Archive for March, 2009

68 Info Sec & Privacy Tweets Digest Back Through March 7

Sunday, March 15th, 2009

Once more I’m providing a digest of the Twitter tweets I put out (PrivacyProf) over the past week that provided pointers to interesting and useful news reports and pieces of information that I do not want to have lost in the vastness of the ever-growing twittersphere. So, for posterity and my own future reference…my own backup if you will…here’s a listing of the ones I want to be able to look back upon without paging through multiple posts on my PrivacyProf account…

(more…)

1746 Organizations In The U.S.’s EU Safe Harbor Program

Thursday, March 12th, 2009

A type of project I really love to do is a privacy impact assessment (PIA). For companies who collect or otherwise handle the personally identifiable information (PII) of individuals from multiple countries, typically doing a cross border data flow analysis of the PII is within the scope of the PIA.

(more…)

Court Decision on FACTA Credit Card Transaction Receipt Violations

Wednesday, March 11th, 2009

I was doing a bit of research around the Fair and Accurate Credit Transactions Act (FACTA), and ran across an interesting recent court decision…

(more…)

Court Decision on FACTA Credit Card Transaction Receipt Violations

Wednesday, March 11th, 2009

I was doing a bit of research around the Fair and Accurate Credit Transactions Act (FACTA), and ran across an interesting recent court decision…

(more…)

Here’s the link for Web 2.0 Privacy and Security Considerations

Tuesday, March 10th, 2009

I forgot the link to my article yesterday!!
Here it is…
Web 2.0 Privacy and Security Considerations

Web 2.0 Privacy and Security Considerations

Monday, March 9th, 2009

I’ve been having a lot of conversations in the past few weeks about Web 2.0 privacy and security issues. Web 2.0 certainly has greatly enhanced how the Internet can be used. Posting information on blogs, social networking sites, microblogs (such as Twitter), texting, IMing and an assortment of other types of activities have become a normal part of many people’s lives.

(more…)

Web 2.0 Privacy and Security Considerations

Monday, March 9th, 2009

I’ve been having a lot of conversations in the past few weeks about Web 2.0 privacy and security issues. Web 2.0 certainly has greatly enhanced how the Internet can be used. Posting information on blogs, social networking sites, microblogs (such as Twitter), texting, IMing and an assortment of other types of activities have become a normal part of many people’s lives.

(more…)

Most Laws Are Flawed, But It Is Up To Us To Make Them Better & Make Them Work

Friday, March 6th, 2009

Rafal Los makes some very good points in his post “Analysis of the Stimulus Bill and Healthcare Privacy” from a few days ago. I started writing all my thoughts as a comment to him, but then decided it would work well as a blog post…

(more…)

UK Company Caught Selling Their Employees’ & Job Applicants’ PII

Thursday, March 5th, 2009

Here’s an interesting shocking story about some bad…make that VERY BAD…business decisions in the UK to make money by selling employees’, and job applicants’, personally identifiable information (PII) as a revenue stream…

(more…)

A Cornucopia Of Audit, Information Security and GRC Information

Wednesday, March 4th, 2009

It was great to see Dan Swanson include some of my resources in his Security Insider blog posting today!

(more…)