopkins
The parties: Comcast & Reading (PA) School Board
The purpose of the contract: remote learning
What had the School Board tried before this contract to expand access to broadband for students? Added outdoor Wi-Fi to 14 school district buildings
What benefits will the district receive for its $700,000 expenditure?
Does Comcast have other similar partnerships to offer broadband to students? Yes, in Chicago; Atlanta; Pittsburgh; Sacramento, Calif.; Portland, Ore.; & Arlington, Va.
Reading Eagle via Governing | Reading Contracts With Comcast to Get Students Broadband
How did Chief Information Officers and those who work in data and data security get a bump in their profile because of COVID? Because the spread and data related to the coronavirus rose in importance, so did the import of those in charge of the data.
Instead of data being thought of as a defense (protect ourselves from hackers), data became an offense by showing how data can show the spread and containment of disease.
CIO Dive | The profile of the chief data officer rose in the pandemic
The University of Chicago is pairing their cybersecurity experts with local election officials to assist with cyber security issues surrounding the November election.
What is the Univeristy of Chicago’s program called? Election Cyber Surge & began with 50 volunteer experts who have been vetted
MSNBC | Volunteer hacker army boosts U.S. election cybersecurity
Writing on the wall with the FCC calling for comment on security threats in the existing supply chain rulemaking.
Why should this matter? Data security standards will fall into place in state and local government contracts too.
How e-commerce is fairing in 2020 for retailers overall:
For Home Depot specifically:
What tech devices were quickly adopted:
Examples of how the digital divide was closer to closed because of COVID:
Governing | Some Encouraging Steps on the Path to Digital Inclusion
The legislation: National Biometric Information Privacy Act of 2020
What would corporations be prohibited from doing?
How would it be enforced? By state Attorneys General & individuals could bring suit
Does Texas require cyber security training for government officials? Generally yes.
Does this apply to appraisal review board members? No because there is no definition of elected official even though the act specifically mentions that it applies to Appraisal Review Boards
Do I need to know more? To get to this conclusion, it relied on an Opinion from 1984 which said the election code didn’t apply to appraisal review board members.
Why do we care? Appraisal Review Board members handle property tax information, appeals, commercial property tax documents, zombie or dark store tax issues. This is going to include a lot of financial information that hackers might like or use for hacking fun times.
What’s happening? Connecticut passed the Connecticut Insurance Data Security Law which was modeled on the National Association of Insurance Commissioners Model Cybersecurity Law.
In response to this, the state insurance regulator, issued this guidance:
Licensees must develop, implement, and maintain a comprehensive written information security program (ISP) that complies with the Act by October 1, 2020. The ISP must be based on a risk assessment and contain safeguards for the protection of both nonpublic information and the licensee’s information systems.
Covered licensees must exercise due diligence in selecting service providers and must, by October 1, 2021, require each service provider to implement appropriate administrative, technical, and physical measures to protect and secure the information systems and nonpublic information that is accessible to and held by the service provider.
Annually, beginning February 15, 2021, non-exempt Connecticut domestic insurers must certify compliance with the Act.
Licensees or an outside service provider must conduct a prompt investigation in accordance with the Act after learning of a “cybersecurity event,” which is defined as “an event resulting in any unauthorized access to, or disruption or misuse of, an information system or the nonpublic information stored thereon, except if: (A) The event involves the unauthorized acquisition of encrypted nonpublic information if the encryption process for such information or encryption key to such information is not acquired, released or used without authorization; or (B) the event involves access of nonpublic information by an unauthorized person and the licensee determines that such information has not been used or released and has been returned or destroyed.”
Licensees must provide notice of cybersecurity events to the Insurance Commissioner as promptly as possible, but in no event later than three business days after the date of the event when either (1) Connecticut is, in the case of an insurer, the state of domicile, in the case of a producer, the home state of the producer; or (2) the licensee reasonably believes that the event involves nonpublic information of 250 or more consumers residing in Connecticut and state or federal laws require notification to a government entity, or there is a reasonable likelihood of material harm to Connecticut consumers or the licensee’s normal operations.
Licensees must comply with Connecticut’s data breach notification law and also provide a copy of any required notice to the Insurance Commissioner.
Licensees acting as an assuming insurer must notify affected ceding insurers and its domiciliary regulator of a cybersecurity event involving nonpublic information that is used by such assuming insurer or in its possession, custody or control when it is acting as an assuming insurer with no direct contractual relationship with affected consumers not later than 72 hours after the assuming insurer discovered that the cybersecurity event has occurred.
If the cybersecurity event involves nonpublic information that is in the possession, custody or control of an licensee acting as an insurer or a third-party service provider for an insurer, the Act requires the insurer to notify the producer of record for any affected consumer residing in this state who accessed services through an independent insurance producer of the occurrence of such event not later than the time at which notice is provided to such consumer, provided the insurer has the current producer of record information for such individual consumer.
Hinshaw & Culbertson – Consumer Crossroads | Another Cybersecurity Wake Up Call: Connecticut Insurance Department Issues Guidance on Cyber Law Set to go Into Effect
The State: California
The Legislation: AB (2020 | CA)
Supporters: Unions
Opponents: Business Groups
What would the bill do?
What kind of notification is required? “make every reasonable effort necessary to notify workers verbally”
What provision is most controversial? The bill’s ‘name and shame’ provision that requires state agencies to post on their websites company-specific coronavirus exposure information
Governing | California Bill Would Notify Workers of COVID Exposure
Virginia became the 1st state to implement a COVID tracing app from Apple and Google
What did the Governor clarify?
How does it work? A person who tests positive may opt to anonymously notify the app to notify people who have been in their proximity
What data is used for notification? Bluetooth which means that the app dfoesn’t know where you are it only knows that you have been within a certain distance of another bluetooth device.
AP | Virginia first to roll out pandemic app from Apple, Google
Add New Orleans to the cities adding citywide internet access to help students.
Where will New Orleans offer internet to help students with online classes this fall?
How will citywide internet access work? it will piggyback off city-owned fiber-optic cables
Is there a win for the city in addition to providing internet access to the estimated 30% of students who do not have access?
Yes, the city can use the internet access for traffic patterns or to determine whether streets are flooded
Governing | New Orleans Will Pilot Citywide Internet Access Program
Which tech companies are joining forces to improve diversity & inclusion?
What are these companies looking for in their vendors?
How will diversity & inclusion be measured? By simple survey
The City: Philadelphia, PA
What is Philadelphia promising students? Every student will have internet access (tools to access digital learning)
What partnership is necessary to achieve this goal? A partnership between the city, district officials, and internet service providers
What are some considerations to make this a reality?
Philadelphia Inquirer via Governing | Philadelphia Promises Internet Access for All Students by Fall
Add Portland, Maine to the list of governmental entities prohibiting the use of facial recognition software.
Will the city permit lawsuits against city employees who violate the prohibition? No
Portland Herald Press via Governing | Maine’s Biggest City Decides to Ban Facial Recognition Tech
What are the competing interests in Cares Act funding of broadband projects?
Which states are in this quagmire? Vermont, Alabama, Iowa, and New Hampshire
AP | States eager to expand broadband, wary of CARES Act deadline
The Courts keeping technology it relied on during DOVID: Ohio Court System
Why do Ohio Courts want to keep the technology changes from COVID?
Akron Beacon Journal via Governing | Ohio Courts Technology Upgrades Will Stay Post-Pandemic
Recommendations for blockchain state implementation:
At the Department of Motor Vehicle:
At the Department of Food & Agriculture
Move the State Archives online.
Recommendations for Blockchain industry:
California’s Blockchain Working Group Report to the Legislature
Who are members of Texas Blockchain Council?
Hedera Hasgraph
Unchained capital
Ripple
A Real blockchain solution
Crestline Solutions
Foley
Kilroy Blockchain
Arski Tech
Vertalo
Austin Blockchain Collective
Dallas Baptist University
Houston Blockchain Alliance
Hyland
Vercey
Trammell Venture Partners
Mercintelli Healthcare Solutions
Interaxis
McCullough Sudan
HoneyComb Digital Investments
The goal: For Texas to become the top jurisdictions for U.S.-based blockchain businesses and investments
@txblockchain1
Cointelegraph | US State of Texas Saddles Up to Become the Next Blockchain Capital
The country: Lithuania in coordination with the Lithuanian Bank
The name of Lithuania’s bitcoin? LBCOIN
What will a national bitcoin effectively be like? A credit card but Baltic & new
The numbers:
What partnership has emerged between health officials and universities? Utilizing university students as contact tracers
Where is this coming to fruition? Marin County, California in partnership with Dominician University & utilizing a contact tracing course from Johns Hopkins Univeristy
Route 50 | A Government-University Partnership to Train Students as Contact Tracers
Who knows when in person school starts, but let’s face it before COVID schools relied more on technology. Technology that regulators can protect and used by children who regulators can protect. It is a regulatory free for all.
Leave it to the federal government to get to work. Congress is considering:
Why does this sound familiar? InfoHive subscribers will recall our easily digestible summary of the the Cyberspace Solarium Commission recommendations, including Cybersecurity Lessons from the Pandemic, released in May.
EdWeek | Congress Heightens Emphasis on K-12 Cybersecurity During COVID-19
State Scoop | Privacy concerns have states taking it slow on contact tracing apps
Where: The UK
What? UK wants to reign in hacking, especially hacking of the internet of things, like your thermostat that could come with a preset password like hello, by prohibiting weak passwords.
The North Carolina Legislation: HB 904 (2019-2020 | NC)
The goal: Protect the personally identifiable information of North Carolina residents- even if the business is located elsewhere
What requirements are on businesses? reasonable security procedures must be in place + 30 day notification requirements after discovery of a breech
This legislation also rolls in Equifax response legislation of free credit freezes & notification to all credit reporting agencies of freezes.
WRAL Tech Wire | States enacting protections against data breaches – here’s what NC is proposing
The COVID reality has bestowed attention on these emerging technologies:
Government Technology | Pandemic Acts as Trial Run for Many Emerging Technologies
When verified twitter accounts were held by hackers last week, questions emerged about crypto currency transactions. Here’s how our recollection was refreshed:
Crytocurrency transactions are irreversible
Cryptocurrency transactions are virtually untraceable
The state agency: California State Library
The grant portal: the California Grants Portal, more than 100 grants totaling more than $17 billion
What kind of information can be searched? applicant type, grant category, and timeframe for application deadlines
What grant categories are included? environment and water; disadvantaged communities; education; health and human services; housing, community, and economic development; libraries, parks, recreation and arts; disaster prevention and relief; and science, technology and research and development.
The legislation creating the grant portal: AB2252 (2018 | CA)
Government Technology | What’s New in Civic Tech: California Creates Grants Portal
Where: Massachusetts
The legislation: S2800 (2020 | MA)
How would the bill impact facial recognition and biometric software?
Government Technology | Massachusetts Police Reform Bill Could Ban Facial Recognition
Where: Alabama
What: HB 177 (2020 | AL)
Include a constitutional amendment? Yes
Which states have given residents control over the data collected about them? States that have adopted California’s Consumer Privacy Act
How can residents have control over their data under this legislation?
• Residents can know whether and why businesses collect and share your data.
• You can access your collected personal information.
• You can delete your collected data.
• You can opt out of the sale of your personal information.
• If you are under 16 years old, be explicitly protected from having businesses sell your information without your consent.
How do business websites comply with this?
Which state agency has regulatory authority? The California Attorney General
San Francisco Chronicle | How to exercise your online privacy rights in California
Where: New Mexico
What: HB 15 (2020 | NM)
Who is proposing a public private cyber security center? U.S. Appropriation Committee wants to add one to the Cybersecurity and Infrastructure Security Agency budget
What would the partnership look like?
FCW | House’s DHS funding bill would create public-private cyber center
A new day. A new way to protect personal data. Meet Privacy Bee.
What does Privacy Bee do? “remove users’ data en masse from thousands of databases across the Internet”
What role do data scrubbing companies fill?
ZDNet | Privacy Bee scrubs your personal data from companies to reduce your risk of identity theft
Where: Michigan
The Caucus: Michigan Legislative Black Caucus
Where is the ban on facial recognition software being attached? A police reform bill
Why the opposition?
Detroit Free Press via Governing | Black Lawmakers Call for Ban of Police Facial Recognition
What are examples of prop tech?
Local government policy issues:
Governing | Why Local Governments Should Nurture the Growth of Proptech
What local governmental entity has one of the longest running facial recognition software programs? Tampa Florida’s Pinella County
Has the software been used to identify protestors? No
What would cause the Sheriff to stop using the facial recognition software? Regulations
Tampa Bay Times via Governing | Tampa Has No Plans to Discontinue, Pause Facial Recognition
First came local bans on facial recognition software.
Now, Santa Cruz, California is banning predictive policing.
What’s predictive policing? An algorithm that uses crime data to predict where crime is most likely to occur in the future
Arguments against the use of crime data for predictive policing:
Santa Cruz Sentinel via Governing | Santa Cruz, Calif., Becomes First to Ban Predictive Policing
The legislation: The Security and Privacy in Your Car S2182 (116th Congress)
What does the legislation require?
Transport Topics | Democratic Senators Raise Cybersecurity Concerns About Autonomous Vehicles
The legislative proposal: The Lawful Access to Encrypted Data Act
What would the U.S. Senate Judiciary Committee ask of Tech Companies? “end to “warrant-proof” encryption that’s disrupted criminal investigations”
What does this mean in practical terms? Requires tech companies to help law enforcement access encrypted data if their help would assist in carrying out a warrant
Is this the same as a backdoor into encrypted devices? Almost, but no, it is not the same
What else does the bill do? The Attorney General can create a competition for who can devise a way to access encrypted data while protecting privacy and security
CNET | Republicans push bill requiring tech companies to help access encrypted data
Where: New York
The legislation: So8600 (2020 | NY)
What limitations would be placed on TikTok? it could not be placed on any government owned device
Why ban Tiktok?
Have there been other TikTok bans? Yes
Times union | Bill would ban TikTok from state-issued devices
Who is suing over locally collected scooter data? ACLU
Where is this happening? Los Angeles
What data is in dispute? Data collected by Mobility Data Specification (MDS), developed by LADOT and a private-sector consultant that collects trip data
Why is this important to businesses & government?
Governing | Los Angeles DOT in Federal Lawsuit over Scooter Data
The Local Government: New York City
The legislation to shine light on surveillance methods: The POST Act
What steps would law enforcement have to take under the POST Act?
Which cities are model cities for transparency & oversight? Oakland and Seattle
Government Tech | New Legislation Could Mean Oversight of NYPD Spy Tools
How does The Exemption Project identify un-utilized tax exemptions?
Why was the project created? 2 government data experts wanted to create a project that was socially responsible
Gov Tech Biz | Startup Aims to Modernize the Property Tax Exemption Audit
Thank you for subscribing to our newsletter.
Great things are just around the corner!