Stolen Print Documents With PII Found On Crook; Otherwise UCM Would Not Have Known The Reports Were Stolen

July 1st, 2009

Late last week one of my alma maters, the University of Central Missouri, reported that two printed computer reports containing 7000 students’ names, social security numbers, phone numbers, addresses, and birthdates were stolen from somewhere on the campus.

Read the rest of this entry »

Stolen Print Documents With PII Found On Crook; Otherwise UCM Would Not Have Known The Reports Were Stolen

July 1st, 2009

Late last week one of my alma maters, the University of Central Missouri, reported that two printed computer reports containing 7000 students’ names, social security numbers, phone numbers, addresses, and birthdates were stolen from somewhere on the campus.

Read the rest of this entry »

Hear Common, Dumb and Dangerous Privacy Assumptions On The Radio!

June 30th, 2009

Today I will be on MyTechnologyLawyer.com radio show to an hour program talking about the common privacy mistakes and assumptions made by businesses. This will be a more in-depth look at the issues from my post from a couple of weeks ago, “5 Common, Dumb and Dangerous Privacy Assumptions
Here are the details:

Read the rest of this entry »

Hear Common, Dumb and Dangerous Privacy Assumptions On The Radio!

June 30th, 2009

Today I will be on MyTechnologyLawyer.com radio show to an hour program talking about the common privacy mistakes and assumptions made by businesses. This will be a more in-depth look at the issues from my post from a couple of weeks ago, “5 Common, Dumb and Dangerous Privacy Assumptions
Here are the details:

Read the rest of this entry »

South Carolina & Alaska Privacy Breach Notice Laws Go Into Effect July 1

June 29th, 2009

This week two more U.S. breach notice laws go into effect…

Read the rest of this entry »

Voice Recognition Software Puts Top Cop In Hot Water

June 25th, 2009

Yesterday I read a fascinating story from Australia…

Read the rest of this entry »

Movies and TV Shows to Use for Infosec and Privacy Training and Awareness

June 23rd, 2009

After many long hours, I’ve finally submitted the draft manuscript for the 2nd edition of my “Managing an Information Security and Privacy Awareness and Training Program” book. However, I will still have one more chance to make changes. One of the 23 appendices within my book provides lists of resources; books, web sites, activities, games and so on. One of my lists is for movies and television shows that can be used in training or for awareness activities…

Read the rest of this entry »

Don’t Manage Employee Online Activities By Requiring Their IDs & Passwords!

June 18th, 2009

I read a story about a city government agency actually asking job applicants to provide their IDs and passwords for any online social networking type of site they participate in…

Read the rest of this entry »

5 Common, Dumb and Dangerous Privacy Assumptions

June 17th, 2009

Today Kevin Beaver posted a nice article, “Dumb things IT consultants do” that included more than one warning about making assumptions. Kevin’s nice post made me think about all the dangerous assumptions consulants and practitioners often make when it comes to evaluating privacy practices…

Read the rest of this entry »

FTC Issued Consent Order for GLBA Privacy Rule and Safeguards Rule Violations

June 16th, 2009

Today the FTC issued a consent order against mortgage lender James B. Nutter & Company for GLBA Privacy Rule and Safeguards Rule violations resulting from having an inadequte information security program and safeguards. The requirements will result in, among other actions, 20 years of ongoing activities by James B. Nutter & Company; much more costly than it would have been to have established appropriate information security safeguards to begin with…

Read the rest of this entry »