Burglary at hospital employee’s home results in stolen flash drive and HIPAA data breach
Continue Reading Stolen Flash Drive Leads to Another HIPAA Data Breach
Joseph J. Lazzarotti
Joseph J. Lazzarotti is a principal in the Tampa, Florida, office of Jackson Lewis P.C. He founded and currently co-leads the firm's Privacy, Data and Cybersecurity practice group, edits the firm’s Privacy Blog, and is a Certified Information Privacy Professional (CIPP) with the International Association of Privacy Professionals. Trained as an employee benefits lawyer, focused on compliance, Joe also is a member of the firm’s Employee Benefits practice group.
In short, his practice focuses on the matrix of laws governing the privacy, security, and management of data, as well as the impact and regulation of social media. He also counsels companies on compliance, fiduciary, taxation, and administrative matters with respect to employee benefit plans.
Delaware’s Higher Education Privacy Act Becomes Law
Delaware becomes first state to prohibit academic institutions from accessing student and applicant social media activity…
Continue Reading Delaware’s Higher Education Privacy Act Becomes Law
Illinois Becomes Second State to Prohibit Employers from Demanding Social Media Passwords
Illinois becomes second state to prohibit employers from demanding social media passwords from employees and applicants…
Continue Reading Illinois Becomes Second State to Prohibit Employers from Demanding Social Media Passwords
Recruiter Misuse of Social Media Can Increase Risk of Liability
Recruiters are increasingly turning to social media to screen and recruit candidates. Jobvite’s 2012 Social Recruiting Survey found that 92% of respondents plan to use social media for recruiting. Often, recruiters are viewing and considering information that should not be utilized in the hiring process. LinkedIn is replete with information that should not be considered…
Employee’s Failure to Understand Facebook’s Settings Does Not Support Privacy Claim Against Employer
Employee’s intrusion upon seclusion claim fails despite argument that he did not realize his employer could view the Facebook posts he made to a co-worker’s Facebook wall.
Continue Reading Employee’s Failure to Understand Facebook’s Settings Does Not Support Privacy Claim Against Employer
Alaska DHSS HIPAA Breach Affects 501 Individuals, But Results in $1.7 Million Settlement with HHS Following Compliance Review
HIPAA audit following breach reported to OCR results in findings of noncompliance, settlement payment of $1.7 million and a three-year corrective action plan.
Continue Reading Alaska DHSS HIPAA Breach Affects 501 Individuals, But Results in $1.7 Million Settlement with HHS Following Compliance Review
Connecticut Amends Data Breach Notification Statute; Notice to Attorney General Now Required
Notice to Connecticut Attorney General now required following data breaches affecting state residents.
Continue Reading Connecticut Amends Data Breach Notification Statute; Notice to Attorney General Now Required
Vermont Becomes Eighth State to Limit Access and Use By Employers of Credit Information
Effective July 1, 2012, Vermont joins California, Connecticut, Hawaii, Illinois, Maryland, Oregon, and Washington as jurisdictions that restrict an employer’s right to obtain and use credit information for making employment decisions. Similar legislation is pending in many other jurisdictions. Click here for more information about the Vermont law.
Vermont Strengthens Data Breach Notification Requirements
14-day Attorney General notice and other amendments to Vermont’s Security Breach Notice Act further complicate data breach response.
Continue Reading Vermont Strengthens Data Breach Notification Requirements
HHS Makes HIPAA Training Materials Available to State Attorneys General
Federal HIPAA enforcement agency adds new online tool to train State Attorneys General to enforce HIPAA.
Continue Reading HHS Makes HIPAA Training Materials Available to State Attorneys General