Uncategorized

Lawmakers Propose Bill to Counter State Department Cuts to Cyber Offices

September 14th, 2017 By: Connor Breza   Responding to Secretary of State Tillerson’s plans to eliminate and consolidate the State Department’s Office of the Coordinator for Cyber Issues, lawmakers spanning across party lines have proposed a bill this week to preserve the department and strengthen U.S. cyber security and diplomacy.  In a statement last week, Congressman Ted W. Lieu announced a bipartisan bill titled the Cyber Diplomacy Act, introduced by Congressman Royce of California, which Congressman Lieu claims “will build the structure, strategy and oversight at the State Department to ensure that U.S. leadership extends to the critical areas of cyberspace.”

Read More

Equifax Data Breach Sparks U.S. Government Focus

September 7th, 2017 By: Connor Breza   Credit reporting agency Equifax publicly announced a major data breach yesterday, potentially compromising the personal information of up to 143 million U.S. consumers. The company reported that the breach occurred between mid-May and July this summer and put consumer’s sensitive information at risk, including Social Security numbers and driver’s license numbers. According to the company, “[c]riminals exploited a U.S. website application vulnerability to gain access to certain files,” and there is “no evidence of unauthorized access to core consumer or commercial credit reporting database.”

Read More

White House Experiences Resignations of Cybersecurity Advisors

By: Connor Breza   In August the Trump administration lost several high-ranking cybersecurity officials. The Hill reported that the National Infrastructure Advisory Council (NIAC), the Homeland Security Department responsible for advising the president on cybersecurity and infrastructure, lost 25% of its panel in a group resignation. The resigning officers released a letter, published by Nextgov, detailing their personal motivations behind leaving the administration, and stating that the current administration has not demonstrated that it “is adequately attentive to the pressing national security matters within the NIAC’s purview, or responsive to sound advice received from experts and advisors on these matters”.

Read More

Uber Settles with FTC Over Claims of Misrepresentation of Privacy and Data Security Practices

By: Connor Breza August 15th, 2017   Concluding its investigation, the FTC reached an agreement with Uber Technologies, Inc., settling charges that Uber, the popular ride share app, “deceived consumers by failing to monitor employee access to consumer personal information and by failing to reasonably secure sensitive consumer data stored in the cloud.” According to the FTC’s press release, as stipulated by the terms of the settlement, “Uber has agreed to implement a comprehensive privacy program and obtain regular, independent audits.”

Read More

Acting FTC Chairman Announces Internal Reforms to Streamline Agency Investigations

By: Connor Breza July 17th, 2017   In her press conference Monday, Acting Chairman for the Federal Trade Commission Maureen K. Ohlhausen announced incoming reforms to the Commission’s Bureau of Consumer Protection. The Federal Trade Commission reports that these reforms will “streamline information requests and improve transparency in Commission investigations.” Acting Chairman Ohlhausen first announced her intention to enact reforms in her April 17th press release in response to new presidential directives.

Read More

Recap of IAPP Global Privacy Summit 2017

By Ilona Korzha   As is every year, eWhite House Watch had the opportunity to report on the annual International Association of Privacy Professionals (IAPP) Global Privacy Summit in Washington D.C. on April 19-20 this year.    The world’s biggest privacy conference was especially important this year as its more than 3,000 attendees pondered answers to such questions as what impact does the newly adopted European Union’s General Data Protection Regulation (GDPR) have on the U.S. companies that do business in Europe, how to deal with ever increasing cybersecurity risk, how to manage rising customer expectations and effectively handle government investigations of data breaches.

Read More