Cybersecurity & Tech
What’s the deal? After Twitter blocked Donald Trump, proposals have emerged to prevent the blocking of elected officials. Florida Governor is now chiming in with a proposal that will impose a fine “if a technology company de-platforms a candidate for elected office in Florida during the election, a company will face a daily fine of $100,000 until the candidate’s access to the platform is restored again.””
Why should we care? Hypocrisy. Some time ago, consistency mattered. So did facts. But, it’s a new economy and we’re entering new territory. Do we pick the same old choice of disregarding facts and consistency? Do we care if we need to reconcile the notion that a private company should be able to deny customers for religious reasons, can a private company deny a person a social media platform for safety or other reasons?
How does this impact me? Representing an elected official in a cancel culture should wake us up. If your client is silenced, could your account could also be silenced? On the flip side, could your work entail negotiating terms to reinstate the account of your client.
Governing | DeSantis: Penalize Social Media That Blocks Politicians
What’s the deal? SB 475 (2021 | TX) by Nelson came from the Texas Privacy Protection Advisory Council. Its going to require consent before agencies retain data about you or your location & requires consent for bio markers and GPS.
Why should we care? Data Privacy legislation is the new big fight between federal law and state law. States are acting to protect their people.
Why does this matter to me? Everyone loves the Texas- California who is doing things better discussion. As the two states split tech company homes, they’re also taking 2 different approaches to data privacy.
Flower Mound Leader | Cybersecurity, data privacy among bills filed by Nelson
What’s the deal? The corporate lawyers are talking and they say cyber security and data privacy are the top legal challenges.
Why should we care? Large lawsuits also impact laws and regulations.
Why does this matter to me? Lawsuits aren’t isolated and can impact insurance rates, cost of goods and services, and generate legislative causes.
Reuters | Law department leaders rate cybersecurity, data privacy as top challenges
What’s the deal? Staten Island D.A. Office is using facial recognition software. Yeah, the same software that some cities and states are banning because it misidentifies people especially Black people and people of color.
Why should we care? This facial recognition software isn’t like the stuff that tech companies hit the pause button on, the version at the DA office uses images from social media plus You Tube and Venmo.
Why does this matter to me? Privacy rights supporters, lawyers, & tech companies are just a few paying attention. This isn’t going anywhere and it ties into data privacy legislation.
Staten Island Advance via Governing | Staten Island D.A. Uses Controversial Facial Recognition Tool
What’s the deal? COVID and the resulting work from home, telehealth & virtual schools exposed the gaps in internet access. Cities and states are working to expand access. CT Gov. has a plan for statewide access. CT’s Public Utilities Regulatory Authority would require ISPs to provide access to all residents where the ISP has a video license & make it easier to add broadband to utility poles.
Why should we care? Expanding access to broadband closes gaps that historically impact rural and minority households.
Why does this matter to me? Utilities and ISPs can benefit along with 3rd party interests that provide services like telehealth, virtual school platforms and work from home apps like Zoom.
Hartford Courant via Governing | Connecticut Governor Proposes Statewide Broadband by Fall 2022
State legislators in Illinois are making their list and checking it twice for the reasons why Illinois should permit residents to sue social media for censorship. On their lists:
Center Square | Regulating technology could get some attention in Illinois with new Legislature
Say you’re on social media. Say you think that social media company is censoring you. Can you sue?
Under a new HB1144 (2021 | ND) would allow a resident of North Dakota to sue an out of state tech company if the person is censored by the social media company.
Does the public support it? Yes, 54% say yes
What does the 54% support?
How do people feel about letting companies determine how they operate? 46% want companies to set their own rules
A bipartisan 65% say social media platforms “have too much influence over politics and society in the U.S.”
The Hill | Poll: Most Americans want legislation governing social media policies
What are prognosticators pointing to as signs for revival of federal data protection legislation?
Government Technology | What Does A Biden Presidency Mean for Privacy Policy?
Where: Massachusetts
What: Legislation gave vehicle owners greater access to vehicle data so that owners and independent mechanics to send commands to the vehicle for repair
How did voters receive the constitutional protection? 75% voted to support the protection
Can this help company and government fleets? Yes, it is seen as a move to open the App market to allow better monitoring and managing of fleet vehicles
AB 27 (2021 | NY ) would:
The proposition: EU start ups are thriving and those in the US are suffering.
Why is there an advantage to EU start ups? Better data privacy legislation in the EU
So what can the US/states do?
How should legislation be implemented?
Tech Crunch | Inadequate federal privacy regulations leave US startups lagging behind Europe
The Texas Blockchain Council is working to make a Blockchain Caucus a reality in Texas.
The Texas Blockchain Council showed Texas Secretary of State a blockchain technology to authenticate government records.
The legislative goals:
NTX Inno | Texas Blockchain Council unveils first proof of concept in push to make the state an industry hub
Hawaii Health Department has launched AlohaSafe Alert app.
What does AlohaSafe Alert app do?
What will count as exposure contact by an App user?
How many states are using a contact tracing app? Dozen including California, Washington, and the District of Columbia
Honolulu Star Advertiser via Governing | Hawaii Launches App to Slow Down Rise in COVID Cases
Data drives health care innovation, but do regulations and laws protect that data?
How did COVID drive awareness to health care data privacy? COVID highlighted that the collection, use, sharing and further processing of data can help limit the spread of the virus
Could blockchain help?
What government is considering a State Crypto Currency? Sweden
What are Swedish banker concerns?
ambcrypto | Bankers in Sweden express concerns over e-Krona digital currency project
Autonomous vehicles rely on large-scale data collection. From road ways, to traffic laws to average human behavior.
Do laws address the data that Autonomous vehicles need? Not so much
What should AV laws address?
Automotive World | Autonomous vehicle developments put focus on data compliance
The State: New York
How the facial recognition software ban came to be: AB 6787 (2020 | NY)
Is it a permanent ban? No, its a let’s wait until July 1, 2022 & let’s study it
What happens on July 1st 2022? The State Board of Education President upon reviewing a study of the software could approve its use
What about school shootings? The software is mostly ineffective as most shooters are students who would not trigger the software
Route Fifty | A State Becomes the First to Suspend Facial Recognition Technology in Schools
Not a day goes by that we don’t see a headline about hackers. COVID increased the importance of Chief Information Officers from hacking prevention to solid disease trackers. COVID highlighted a big problem in access to technology when working from home and school from home didn’t work when there was no broadband access.
Tech companies admitted that there are flaws in facial recognition software. Lots of cities and police departments said no, don’t want to be that person who gets the headline- we used facial recognition software and locked up an innocent 90 year old grandmother.
We learned an interesting tech tip- you can’t actually trace cryptocurrency transfers. But, states have allowed Bitcoin to pay taxes and permitted bitcoin campaign contributions. So, we’ll see how that goes…
Phoenix is partnering with schools, technology companies and other city agencies to close the digital divide.
The sequential goals Phoenix is establishing:
State Tech | How Cities Are Forging Partnerships to Close the Digital Divide
COVID highlighted the disparity in access to broadband in San Antonio.
What data did San Antonio look to solve the disparity? San Antonio created an “Equity Atlas” that “visualizes the aggregated education level, income and primary language of different census tracts in the city,”
What did San Antonio discover? The broadband divide starts to close at household incomes above $60,000 and that it is most stark in minority communities
San Antonio’s Plan:
State Tech | How Cities Are Forging Partnerships to Close the Digital Divide
Massachusetts Governor has returned a law enforcement reform bill to the Legislature asking it to remove a ban on facial recognition software.
Tech Crunch | Massachusetts governor won’t sign police reform bill with facial recognition ban
In New Jersey, 74% of COVID positive persons will not cooperate.
New Jersey has 30 contact tracers for every 100,000 persons.
Continuing Black Lives Matter reforms, Madison, Wisconsin voted to ban the use of facial recognition software by city agencies.
The reasons offered for opposing the use of facial recognition software:
The exception that allows use of facial recognition software: to identify and locate “victims of human trafficking, child sexual exploitation or missing children.”
Wisconsin State Journal via Governing | Wisconsin Capital Bans City’s Facial Recognition Use
In Van Buren v. U.S. the question is whether unauthorized use of a law enforcement database by a law enforcement officer, who was authorized to the use the database, but not for this search, is that sanctionable?
Why does this matter? Did you ever check your realreal bids at the office? Or run a quick search for why your eye is twitching? Hello unauthorized use.
Where does this get even grayer? Researchers and journalists often use fake accounts for research purposes.
What has Alito said? ” including this unauthorized use could loop in a lot of others that are innocuous
Protocol | Van Buren v. United States: The SCOTUS case splitting the privacy world in two
The National Governors Association has a new study about locating new broadband.
The nuts & bolts:
NGA | Governor Strategies to Expand Affordable Broadband Access
The legislation: HR 8807 (116th Congress)
What will HR 8807 do?
What information will the data help solve?
Which legislature is calling on health care data audits? Pennsylvania
How will this work? The Legislature’s House Budget and Finance Committee will audit data maintained by the Health Department to identify anomalies in its reporting
What: HR 1087 (2020 | PA)
Why? What was the Legislature reacting to? Discrepancy between the number of COVID-19-related deaths reported by the state’s Department of Health & those reported by coroners + inconsistencies in reporting of deaths from nursing homes and practices for reporting positive cases
What: HB6314 (2020 | MI)
Where: Michigan
What else does HB 6314 do? Require a uniform and centralized data system to collect data related to testing sites and a public resource with detailed information about cases, testing, deaths, recoveries, available PPE, hospital occupancy and much more.
California’s Data Privacy Legislation, CCPA, and its amendments passed by voters in November 2020, federal legislation is thought to likely meet or exceed California data privacy standards.
What would be included in federal legislation that isn’t in California’s?
Where: Japan
What: A robot identifies individuals not wearing masks or socially distancing and politely advises the person to wear a mask or maintain social distancing.
News Herald | Robot in Japan reminds people to follow coronavirus etiquette
The state: Oregon
Why is a state privacy office necessary?
A fragmented system relying on each agency to protect data separately falls short in protecting personal data
What does Oregon have in place? Enterprise Information Services, a statewide data and information systems agency
How many states have a single point in charge of protecting personal data? 15
Statesman Journal | Audit suggests state take this step to protect Oregonians’ personal information
The Police Force: City of Los Angeles
The position on facial recognition software:
The catalyst: Officers had used third party familial recognition software without permission
Los Angeles Times via Governing | Los Angeles Police Ban Use of Third-Party Facial Recognition
Facial Recognition Software is a hot topic for policy makers.
The EU has new rules that allow for the sale of software, like facial recognition software, but adds a lot of transparency requirements.
What new rules will apply in the EU?
MIT Technology Review | Europe is adopting stricter rules on surveillance tech
Who ranked Texas as reactionary on blockchain policy: The Brookings Institute
Who is talking about the ranking? The Texas Blockchain Council
Why did the Texas Blockchain Council form? “Texas is positioning itself to pick up the mantle of leadership in the emerging technology space”
Long term goals: “public-private partnerships that include research institutes, regulatory agencies, private companies, and economic development entities to incubate and develop a blockchain innovation ecosystem “
www.texasblockchaincouncil.com
Texas Blockchain Council Launches to Make Texas a Leader in Blockchain Innovation
High Speed Access for all: Canada’s Connectivity Strategy.
Cities are trying to tackle high crime areas by collecting data on the cars that enter certain high crime portions of their cities.
What do privacy advocates say?
The most recent city to dip its toe in license plate reader pool? Wichita KS
Wichita Eagle via Governing | Wichita to Take License Photos in High-Crime Neighborhoods
S4833 (116th Congress | Hassan & Cornyn) would give states access tot he National Guard to enforce cyber security laws.
Goldman Sachs estimates that by 2022 the global data industry will be worth more than $250 billion.
So what are investors looking for? How will legislation and regulation impact data security, advertisement, marketing and the requisite data.
Add in pop culture…. with the Netflix documentary The Social Dilemma that echoed the phrase– “if you’re not paying for the product, you are the product”.
Stockhead | Data security is about to be big business as legislative winds begin to shift
Who made the recommendations? Governor’s Broadband Development Council
Where do I read all their fancy words? 2020 Texas Report Governor’s Broadband Development Council
What are their recommendations?
Reform Austin | Governor’s Council: How More Texans Could Have Broadband Access
What’s coming our way? Crypto currency credit cards
How? ZenGo, a c crypto currency start up, is working with Visa to develop a non-custodial crypto payment card
How will the credit card work? It will be the first card tied to a self-hosted, on-chain, multi-currency wallet where funds are controlled by the user
56+% California voters approved new data privacy standards in the state including:
Champions of the proposition:
Desert Sun | Proposition 24: Californians approve more data privacy rules
The legislation: AB 1864 (2020 | CA)
The revamped state regulatory body: California Department of Financial Protection and Innovation
What powers will California have that it did not before? The power to enforce laws against unregulated industries
What does the regulator say about innovation and fintech? The agency will have the ability to “Spur innovation in financial services by clarifying regulatory expectations for emerging products and services.”
California Department of Financial Protection and Innovation (DFPI) | California Consumer Financial Protection Law
Who: Crypto Cars Online
Where: Dallas, Texas, Crypto Cars Online partnered with local dealerships
Which cryptocurrencies are accepted for the transaction? Bitcoin, Bitcoin Cash, Ethereum, Litecoin, and USD Coin
Does Crypto Cars finance cars with bitcoin? Yes
Crypto Cars Online | The First Crypto Currency Auto Finance Company in the U.S.
Wyoming has granted Avanti authority to operate as a bank.
What does this mean? Avanti can offer a United States dollar-backed stablecoin, digital assets custody services & API-based online banking services
When did Wyoming create this crypto friendly environment? 2018 legislation HB 70 (2018 | WY)
BTC Manager | Bitcoin-Friendly Wyoming Grants Avanti a Bank Charter
The COVID hacking targets: health care providers and hospitals
The hackers: cyber criminal groups & nation states targeting COVID-19 research with the intent to sow chaos
Who is tracking cyber events against health care providers and hospitals? COVID-19 CTI League
The Hill | Hospitals brace for more cyberattacks as coronavirus cases rise
The state: Pennsylvania
The consolidation: SB 810 (2020 | PA)
How it would change IT in state government:
The goals:
Pennsylvania Business Report | Legislation would consolidate IT across agencies
Who: Innovation and Technology Caucus of the Texas House
Origins: 2015
Twitter: @ITCaucus
Which government has a new data security app called, NotifyUs? New Zealand
Who pushed for the app for New Zealand data breached? New Zealand’s privacy commissioner
What does the App do? helps entities based in New Zealand determine whether a data breach needs to be reported or not
Daily Swig | New Zealand launches data breach notification tool
Where: Portland, Maine
Didn’t Portland Maine city council ban facial recognition software? yes, but privacy advocates say it doesn’t go far enough so we have a November ballot proposition
What does the ballot proposition do beyond banning facial recognition software?
Biometric Update | Facial recognition legislation delayed in New Orleans, considered in Pennsylvania
WGME | ‘It’s a racist tool:’ Portland group wants voters to strengthen ban on facial recognition
What are the 7 elements in Pennsylvania’s framework to adopt new technology for state government:
Pennsylvania says these 7 steps helps ensure their technology investments are worthwhile and prudent.
Government Technology | CIOs on How to Reframe the Future with Emerging Tech
In the new economy, Technology and State Government go together like coffee and cookies in a Swedish Fika.
So, let’s look at how they do it in the Great State of Utah:
Government Technology | CIOs on How to Reframe the Future with Emerging Tech
Where: California
What: Proposition 24 would creates a dedicated state agency to enforce data privacy laws & adds dozens of specifics and exceptions for privacy in certain business
Why are privacy advocates opposed?
Los Angeles Times via Governing | California Hopes to Further Refine Online Privacy
Add Spain to the list of countries seeking financial disclosures for public officials of their bitcoin.
Why does this matter? Does your jurisdiction require crypto currency disclosures of public officials? Is your jurisdiction considering legislation related to crypto currency?
Reuters | Spain plans bill to force disclosure of crypto-currency holdings
Where: Birmingham, AL
What is happening: A purchasing agreement for law enforcement software included specific disclaimer language to prohibit the software use for facial recognition purposes
Alabama Media Group | Birmingham Reassures: Police Tech Won’t Use Facial Recognition
Since 2008, an estimated 700,000 Californians have moved to Texas.
The 2020 question is: Do the Californians that have moved to Texas vote in numbers that turn Texas to a swing state?
What do Texas experts say? Migration is an element, but so is the growth in Texas’ internal demographic shifts such as increased Latino population & growing metro areas
CalMatters | How California expats are helping turn Texas into a battleground state
How much did Missouri set aside from its CARES Fund for rural broadband? $50 million
How many estimated households will benefit? 10,000 new households
Who else will benefit in Missouri from the CARES Act COVID funds for internet service? telehealth, libraries and remote learning
Kansas City Star via Governing | Over 70,000 Kansas Homes Finally Getting High-Speed Internet
Where: Kansas
How were the COVID funds allocated in Kansas for rural broadband? The State Finance Council previously approved the use of federal coronavirus relief funding to improve broadband access
What else will also be getting improved internet access?
Kansas City Star via Governing | Over 70,000 Kansas Homes Finally Getting High-Speed Internet
Can local governments access private surveillance cameras- say like your doorbell’s camera or the cameras of your local improvement district?
Where is this happening? San Francisco, CA
What rules are in place for San Francisco to use private surveillance footage? They can if and only if they get approval from the local government
What’s alleged during BLM protests? That San Francisco police accessed real-time surveillance footage from private cameras in the Union Square area without first obtaining necessary approval from the Board of Supervisors
Why do we care?
San Francisco Chronicle via Governing | San Francisco Sued for Allegedly Video Surveilling Protests
The new kid on the Executive Council at Technet: The DoorDash CEO
The TechNet Executive Council:
What is perception hacking? Think of the election and social media.
Perception hacking is “manipulating people into thinking they are being manipulated”
Why do we care? perception hacking is being utilize din the 2020 election and could be a constant moving forward
Where: California
The legislation that Govern Newsom vetoed: AB 1138 (2020 | CA)
Why did the Governor veto this bill? it would not meaningfully protect children & there is existing federal law overlap
The goal os AB 1138: to obtain parental consent for social media use by any person under the age of 13
California’s AB 1281 (2020 | CA) extends an exception to California’s Data Privacy Law for information related to:
ADLaw | California Privacy Legislation Round-Up: Gov. Newsom Signs CCPA Employee Exemption Extension, Vetoes Others
The city: Detroit, MI
What did city councilors say in support?
What is Detroit’s background with facial recognition software? The city began a contract in 2017. This vote updates that software to improve it.
Does the police department use the software across the board? No, the department has a “strict policy” to only use it for the most egregious violent crimes and home invasions
Detroit News via Governing | Detroit Approves Police Use of Facial Recognition Software
Where: California
What legislation: SB 980 (2020 | CA) would have established privacy protections over the data collected by genetic testing companies like Ancestry.com and 23andMe
What privacy protections?
The veto rational? bill could “unintentionally impede” the critical COVID-19 reporting requirements
Let’s look at how the CIA is incentivizing tech employees, since they can’t compete with private sector salaries.
The CIA created CIA Labs that will allow:
MIT Technology Review | CIA’s new tech recruiting pitch: More patents, more profits
To remain competitive, an expanded use of AI is crucial for small business and education system, as members of the Congressional AI Caucus are calling for an use of artificial intelligence.
What kind o policy changes are we talking about?
The Hill | Lawmakers call for expanded AI role in education, business to remain competitive
The state: Colorado
The expanded use of facial recognition software: law enforcement agencies have asked Colorado’s DMV 227 times to run facial recognition software against its data base. Including of protestors.
Does Colorado have a law about the use of facial recognition software? No
Have Colorado cities opted out? Yes, Denver opted out.
Denver Post via Governing | Colorado Police Have Quietly Expanded Facial Recognition Use
The legislation: H.R. 1668: IoT Cybersecurity Improvement Act of 2020
What will it require? all internet-connected devices purchased by the federal government this includes computers, mobile devices and other products with the ability to connect to the internet to comply with minimum security recommendations issued by the National Institute of Standards and Technology
What burden would be on the private sector?
Why the legislation? There are no national standards to ensure the security of these connected devices
The Hill | House approves bill to secure internet-connected federal devices against cyber threats
What are the economic estimates if agricultural interests adopted the latest technology innovations? generate $18 billion to $23 billion annually
What does technology access look like for farmers?
Solutions to bring technology to rural areas:
Government Technology | The Future of Farming Relies on Internet Connectivity
The State: Pennsylvania
The App: COVID Alert PA
What technology does Pennsylvania’s App use? Exposure Notification System technology developed by Apple and Google
How does it notify app users of having been in close contact with someone who tests positive?
The App also provides COVID data for users.
Who composed the partnerships that brought the App to Pennsylvanians?
Pocono Record via Governing | Pennsylvania: Add Phones to the Fight and Download COVID App
Where: New Mexico
What connectivity issues does New Mexico have? lack of broadband and fiber. Residents within 10 minutes of the largest cities face connectivity issues as well as those in rural areas.
How has the connectivity issues impacted the Legislature?
How has the Legislature addressed some of these challenges? By offering 1 on 1 training for legislators by the legislature’s computer experts
Santa Fe New Mexican via Governing | New Mexico’s Legislative Activity Slowed by Bad Internet
Who started the Public Innovation Academy: Abhi Nemani of Code for America, former chief data officer of Los Angeles and CIO of Sacramento, CA
What will the Public Innovation Academy do?
Goverment Technology | Public Innovation Academy Offers Practical Training for Gov
The Report offers these concepts to consider for future legislation:
The report offers these recommendations:
Texas Privacy Protection Advisory Council Report September 2020
The State: Michigan HB 4186 (2020 | MI)
What new information will trigger a notification if hackers get access to it?
Notification timeline: Not more than 45 days from determining that a breach has occurred
Potential fines: $2,000 for each violation or not more than $5,000 per day for each consecutive day up to a total of $250,000
The State: Massachusetts
The Legislation: H4932 (2020 | MA)
The Bonds: $1.8 billion for critical investments in IT infrastructure to assist children, underrepresented populations
Add India to the list of countries considering a ban on cryptocurrency trading.
What have other Asian governments chosen to do with cryptocurrency markets? Regulation
What has China banned? initial coin offerings
Economic Times | India plans to introduce law to ban cryptocurrency trading
How many people have register to vote over Snapchat? 407,024
Were the registrations sparked by a paid ad by a political organization? No
How did the vote registration links to Snapchat work? Snap Chat added a new feature to its app that provided voter registration information
The industries most targeted by hackers from January-June 2020:
Manufacturing increased an uptick in cyberattacks by 11% over 2019.
The manufacturing equipment targeted:
Rational for the increase in cyber events for manufacturing?
CQ Roll Call via Governing | Cyberattacks on Manufacturing Industry Increase During COVID
Texas Economic Development Corporation has a new website that it describes as world class. So what does the new website offer:
Google is removing autofill in its search bars for that target candidates or voting.
What Google’s senior director of global policy and standards has to say: “We’re acutely aware that with this upcoming election … people have strong opinions and given the backdrop of COVID, there’s a lot of questions about voting information and how that might play out against the backdrop of the pandemic.”
So this means no autofill supporting, opposing or endorsing candidates or for voting information. The searches can occur, but will not be autofilled.
Tech Crunch | Google says it’s eliminating Autocomplete suggestions that target candidates or voting
Google | Our latest investments in information quality in Search and News
The Country: Japan
Which bank is pushing for a national cryptocurrency? one of the nation’s national banks, the Bank of Japan
Why the urgency in Japan? China has a forthcoming cryptocurrency. The result of this, and China and Russia’s move away from an economy dependent on the dollar, is that ” the global stage has likely pushed China to turn into a leader in the computerized cash race.”
What specific data should manufacturers be concerned about? protection of vital manufacturing data that contains controls, testing, and product performance
Which 3 stakeholders find the data security important for manufacturers? businesses, consumers, and regulators
Machine Design | Rethinking Data Security in Ultrasonic Welding and Manufacturing
Where: Portland, OR
What: City Council passed an ordinance, the 1st in the nation, to ban both the public and private use of facial recognition software in public accommodations
How is Portland’s ban on facial recognition software different than those in Boston, San Francisco and Oakland, CA? Portland bans private entities from using the software in public accomodation
The exceptions to the ban? Face ID to open your own mobile phone
What 3 reasons did elected officials offer to support the ban?
How have software companies pivoted? Amazon, IBM and Microsoft have scaled back their sales of the software to law enforcement
The Hill | Portland adopts landmark facial recognition ordinances
The non-profit that seeks out security breaches by apps:IDAC
What is IDAC goal? To protect consumer data
What recent discovery did it make? A fertility app on android phones was collecting a lot of personal data with no opt out for consumers
Why was the IDAC alerted? the App masked personal health data in the same way TikTok was masking data that it sent out
Is this new, finding a breach of personal health data on Apps? No, last year Consumer Reports identified Ovia, a pregnancy-tracking app that shares users’ data with their employers and insurers.
The Solarium Commission that delivered a list of policy recommendations earlier this year is working on supply chain policy recommendation next.
Why this new action? COVID
Are the recommendations being targeted at certain issues? Yes, ““We have to have a comprehensive information technology communications strategy to counter what could be perceived as Chinese aggression and to ensure the continued availability and trustworthiness of our critical technology supply chain,”
Inside Cybersecurity: The Cyberspace Solarium Commission is working up white papers
The pilot program is the brain child of: Multi-State Information Sharing and Analysis Center and the Johns Hopkins Applied Physics Laboratory
The governments that have joined: Arizona, Louisiana, Massachusetts and Texas, along with Maricopa County, Ariz
What is this pilot project? cybersecurity automation by identifying the threats that should be prioritized and triaged
The goals for the state governments: cut down on manual tasks & promote the sharing of actionable threat information
State Tech | States Join Automated Security Pilot with MS-ISAC, Johns Hopkins
The parties: Comcast & Reading (PA) School Board
The purpose of the contract: remote learning
What had the School Board tried before this contract to expand access to broadband for students? Added outdoor Wi-Fi to 14 school district buildings
What benefits will the district receive for its $700,000 expenditure?
Does Comcast have other similar partnerships to offer broadband to students? Yes, in Chicago; Atlanta; Pittsburgh; Sacramento, Calif.; Portland, Ore.; & Arlington, Va.
Reading Eagle via Governing | Reading Contracts With Comcast to Get Students Broadband
How did Chief Information Officers and those who work in data and data security get a bump in their profile because of COVID? Because the spread and data related to the coronavirus rose in importance, so did the import of those in charge of the data.
Instead of data being thought of as a defense (protect ourselves from hackers), data became an offense by showing how data can show the spread and containment of disease.
CIO Dive | The profile of the chief data officer rose in the pandemic
The University of Chicago is pairing their cybersecurity experts with local election officials to assist with cyber security issues surrounding the November election.
What is the Univeristy of Chicago’s program called? Election Cyber Surge & began with 50 volunteer experts who have been vetted
MSNBC | Volunteer hacker army boosts U.S. election cybersecurity
Writing on the wall with the FCC calling for comment on security threats in the existing supply chain rulemaking.
Why should this matter? Data security standards will fall into place in state and local government contracts too.
How e-commerce is fairing in 2020 for retailers overall:
For Home Depot specifically:
What tech devices were quickly adopted:
Examples of how the digital divide was closer to closed because of COVID:
Governing | Some Encouraging Steps on the Path to Digital Inclusion
The legislation: National Biometric Information Privacy Act of 2020
What would corporations be prohibited from doing?
How would it be enforced? By state Attorneys General & individuals could bring suit
Does Texas require cyber security training for government officials? Generally yes.
Does this apply to appraisal review board members? No because there is no definition of elected official even though the act specifically mentions that it applies to Appraisal Review Boards
Do I need to know more? To get to this conclusion, it relied on an Opinion from 1984 which said the election code didn’t apply to appraisal review board members.
Why do we care? Appraisal Review Board members handle property tax information, appeals, commercial property tax documents, zombie or dark store tax issues. This is going to include a lot of financial information that hackers might like or use for hacking fun times.
What’s happening? Connecticut passed the Connecticut Insurance Data Security Law which was modeled on the National Association of Insurance Commissioners Model Cybersecurity Law.
In response to this, the state insurance regulator, issued this guidance:
Licensees must develop, implement, and maintain a comprehensive written information security program (ISP) that complies with the Act by October 1, 2020. The ISP must be based on a risk assessment and contain safeguards for the protection of both nonpublic information and the licensee’s information systems.
Covered licensees must exercise due diligence in selecting service providers and must, by October 1, 2021, require each service provider to implement appropriate administrative, technical, and physical measures to protect and secure the information systems and nonpublic information that is accessible to and held by the service provider.
Annually, beginning February 15, 2021, non-exempt Connecticut domestic insurers must certify compliance with the Act.
Licensees or an outside service provider must conduct a prompt investigation in accordance with the Act after learning of a “cybersecurity event,” which is defined as “an event resulting in any unauthorized access to, or disruption or misuse of, an information system or the nonpublic information stored thereon, except if: (A) The event involves the unauthorized acquisition of encrypted nonpublic information if the encryption process for such information or encryption key to such information is not acquired, released or used without authorization; or (B) the event involves access of nonpublic information by an unauthorized person and the licensee determines that such information has not been used or released and has been returned or destroyed.”
Licensees must provide notice of cybersecurity events to the Insurance Commissioner as promptly as possible, but in no event later than three business days after the date of the event when either (1) Connecticut is, in the case of an insurer, the state of domicile, in the case of a producer, the home state of the producer; or (2) the licensee reasonably believes that the event involves nonpublic information of 250 or more consumers residing in Connecticut and state or federal laws require notification to a government entity, or there is a reasonable likelihood of material harm to Connecticut consumers or the licensee’s normal operations.
Licensees must comply with Connecticut’s data breach notification law and also provide a copy of any required notice to the Insurance Commissioner.
Licensees acting as an assuming insurer must notify affected ceding insurers and its domiciliary regulator of a cybersecurity event involving nonpublic information that is used by such assuming insurer or in its possession, custody or control when it is acting as an assuming insurer with no direct contractual relationship with affected consumers not later than 72 hours after the assuming insurer discovered that the cybersecurity event has occurred.
If the cybersecurity event involves nonpublic information that is in the possession, custody or control of an licensee acting as an insurer or a third-party service provider for an insurer, the Act requires the insurer to notify the producer of record for any affected consumer residing in this state who accessed services through an independent insurance producer of the occurrence of such event not later than the time at which notice is provided to such consumer, provided the insurer has the current producer of record information for such individual consumer.
Hinshaw & Culbertson – Consumer Crossroads | Another Cybersecurity Wake Up Call: Connecticut Insurance Department Issues Guidance on Cyber Law Set to go Into Effect
The State: California
The Legislation: AB (2020 | CA)
Supporters: Unions
Opponents: Business Groups
What would the bill do?
What kind of notification is required? “make every reasonable effort necessary to notify workers verbally”
What provision is most controversial? The bill’s ‘name and shame’ provision that requires state agencies to post on their websites company-specific coronavirus exposure information
Governing | California Bill Would Notify Workers of COVID Exposure
Virginia became the 1st state to implement a COVID tracing app from Apple and Google
What did the Governor clarify?
How does it work? A person who tests positive may opt to anonymously notify the app to notify people who have been in their proximity
What data is used for notification? Bluetooth which means that the app dfoesn’t know where you are it only knows that you have been within a certain distance of another bluetooth device.
AP | Virginia first to roll out pandemic app from Apple, Google
Add New Orleans to the cities adding citywide internet access to help students.
Where will New Orleans offer internet to help students with online classes this fall?
How will citywide internet access work? it will piggyback off city-owned fiber-optic cables
Is there a win for the city in addition to providing internet access to the estimated 30% of students who do not have access?
Yes, the city can use the internet access for traffic patterns or to determine whether streets are flooded
Governing | New Orleans Will Pilot Citywide Internet Access Program
Which tech companies are joining forces to improve diversity & inclusion?
What are these companies looking for in their vendors?
How will diversity & inclusion be measured? By simple survey
Thank you for subscribing to our newsletter.
Great things are just around the corner!