Governor Carney Signs Legislation Extending Cybersecurity Protections for Delawareans

Legislation, sponsored by Representative Baumbach, requires additional notifications, free credit monitoring

NEWARK, Del. – Governor John Carney on Thursday signed into law House Substitute 1 for House Bill 180, legislation that requires additional protections for Delawareans whose personal information may be compromised in a computer breach, including additional notifications and free credit monitoring services.

Representative Paul Baumbach sponsored the legislation, which passed the General Assembly with broad bipartisan support. The new law requires businesses to safeguard information, and requires businesses to provide free credit monitoring services for customers whose sensitive personal information is compromised in a cybersecurity breach. With Governor Carney’s signature on Thursday, Delaware became just the second state to require businesses to provide those services, after Connecticut.

Governor Carney Signs Legislation Extending Cybersecurity Protections for Delawareans
House Substitute 1 for House Bill 180, sponsored by Representative Baumbach, requires additional protections for Delawareans whose personal information may be compromised in a computer breach, including additional notifications and free credit monitoring services.


“We live in a digital world where threats to personal information are becoming more common, and the cyber threat is one of the most serious economic challenges we face,” said Governor John Carney. “It makes sense to offer additional protections for Delawareans who may have their information compromised in a cybersecurity breach. At the same time, we will continue to connect businesses to training and resources that will help them safeguard and protect their data. I was also proud to sign this legislation on Thursday alongside Dr. Assanis at the University of Delaware, an institution that is helping lead innovation around cybersecurity. Thank you to Representative Baumbach for leading on this issue, and to all members of the General Assembly who voted to approve these new consumer protections.”

“We have worked with many stakeholders to perfect this cybersecurity legislation so that Delawareans will have proper consumer notifications and protections in place when there is a security breach of personal information. In our technological-driven world these data breaches have become too common and impact a wide variety of individuals. We had to find a way to address those concerns,” said Representative Baumbach, D-Newark. “This is a meaningful step forward in addressing these breaches so that we guarantee better protections for our residents and help them rebuild their lives after a cyber-attack. In particular, the bill focuses on notification requirements and additional help with identity theft mitigation services in cases where Social Security numbers are breached.”

House Bill 180 provides the first updates in Delaware law in more than a decade to address advances in cyber threats. The new law will require all companies doing business in Delaware to implement and maintain reasonable security to protect personal information. Delaware is one of 14 states to impose explicit data security obligations on the private sector.

Thursday’s signing ceremony was held at the University of Delaware, which offers a master’s program in cybersecurity to help drive innovation. UD’s Small Business Development Center also trains small businesses to identify cybersecurity threats and protect their business and customer data.

“The University of Delaware is committed to working with the state and our other partners to address the large and growing challenges of cybersecurity,” said Dr. Dennis Assanis, President of the University of Delaware. “UD is devoting unique resources to developing and advancing technologies and solutions for a safe and resilient cyberspace by contributing our expertise in computer science, corporate governance and public policy.”

“The Delaware Small Business Development Center is proud to be part of the Governor’s signing of House Bill 180,” said Daniel Eliot, the Manager of Technology Business Development at UD’s Small Business Development Center. “For the last two years, we have worked closely with the state and other stakeholders, focused on providing training and resources to help Delaware’s small businesses make a reasonable effort to secure their businesses. It’s a matter of fact: all businesses today are technology-based businesses and are vulnerable to cyber breach. We want to be sure Delaware’s businesses are technologically and behaviorally prepared to combat such attacks.”

“The increase in cyberattacks and data breaches creates an imperative for Delaware to protect citizen information commonly used by criminals to perpetrate identity theft and fraud,” said James Collins, Chief Information Officer at the Delaware Department of Technology and Information. “We all know that prevention is the best strategy and that is our main goal. We want to be proactive so that our citizens and business community can avoid these threats.”


DTI Honors CR Graduate

July 26, 2017

PHOTO CREDIT: Dave Chambers Pictured L-R: Dr. Kevin Fitzgerald, Liz Boaman, Sudha Narayanan, PN Narayanan, Anirudh Narayanan, Dr. Sherry Kijowski, Rep. Lyndon Yearick, DE CIO James Collins

DOVER, Del. — Delaware Department of Technology and Information (DTI) CIO James Collins recently hosted a celebration to recognize the achievement of Caesar Rodney graduate Anirudh Narayanan, who took first place in the Microsoft Excel 2013 category at the recent Microsoft Office Specialist U.S. National Championship in Orlando, FL. Anirudh will represent the First State and the nation when he competes at the upcoming Microsoft Office World Championship. Joined by special guests including Anirudh’s parents, PN and Sudha Narayanan, along with Caesar Rodney School District’s Superintendent Dr. Kevin Fitzgerald, High School Principal Dr. Sherry Kijowski, teacher Liz Boaman, and 34th District Representative Lyndon Yearick, Collins presented Anirudh with a tribute on behalf of Governor John Carney and Lt. Governor Bethany Hall-Long.

“It is incredibly important for us to take time to recognize Anirudh and others like him,” commented CIO James Collins. “As a society we pull out all the stops for sports accomplishments and it is equally important that we do so for STEM achievements!”

Media Contact:
Christina Dirksen, Strategic Communications Manager, DTI
(302) 739-9736 

Governor Carney, Chief Information Officer Announce Innovative Cybersecurity Partnership for Students

Online cybersecurity training offers scholarship opportunities for Delaware high school juniors and seniors, and college students

WILMINGTON, Del. – Governor John Carney announced on Friday a new, innovative cybersecurity training partnership between the SANS Institute and the State of Delaware that provides Delaware high school juniors and seniors at least 16 years old, and college students interested in a cybersecurity career, the opportunity to learn basic cybersecurity skills and test their aptitude through a no-cost online game of discovery called CyberStart.

“Delaware’s future is an innovation economy where technology takes center stage, and our state needs a pipeline of talented cybersecurity professionals,” said Governor John Carney. “I am excited that Delaware is able to partner with an organization like the SANS Institute to engage our state’s high school and college students, and encourage them to explore the field of cybersecurity.”

An introductory practice version of CyberStart will be available online from July 14-28, 2017. Participants who complete five of the eight practice modules will be invited to compete in the full-scale program that will run from August 1-28, 2017. The practice round is mandatory for those who would like to compete.

Participants do not need prior cybersecurity knowledge. Students from Delaware who excel in the CyberStart game will have the opportunity to share in $150,000 in scholarships for further cyber-education, and ultimately for $500,000 in scholarships for college and graduate-level training in preparation for highly sought-after industry certifications.

Delaware students will be competing with students from Virginia, Michigan, Rhode Island, Iowa, Nevada, and Hawaii for scholarships sponsored by the SANS Institute.

“I applaud the SANS Institute for working to ensure the cyber workforce of tomorrow is available to protect our information and systems. The CyberStart program is an excellent and fun opportunity for students who think they may be interested in cybersecurity to determine if they have the passion and aptitude to pursue it as a career,” said Delaware Chief Information Officer James Collins. “I hope young people all across Delaware take advantage of this great opportunity.”

Each player in CyberStart begins as a “cyber protection agent” responsible for protecting an important operational base.  The student chooses and solves challenges, earning points along the way. A cyber protection agent field manual provides answers to questions that may arise and hints help when players get stuck. When the player has solved a sufficient number challenges at one level, a new level opens up and new challenges appear – for a total of 31 levels.

When asked why SANS is making this investment, SANS Director of Research, Alan Paller, said “Because the nation desperately needs more highly-skilled cyber professionals, and we have new evidence that CyberStart will radically improve the quality and preparation of people entering the cybersecurity field.  SANS trains more than 30,000 advanced cybersecurity professionals each year for military and intelligence organizations and for large high-tech companies in the U.S. and its allies. We discovered that those who have mastered the topics taught and measured in the CyberStart program do far better than others in the advanced cybersecurity courses that prepare the critically needed people. By opening CyberStart to hundreds of thousands of students we may be able to help the nation identify the next generation of talented people who will excel in this critical field.”

For more information and to get started playing CyberStart, please visit

Governor Carney and Legislators Announce Bill to Expand Cybersecurity Protections for Delawareans

House Bill 180, sponsored by Representative Baumbach, has bipartisan support in General Assembly

DOVER, Del. – Governor John Carney and members of the General Assembly announced legislation on Thursday that would expand protections for Delawareans affected by computer security breaches.

The bipartisan legislation, House Bill 180, is sponsored by Representative Paul Baumbach. Additional sponsors include Senator David Sokola, Senator Ernesto “Ernie” Lopez, Senator Brian Pettyjohn, Representative Stephanie T. Bolden and Representative Deborah Hudson.

“This legislation would provide additional, common sense protections for Delawareans whose personal information may be compromised in a cybersecurity breach,” said Governor Carney. “We live in a world where these types of breaches are becoming more common, and we should enact additional safeguards for all Delawareans who may be affected. Thank you to Representative Baumbach and all members of the General Assembly who are taking on this important issue.”

“I am pleased to have been able to work with colleagues, members of the governor’s team and members of the technology branch of the Delaware bar to enable Delaware to play catch-up, if not leapfrog, on consumer notifications and protections when there are security breaches of your personal identification. Unfortunately these breaches are becoming too common and often involve a large number of victims,” said Representative Baumbach. “House Bill 180 will improve the notification requirements and ensure that in cases where Social Security numbers are breached, victims receive one-year of identity theft mitigation services. There is more to do, but this bill puts Delaware back on track to ensure better protection for our residents against identity theft due to data breaches.”

“In the ever changing world of cyber-technology, we must be responsive as a government in stepping up to protect Delawareans against the increasing threat of security breaches,” said Senator Sokola. “This legislation asked more of businesses when it comes to vigilance and reporting to law enforcement without burdening them or adding to their overhead. It’s a smart, collaborative path forward.”

“In light of all of the issues we’ve had in regard to instances of our systems being targeted, I think this legislation is extremely important at this time, not just for Delaware, but for our country,” said Senator Lopez.

“I am pleased to be a co-sponsor of this important bill,” said Representative Hudson. “In today’s ever-changing world of technology, there can never be too many safeguards in place to protect Delawareans against identity theft. This bill allows us to continue making strides in keeping citizens’ information safe and secure.”

The legislation would increase cybersecurity protections for Delawareans by requiring businesses to safeguard personal information, and to provide notice to Delawareans affected by a breach within 60 days of discovering the breach. In the event the affected class exceeds 500 residents, the Attorney General must be notified.

The legislation also requires breached entities to provide a year’s worth of identity protection services to affected residents, if Social Security numbers were compromised. Delaware would become just the second state to extend identity theft protection services, by law, to residents affected by a security breach.

“The unfortunate increase of cyber-attacks and data breaches across public and private sectors necessitates additional legal safeguards for victims and raising the bar on organizations by requiring cybersecurity measures be in place to guard personally identifiable information,” said James Collins, Chief Information Officer at the Delaware Department of Technology and Information. “This legislation adds provisions to the law to protect citizen information commonly used by criminals to perpetrate identity theft and fraud. The bill also strengthens the state’s position when working with vendors of cloud and hosted solutions by consistently ensuring Delawareans are notified and afforded credit monitoring in the event of a cyber incident.”


Hands On Tech Day For 8th and 9th Grade Girls

DigiGirlz Returns to Wilmington University’s Dover Campus, May 2, 2017
Registration Now Open

Dover, DE: Girls in the 8th and 9th grades are invited to spend a fun filled day learning about careers in technology and getting an inside glimpse of what it might be like to work in the technical fields. DigiGirlz Day is designed to encourage young women to explore the possibilities available in the fields of Science, Technology, Engineering and Math (STEM).

DigiGirlz is May 2, 2017 at Wilmington University’s Dover Campus starting at 8:30 am. It is free and open to 8th and 9th grade school year girls in public, private, charter and home schools. Teachers may attend to observe their students in selected program activities; individual students are also encouraged to participate. Pre-registration is mandatory and lunch will be provided.

This year’s DigiGirlz Day features several different career track explorations including Chemistry, Video Game Creation, and Cyber Security. Girls will participate in hands-on activities including writing code for a simple video game, exploring the science behind creating beauty products, or learning about the tools professionals use to fight computer hackers. New this year will be Roundtable discussions with female professionals in the STEM-related careers.

Recognizing that young women historically shy away from STEM education, especially as they enter their high school years, DigiGirlz is designed to address some of the myths and misconceptions about careers in more technical industries. Through lively discussion and interactive activities, the event is designed to encourage young women to put aside concerns about their ability to pursue education and careers in technical fields.

DigiGirlz is sponsored by Delaware’s Department of Technology and Information, Microsoft, the Delaware Center for Educational Technology, Wilmington University, Delaware Department of Education, JP Morgan Chase, and Dell.

Registration information can be found at