Tag Archives: Attorney General

Massachusetts Company Fined $15,000 Under State’s Data Security Law

The Massachusetts AG's enforcement of its data security law demonstrates that it does not take lightly the loss of Massachusetts residents' personal information, even if that loss has not caused any known harm to the affected residents, and that it may remain watchful over the subject of an investigation for years to come.… Continue Reading

California Bill Would Strengthen Existing Breach Notification Law

Update – On September 29, 2010, Governor Arnold Schwarzenegger for the third time vetoed S.B. 1166. California led the way in 2002 when it enacted the nation’s first data breach notification law. Last week, the State’s lawmakers sent Governor Arnold Schwarzenegger S.B. 1166 (pdf), which would mandate that data breach notification communications include more detailed … Continue Reading

Attorney General Securing Personal Data in Indiana

Indiana recently enacted a new law which grants authority to the Indiana Office of the Attorney General’s Identity Theft Unit to obtain and secure abandoned records with personally identifying information, including health records, and either destroy them or return them to their owners. Additionally, the new law sets fines and other legal ramifications for violations of … Continue Reading

Connecticut Attorney General Working on Second HIPAA Breach Investigation

Connecticut Attorney General Richard Blumenthal has commenced an investigation in a second case involving potential HIPAA violations by a worker at Griffin Hospital. This follows the suit commenced against Health Net for HIPAA violations following a data breach. As reported by George Gombossy of ctwatchdog.com, this would be the second time a state attorney general … Continue Reading

Florida AG Settles Data Breach under “Deceptive and Unfair Trade Practices” Authority

On April 16, 2010, Florida Attorney General Bill McCollum announced a settlement (pdf) with Certegy Check Services, Inc. over how the company secures consumer records. The Attorney General’s enforcement action stems from a massive data breach by a former Certegy employee who stole personal identification information from approximately 5.9 million consumer files. According to the … Continue Reading

Dealing with Data Breaches: Health Net Suit Highlights Need for Effective Security Incident Procedures and Training

As we have discussed before, data breach notification is one of the most rapidly emerging areas of law. Good security incident procedures as well as effective training can help avoid the risk of data breach. (Sample data breach training).  A case in point: Connecticut’s Attorney General has filed a civil action against Health Net of the Northeast … Continue Reading

Electronic Health Records: The Work to Build a Health Information Technology Infrastructure Begins

In a key step toward developing a proposed U.S. health information technology (HIT) infrastructure, the Centers for Medicare & Medicaid Services has announced that Iowa’s Medicaid program is the first to receive federal matching funds for planning activities necessary to implement the electronic health record (EHR) incentive program established by the American Recovery and Reinvestment … Continue Reading
LexBlog