Legislation News, Articles and Updates

Bipartisan bill aims to generate cyber hygiene best practices

The "Promoting Good Cyber Hygiene Act" would create a baseline of best practices, ensure those practices come under annual review and update and are published on a publicly accessible website.

Legislation bars DoD from using Kaspersky; FBI agents visit employees of Russian cyber firm

The U.S. Senate Armed Services Committee's annual defense spending bill reportedly contains a provision prohibiting the Defense Department from using any products from Moscow-based cybersecurity firm Kaspersky Lab.

China's controversial cybersecurity law goes into effect

China's new cybersecurity law went into effect on June 1, subjecting companies to stringent data privacy and protection guidelines, as key questions linger around how it will be enforced, and how businesses will be able to comply.

Activists propose buying lawmakers' browser histories after Congress revokes FCC privacy rules

Activists outraged over Congress passing a resolution that struck down new FCC rules defending the private data of telecom and ISP customers have pledged to purchase federal lawmakers' browser histories so they can publish them.

Telecom and ISP companies defend repeal of FCC privacy rules

In a conference call yesterday, a panel representing telecom and broadband service providers threw its support behind a resolution to roll back Federal Communications Commission rules designed to protect consumer data collected by telecom and ISP companies.

Lawmakers, rights groups react after Senate votes to kill FCC privacy protections

Digital rights and privacy groups reacted with indignation after the U.S. Senate passed a joint resolution that would undo FCC rules banning telecom and ISP companies from selling consumers' data without their consent.

Proposed law would require NYPD to disclose and evaluate surveillance tech

A pair of New York City Council members have proposed a law that would require the NYPD to disclose and evaluate the impact of the surveillance technologies it uses.

New York State revises its sweeping cyber regulation proposal for financial sector

The New York State Department of Financial Services (DFS) on Wednesday released a revised draft of an ambitious regulation designed to protect the state and its citizens from cyberattacks against financial institutions.

EU's privacy statutes preclude U.K.'s data retention legislation, court rules

The European Court of Justice ruled on Wednesday that the U.K.'s Data Retention and Investigatory Powers Act of 2014 is invalidated by European Union statutes that protect citizens from the indiscriminate collection and retention of electronic data.

Tech groups petition lawmakers to delay Rule 41 changes

A coalition of tech and privacy groups are calling on legislators to delay changes to Rule 41 that would allow judges to issue warrants to remotely access computers located in any jurisdiction.

U.S. Dept. of IoT? Experts debate need for Internet of Things regulation

Confronting the dangers posed by the Internet of Things, members of the House of Representatives' Energy and Commerce Committee held a hearing on Wednesday that examined the feasibility of regulating IoT devices.

French digital advocacy groups challenge Privacy Shield

Two French internet rights associations filed legal challenges against the EU-U.S. Privacy Shield, arguing the joint agreement doesn't go far enough in protecting citizens from digital spying.

Thai computer crime law criticized for imposing criminal penalties on ISPs

Thai telecommunication companies are bristling at a proposed law that would criminally punish ISPs for computer crimes perpetrated by their users, and place the burden of proof on these providers to defend themselves.

Tech big dogs enrolling in Privacy Shield

Google and Dropbox are the latest U.S. tech giants to register with the Privacy Shield.

Cross border computer probes gets nod in Switzerland

The Swiss intelligence service received permission to begin tapping phones and monitoring emails following a vote in the nation's parliament and approval by a public referendum.

Cybersecurity enhancements proposed for financial firms in New York

To better protect consumer data, banks and insurance companies in New York will soon be required to adhere to new cybersecurity guidelines.

FTC solicits public response on consumer data disposal

The Federal Trade Commission (FTC) on Monday issued a request for public comment on its rule regarding Disposal of Consumer Report Information and Records.

GAO report - DoJ cannot determine cost of FOIA lawsuits where complainants prevailed

The Justice Department is unable to determine the amount spent by federal agencies litigating FOIA lawsuits in which the complainant substantially prevailed, a GAO report determined.

Legislators urge Commerce Dept, DoJ against transfer of ICANN internet governance

U.S. legislators urged the Department of Justice and the Commerce Department to reconsider the transfer of internet governance.

Feinstein, Burr circulating proposed changes to encryption bill - report

Sens. Dianne Feinstein and Richard Burr have reportedly been circulating proposed changes to Feinstein-Burr encryption bill.

Regulatory policies threaten China's info communications tech sector

China will experience a loss of GDP from between 1.77 - 3.44% as a result of the country's information communications technology policies.

Corbyn announces digital 'bill of rights'

The leader of the Labour party has announced his intention to draw up a digital bill of rights, installing a constitutional settlement for online privacy for UK citizens

Bill pending in California classifies ransomware as extortion

A bill is pending in California that would designate the use of ransomware as a form of extortion.

Survey: 34% of privacy pros expect their companies to certify under Privacy Shield

In a new survey, only 34 percent of privacy professionals whose companies transfer data from Europe to the U.S. said that they expected their businesses to adopt the newly approved EU-U.S. Privacy Shield.

China allows foreign tech firms to participate in creating cybersecurity standards

China has signaled an interest in a global approach to developing the country's cybersecurity standards for foreign technology companies.

After NSA leaks, a renewed interest in vulnerability disclosure

Code leaked by the Shadow Brokers group has set off calls from security researchers and tech groups for a national conversation about vulnerability disclosure policy.

Coalition opposes effort to collect social media data of visa applicants

Privacy groups have opposed a proposal by DHS that would collect information about the social media presence and online activities of visa-waiver program visitors to the U.S.

NIST RFI seeks to increase public-private cooperation

NIST issued a far-reaching request for information, seeking cybersecurity suggestions from the private sector on a range of topics.