Posts Tagged ‘FERPA’
Friday, December 12th, 2008
I saw some interesting news from the OS OCR Privacy List listserve. If you are with an education institution or a healthcare covered entity, take some time to read the new guidance about the relationship between FERPA and HIPAA…
(more…)
Tags:awareness and training, Department of Education, FERPA, HHS, HIPAA, Information Security, IT compliance, IT training, policies and procedures, privacy training, risk management, security training
Posted in Information Security, Laws & Regulations, Privacy and Compliance | No Comments »
Thursday, December 11th, 2008
New FERPA Regulations were issued yesterday…
(more…)
Tags:awareness and training, FERPA, Information Security, IT compliance, IT training, personal information, personally identifiable information, PII, policies and procedures, privacy training, risk management, security training
Posted in Laws & Regulations, Privacy and Compliance | 1 Comment »
Thursday, December 11th, 2008
New FERPA Regulations were issued yesterday…
(more…)
Tags:awareness and training, FERPA, Information Security, IT compliance, IT training, personal information, personally identifiable information, PII, policies and procedures, privacy training, risk management, security training
Posted in Laws & Regulations, Privacy and Compliance | No Comments »
Wednesday, December 19th, 2007
For the past 10 years I have been driving the same, reliable, non-troublesome car. It still looks good enough (I don’t really worry about driving an “it” kind of car). However, it is getting a bit rattly, and my friends have been increasingly giving me a hard time about continuing to drive it past the 200,000 mile mark. I never really cared much until my starter went out a couple of months ago. I wondered, what if this had happened to me while I was in a neighboring state at a client site? Sure, I have AAA, but it would still be a hassle. So, I decided if I saw a car I really liked and that had all the features I wanted, I would splurge and get a new car.
Well…I just happened to find a car I absolutely loved after seeing and driving it. I was at the dealer paying for it yesterday, and the sales person asked for my Social Security Number (SSN).
(more…)
Tags:awareness and training, FERPA, GLBA, HIPAA, identity theft, Information Security, Iowa law, IT compliance, personally identifiable information, PII, policies and procedures, privacy, privacy policy, risk management, security awareness, security training, social security number, SSN
Posted in Privacy and Compliance | 1 Comment »
Tuesday, November 6th, 2007
Here’s a case I found interesting…the U.S. District Court for the Eastern District of Tennessee ruled on October 24th that providing a group of record company plaintiffs with student personally identifiable information (PII) does not violate the U.S. Family Educational Rights and Privacy Act (FERPA).
(more…)
Tags:awareness and training, congress, data protection law, FERPA, government, Information Security, IT compliance, personally identifiable information, PII, policies and procedures, privacy, privacy law, risk management, security law, security training, University of Tennessee at Knoxville
Posted in Laws & Regulations, Privacy and Compliance | No Comments »
Tuesday, November 6th, 2007
Here’s a case I found interesting…the U.S. District Court for the Eastern District of Tennessee ruled on October 24th that providing a group of record company plaintiffs with student personally identifiable information (PII) does not violate the U.S. Family Educational Rights and Privacy Act (FERPA).
(more…)
Tags:awareness and training, congress, data protection law, FERPA, government, Information Security, IT compliance, personally identifiable information, PII, policies and procedures, privacy, privacy law, risk management, security law, security training, University of Tennessee at Knoxville
Posted in Laws & Regulations, Privacy and Compliance | No Comments »
Sunday, February 11th, 2007
There now seem to be so many privacy breaches that it is hard to choose which one to discuss…
Last Wednesday, 2/7, Johns Hopkins University reported personal information on 135,000 employees and patients on nine backup tapes were missing that had been given to a contractor, Anacomp Co. Inc., to make microfiche backups.
(more…)
Tags:awareness and training, FACTA, FCRA, FERPA, FTC, FTC Act, HIPAA, identity theft, Information Security, IT compliance, policies and procedures, privacy, privacy breach
Posted in identity theft, Information Security, Laws & Regulations, Privacy and Compliance, Privacy Incidents | 4 Comments »