Report on Healthcare Provider HIPAA Progress

February 23rd, 2009

Here’s an interesting report from URAC about healthcare providers and HIPAA compliance progress…

Read the rest of this entry »

Surveillance: New Employee Privacy Law in Portugal

February 22nd, 2009

On Februry 17, 2009, a new workplace privacy law took effect in Portugal…

Read the rest of this entry »

Medical Identity Theft: Medical Equipment Co. Owner Sentenced to Prison

February 20th, 2009

I just ran across this U.S. Department of Justice (USDOJ) press release from January 20, 2009…

Read the rest of this entry »

2ND HIPAA Sanction: CVS Must Pay $2.25 Million And Improve Info Sec Practices For Improper Disposal

February 19th, 2009

The 2nd ever to date HIPAA sanction has been handed down by the Department of Health and Human Services (HHS)…

Read the rest of this entry »

I’m Now Tweeting!

February 18th, 2009

I just jumped on the Twitter bandwagon…

Read the rest of this entry »

Humorous Security Calendar

February 18th, 2009

Check out a sample month of a humorous information security wall calendar that Rick Lawhorn created that “tracks notable breaches, infosec facts and viruses.”

Massachusetts Encryption Law Pushed Back Once More

February 18th, 2009

Monday I received messages almost at the same time from Brandon Dunlap and Brett J. Byers; thanks Brandon and Brett!
They were notifying me of yet another delay in the Massachusetts law, “201 CMR 17.00: STANDARDS FOR THE PROTECTION OF PERSONAL INFORMATION OF RESIDENTS OF THE COMMONWEALTH
As explained on the website:

Read the rest of this entry »

Data Privacy Day Activities That Deserve Recognition

February 17th, 2009

January 28 was international Data Privacy Day, which I blogged about a few times here, here, and here.
While the Intel site posted about many of the events that occurred, there were many more they missed.
Here are a few of them:

Read the rest of this entry »

New Online Behavioral Advertising Principles: Self Regulation Does Not Mean Less Scrutiny By The FTC!

February 16th, 2009

On February 12 the U.S. Federal Trade Commission (FTC), the most actively aggressive oversight agency in the U.S. with regard to enforcing privacy protections, released new behavioral advertising principles

Read the rest of this entry »

Cloudy Privacy Computing

February 15th, 2009

Cloud computing is an attractive, low-cost means of collaboration. But have you considered the risks involved with placing documents with PII “in the cloud”?
The monthly column I wrote for the December 2008 CSI Alert was, “Cloudy Privacy Computing.” Here’s the first section…

Read the rest of this entry »