The #HIPAA Security Rule update #NPRM is a doozy. The overall theme is, "We gave y'all a lot of flexibility, which we thought you'd use responsibly, but you didn't, so we're significantly tightening the regulations."
This update is necessary and overdue.
Of course, it could take years before it actually goes into effect, even assuming that the Trump administration doesn't torpedo it. I really hope they don't, but who knows.
#infosec #privacy #healthcare

My Interisle colleagues and I submitted a response to the U.S. Department of Commerce’s Notice of Proposed Rulemaking "Taking Additional Steps To Address the National Emergency With Respect to Significant Malicious Cyber-Enabled Activities" [ https://www.federalregister.gov/documents/2024/01/29/2024-01580/taking-additional-steps-to-address-the-national-emergency-with-respect-to-significant-malicious ]

This proposed rulemaking solicited comments on proposed special measures to deter foreign malicious cyber actors' use of U.S. IaaS products. Our comments consider the proposal of regulations to “verify the identity of foreign customers of IaaS products”, in particular noting that the DNS should be treated as an IaaS. Find our comment at https://www.regulations.gov/comment/DOC-2021-0007-0478

[I'll note here that we commented within the proposed regs for "foreign customers". We believe that identity verification should not be limited to foreign customers but should encompass all customers.]

Interisle also commented on the proposal of regulations that “require providers of certain IaaS products to submit a report to the Secretary when a foreign person transacts with that provider or reseller to train a large Artificial Intelligence (AI) model with potential capabilities that could be used in malicious cyber-enabled activity”. Interisle’s comments are based on what we have observed analyzing cybercrime data from the Cybercrime Information Center, visit https://cybercrimeinfocenter.org

#IAAS #DNS #cybercrime #NPRM #identityverification #uscyberregs

Federal Register :: Request Access

ATF Updated definitions of "Terrorism" and “Engaged in the Business” as a Dealer in Firearms

The Attorney General signed ATF’s notice of proposed rulemaking (#NPRM) 2022R-17, “Definition of ‘Engaged in the Business’ as a Dealer in Firearms," which proposes to amend ATF’s regulations to implement the provisions of the Bipartisan Safer Communities Act (#BSCA), enacted on June 25, 2022.

The NPRM proposes to
👉incorporate the BSCA’s definition “predominantly earn a profit,”
👉creating a stand-alone definition of “terrorism,” and
👉amending the definitions of “principal objective of livelihood and profit” and “engaged in the business” to ensure each conforms with the BSCA’s statutory changes and can be relied upon by the public.

| Bureau of Alcohol, Tobacco, Firearms and Explosives

https://www.atf.gov/firearms/definition-engaged-business-dealer-firearms

Definition of “Engaged in the Business” as a Dealer in Firearms | Bureau of Alcohol, Tobacco, Firearms and Explosives

On August 30, 2023, the Attorney General signed ATF’s notice of proposed rulemaking (NPRM) 2022R-17, “Definition of ‘Engaged in the Business’ as a Dealer in Firearms," which proposes to amend ATF’s regulations to implement the provisions of the Bipartisan Safer Communities Act (BSCA), enacted on June 25, 2022.

LSA retractable gear:

"The proposed rule would remove the fixed landing gear limitation as an eligibility requirement in § 22.100. Accordingly, this rule would allow light-sport category aircraft to be designed with fixed OR retractable landing gear, or with floats for aircraft intended for operation on water.”

#MOSAIC #FAA #LSA #NPRM

LSA engines:

"This proposed rule would omit the single reciprocating engine limitation as an eligibility requirement in § 22.100. Accordingly, this proposed rule would allow light-sport category aircraft to be built with any number and type of engines or motors.”

#MOSAIC #FAA #LSA #NPRM

Seating:

"This proposed rule, in § 22.100, would keep the maximum seating capacity of not more than two persons, including the pilot, for all classes of light-sport aircraft
EXCEPT AIRPLANES. This proposal would allow airplanes to have a maximum seating capacity of not more than four persons, including the pilot.”

#MOSAIC #FAA #LSA #NPRM

Faster speeds:

“...proposed § 22.100(a)(4) would include a Vh limit of 250 knots CAS for light-sport category aircraft to account for
potential advances in technology and manufacturing practices that could enable higher speeds.”

#MOSAIC #FAA #LSA #NPRM

"FAA proposes to expand the kinds of operations
that can be performed by light-sport category aircraft.

Specifically, this proposal would
permit light-sport category aircraft to be used in certain aerial work operations for aircraft that meet the applicable FAA-accepted consensus standard for that operation.”

#MOSAIC #FAA #NPRM