Posts Tagged ‘IT compliance’

Smart Grid Privacy: Possible Privacy Standards To Address Concerns

Saturday, November 28th, 2009

Sorry to be so tardy in getting a blog post out. As many of you know I’ve been working with the NIST Smart Grid Privacy Subgroup since late June. The work done for this group is through time volunteered by all involved.
As a quick recap, I led the privacy impact assessment (PIA) for the consumer-to-utility portion of the planned smart grid during the late June to late August/early September time frame. On Friday, 11/20, I provided an update on our NIST groups activities during the Gridwise Alliance phone conference; perhaps some of you were on that call?
Here are some links showing information about our NIST Smart Grid privacy group’s work:

(more…)

15 Smart Grid Privacy Concerns + Other Smart Grid Thoughts

Monday, November 9th, 2009

I’ve had about half a dozen folks ask me how things are going with the work I’m doing with the NIST Smart Grid privacy group, and if I could provide an update since my last couple of posts on the topic here and here.
The time is going by much too quickly, and I am getting a bit nervous as we get closer to when we need to have the next draft of the NISTIR ready, tentatively set for December 31; there is so much more to do in this VOLUNTEER group effort…

(more…)

HIPAA And Surveillance In Hospitals

Thursday, November 5th, 2009

Over the years there have been many…too many…instances where doctors have performed the wrong types of surgeries on patients, and even the wrong surgeries on completely wrong patients…

(more…)

CEs and BAs: Be HIPAA/HITECH Compliant Or Pay A Hefty Penalty

Thursday, October 29th, 2009

The HHS released HITECH Act Enforcement Interim Final Rule today…

(more…)

Smart Grid Privacy: Laws and Implications

Wednesday, October 21st, 2009

I was recently asked several questions about my work with the NIST Smart Grid privacy group and associated issues. Here are a couple of those questions, and my answers to them…

(more…)

6 Critical Factors for Effective Information Security & Privacy Policies

Wednesday, October 14th, 2009

I’ve been feeling bad about not posting to my blog as often as I have historically…

(more…)

Who Are Your Business Associates?

Thursday, October 8th, 2009

Since just before HIPAA went actively into effect I’ve done a lot of HIPAA compliance work for covered entities (CEs). In the past few years I’ve done around 200 business associate (BA) information security and program reviews for just one CE, and these don’t even scratch the surface for how many BAs each CE has…

(more…)

HIPAA/HITECH Etc. Retention: Does Your Reality = Your Requirements?

Tuesday, October 6th, 2009

Last month I had the great pleasure of being a guest on Scott Draughon and Anyck Turgeon’s MyTechnologyLawyer.com radio show for a segment entitled, “Is encryption enough to achieve privacy?”
I was pleasantly surprised to see a large number of great follow-up questions following the show!
I covered one of them in my post, “Don’t Throw Your Privacy Out The Window; Know How Your PII Is Used” Here are a couple more of those many questions I want to answer in this post…

(more…)

Privacy For The Deceased

Wednesday, September 30th, 2009

Late last month I posted, “HIPAA/HITECH Breach Notice Rule: Applies To PHI of Deceased Individuals + Training A Key Element” and since then I’ve had around half a dozen or so folks ask me to write about privacy for the deceased…

(more…)

10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?

Friday, September 25th, 2009

I have had the great opportunity to participate in the NIST Smart Grid privacy standards group since July…

(more…)