Photo of Mindi Giftos

Mindi Giftos

Subscribe to Mindi Giftos's Posts

A legal and civic leader, Mindi is a staunch advocate for her clients and community. She serves as managing partner of Husch Blackwell’s Madison office and co-leads the firm’s Internet of Things (IoT) and Data Privacy, Cybersecurity & Breach Response teams. She closely tracks developments in the law and ensures the firm’s service and offerings in these areas address the rapidly changing and complex legal, regulatory and risk environments in which clients operate.

Follow:Read more about Mindi GiftosMindi's Linkedin Profile
Coronavirus

Multiple state governors have issued orders for their residents to shelter at home and for non-essential businesses to close. We expect this to occur in most other states, if not all, in the near term. Although the directives vary from state to state, there is a focus on keeping “essential” businesses and functions operational. How do we know what businesses and services are “essential”?

That question is likely to be up for significant debate; however, guidance has been offered by the U.S. Department of Homeland Security Cybersecurity & Infrastructure Security Agency (CISA).  Christopher Krebs, Director of CISA, announced in a memorandum that CISA, in collaboration with other federal agencies and the private sector, have developed an initial list of “Essential Critical Infrastructure Workers.” This list is designed to assist state, local and tribal officials as they work to protect their communities, while ensuring continuity of functions critical to public health and safety, as well as economic and national security. 

Fresh off the heels enacting the California Consumer Privacy Act, California Governor, Jerry Brown, signed the country’s first law governing the security of Internet of Things or connected devices. The bill, SB 327, is entitled “Security of Connected Devices.”

Beginning on January 1, 2020, all manufacturers of connected devices will be required to equip the device with reasonable security features to protect against the unauthorized access, destruction, use, modification or disclosure of information that is collected or transmitted by the device.