States are increasingly embracing their role in protecting the online privacy of their residents and organizations. Delaware, California and Utah are leading the way in online privacy protections according to recent analysis of privacy protections across various metrics. Comparitech utilized a 14-metric evaluation tool to analyze the variation amongst states throughout the continental U.S. indicating privacy’s importance from state to state. Kuma is proud to be engaged with several states to improve privacy protections for citizens, including contract vehicles in South Carolina, Virginia and Hawaii. In addition, Kuma works closely with several state and local county government agencies in Oregon and California.
States possess the ability to advance privacy practices to maintain steady pace with a rapidly developing technology landscape as they implement programs and deliver solutions electronically to their constituents. And communities will increasingly hold their respective state leaders to a standard of excellence regarding how their information is being handled. Expectations on privacy protections are focusing legislation on regulating information sharing and consent, breach notifications, data minimization and disposal, social media privacy, and regulations protecting segments of the population including employees, students and children.
There is wide variance on the state’s strengths and weaknesses in regard to privacy protections for online data. For example, Delaware received high reviews on providing sufficient privacy protection for laws pertaining to disposal, protecting online personal items (e-book, library etc.) and employee data. California and Utah also were standouts in the privacy state evaluations, both showing great strengths in disclosure laws and compliance. California has uniquely positioned themselves as a state that is willing to implement privacy issues that many other states neglect, establishing the first data breach notification legislation written by Joe Simitian and including social media and Internet of Things (IoT) regulations. Arkansas is also an active state practicing high quality privacy habits, passing two new data privacy laws around disclosure in 2015. New Hampshire’s hallmark privacy legislation includes a recently passed law modeled from California’s Online Personal Information Protection Act. Vermont also shows promise in the privacy field with its “opt in” privacy law in the financial services industry. There continues to be significant opportunities for states to improve their approach to managing privacy within their organizations and for residents, with the key metrics identified below as good initial indicators of success.
Kuma is proud to support the increasing state commitment to privacy excellence in online services, and recently expanded their presence in the information security and privacy professional services realm with several statewide contract awards. Kuma currently works with national and international organizations across the public and private domains to improve their security, privacy, and identity postures. Read more about Kuma’s work with state privacy initiatives here.
Metics used to evaluate privacy levels described in StateScoop’s article “Delaware protects privacy best, report finds, “include:
- ISPs barred from sharing info with third parties based on state laws.
- ISPs require explicit consent to share customer data based on federal laws.
- Disposal of customer data timeframe.
- Companies are required to disclose when a breach occurs.
- Laws protect privacy of e-reader data in libraries.
- Social Media Privacy rules.
- Shield laws to protect journalists.
- Laws to protect employee privacy.
- Laws to protect K-12 student info.
- Laws to protect children’s privacy.
- Laws to protect IoT data.
We look forward to seeing states continue to expand and mature their privacy services as more and more data is moved to the online space and state services continue to shift to the “on demand” model of providing services.
