To read more, click here.

To read more, click here.

To read more, click here.

To read more, click here.

To read more, click here.

The law requiring the license is the subject of a lawsuit filed in June by the Institute for Justice-Texas Chapter for a group of plaintiffs that includes Houston computer repair company Citronix Tech Services.

As it stands, computer repair technicians and consumers who knowingly use a tech who doesn’t have a PI license are at risk of violating the law, which carries criminal penalties of up to one year in jail, a $4,000 fine and civil penalties up to $10,000 per violation.

“It’s making me a lot more cautious abut the work I take,” says David Norelid, who owns Citronix Tech Services. “Mostly what we do is cleaning up computers, removing viruses — but that gets tricky. Just to remove it is fine, but if I note the Web sites the owner visited before he got the virus to find out where he got it, I would then be producing a report which is defined under this law as an investigation requiring a PI license. And not only would I be liable, but the client would be also.”

But Randy Kildow, owner of Randy Kildow Investigations in Dallas and a member of the Texas Association of Licensed Investigators — which proposed the legislation along with the Association of Security Services and Investigators of the State of Texas — doesn’t see what all the fuss is about.

“This is not new,” Kildow says. “When you look into somebody’s background, character or movements, you’ve always had to have a license to do that. If you’re doing it on a computer, that matches the test.”

But updating the law to accommodate 21st century technology has not been quite so straightforward.

State Rep. Joe Driver of Garland, who first introduced the bill, did not intend for it to be interpreted the way it has been by some people, says Betty Horton, an aide to the legislator.

Horton says the law was intended to apply primarily to the special area of computer forensics, which is a law enforcement or litigation-related investigation performed on a computer to gather evidence of a possible crime or information to be used in a civil lawsuit.

“It was intended to apply only to investigations involving the rules of evidence in the law,” she says. “It was never intended that enforcement action be taken against computer techs doing ordinary work like looking for spyware or viruses.”

Some followers of the issue worry about provisions in the law that also make reporting on information found in a computer a violation unless done with a PI license. That could affect any tech who tells a customer what they found — as well as network administrators or computer techs who report to a company or an employer after investigating a network security breach or Web sites visited on employees’ computers.

But Horton says the law is not applicable to company network administrators because the computer system belongs to the company, whose own employee or contractor did the work and made the report.

Kildow agrees that the intent of the law was primarily for computer forensics, but he concedes there are “some gray areas” in interpreting just who or what activities are covered.

Mark Kerzner, president of Top 8 Corp., a Houston company that performs computer forensic investigations and other tech work, says his company obtained a PI license about a year ago — before this bill came up — because they thought it might become necessary for some of the work they do.

And getting the PI license was not easy, he says.

“Our security manager had to go to Austin and take a tough exam. … and we also have to have insurance,” Kerzner says. “There’s lots of money involved in doing this.”

According to the Institute for Justice, there is a $441 fee to apply for a PI license and a $416 annual renewal fee, plus a requirement to carry $200,000 in professional liability insurance.

But, Kerzner says, the license requirement as it stands “has nothing to do with forensics. It’s irrelevant. It’s very confused. And most computer repair people have no idea about it.”
NO CLARITY

Right now, those following the issue say the Private Security Board seems to be laying fairly low in terms of taking any action to enforce the new law, although the board did send a cease and desist letter to a Best Buy Geek Squad in Houston after a customer brought in a computer to have the drive checked, says Matt Miller, executive director of Institute for Justice-Texas and lead attorney in the lawsuit.

Meanwhile, the board has twice declined to enact clarifying language into the law.

In July and again on Oct. 30, the Private Security Board tabled a proposal to issue a rule that the repair or maintenance of a computer does not require licensing under the Private Security Act “even if during the course of the repair or maintenance the person discovers information” that is described under the act as constituting an investigation or investigative report.

Horton says the issue will be taken up for amendment and clarification in the upcoming session of the Legislature. She expects legislators to take a broader look at what might constitute the best public policy in relation to the law.

“There may be other licenses that could stand in the place of a PI license for investigations involving rules of evidence in the law, and anyone not involved in computer forensics doesn’t need to be licensed,” she says.

Computer Forensics: Evidence Collection and Management examines cyber-crime, E-commerce, and Internet activities that could be used to exploit the Internet, computers, and electronic devices.

The book focuses on the numerous vulnerabilities and threats that are inherent on the Internet and networking environments and presents techniques and suggestions for corporate security personnel, investigators, and forensic examiners to successfully identify, retrieve, and protect valuable forensic evidence for litigation and prosecution.

The book is divided into two major parts for easy reference. The first part explores various crimes, laws, policies, forensic tools, and the information needed to understand the underlying concepts of computer forensic investigations. The second part presents information relating to crime scene investigations and management, disk and file structure, laboratory construction and functions, and legal testimony. Separate chapters focus on investigations involving computer systems, e-mail, and wireless devices.

Presenting information patterned after technical, legal, and managerial classes held by computer forensic professionals from Cyber Crime Summits held at Kennesaw State University in 2005 and 2006, this book is an invaluable resource for those who want to be both efficient and effective when conducting an investigation.

“CCF learned of the pending legislation several months ago, so we obtained the license to ensure our clients had one less thing to thing to worry about in choosing their vendor,” remarked Patrick Ahern, President of CCF. “This is a dynamic time for our field and the rules are constantly changing at the
state level, as well as federally. Obtaining the PI license is just another example of our vigilance to stay ahead of constantly changing market conditions.”

The Center for Computer Forensics has been in business and a part of the Michigan market for eleven years and has played a significant role within the development of the computer forensics field.

Despite signs of dementia, he told the same story over and over: His wifes burly home health aide had beaten him. But the health aide and the wife insisted he had fallen. Now it was up to the members of Orange Countys Elder Abuse Forensic Center to decide which story was true.

As the man lay on a gurney, he was interviewed by a team from the center: a geriatrician, a social worker and an investigator from the sheriffs office. The bruises on the mans chest, they determined, were the result of being punched. There were bloody outlines of a shoe on the mans leg. His clear, consistent story, and cognitive tests, persuaded the prosecutor to charge the aide with a felony.