Consumer Privacy

Indiana Joins a Growing List of States Seeking to Tighten Data Security and Data Breach Notification Requirements in 2015

By Joseph J. Lazzarotti on December 23, 2014

Posted in Consumer Privacy, Data Security, Identity Theft, Information Risk, Written Information Security Program

As we reported, there are a number of signs pointing to a significant tightening of regulation and increased enforcement of data security mandates. Following efforts in New Jersey, New York and Oregon, Indiana Attorney General Greg Zoeller announced his office is seeking legislation that would better protect the online personal and financial information…

New Data Protection Powers Requested in Oregon

By Jackson Lewis P.C. on December 12, 2014

Posted in Consumer Privacy, Data Security, Identity Theft

On December 9, Oregon’s Attorney General, Ellen Rosenblum, announced to the Oregon House and Senate Judiciary Committee that she would be introducing legislation to expand existing personal data protections for Oregon consumers while implementing additional enforcement measures to combat non-compliance.

According to Ms. Rosenblum, Oregon’s laws have not kept up with the rapid increase in…

Data Security in 2015 for Banks, HIPAA Covered Entities, and Small Businesses Too

By Joseph J. Lazzarotti on December 12, 2014

Posted in Consumer Privacy, Data Security, Health Information Technology, HIPAA, Identity Theft, Information Management, Information Risk, Workplace Privacy, Written Information Security Program

Some have called 2014 the “Year of the Data Breach.” That may be true given the steady stream of large-scale data breaches affecting tens of millions of individuals. We do not know if this time next year commentators will be saying the same thing about 2015, but there are signs pointing to a…

EMPLOYERS BEWARE: MEDICAL IDENTITY THEFT ON THE RISE AND IS THE GOLDEN TARGET FOR HACKERS

By Jackson Lewis P.C. on December 5, 2014

Posted in Consumer Privacy, Data Security, HIPAA, Identity Theft, Information Risk, Written Information Security Program

As we’ve discussed previously, medical identity information is worth more than ten (10) times that of financial information on the black market. This gives hackers a financial incentive to obtain such information that is maintained not only by medical providers and pharmacies but also by employers who provide medical insurance coverage to their employees. Employers…

FCC Clarifies Solicited Fax Rule

By Jackson Lewis P.C. on November 6, 2014

Posted in Consumer Privacy

Just before the tricks and treats began, the FCC issued an order about another tricky practice—junk faxes. On October 30, 2014, FCC confirmed that all fax ads must contain an opt-out provision and comply with the rules set out in FCC’s 2006 Junk Fax Order. There is a six-month window for companies to come into…

Workplace Privacy, Data Management & Security Report