Patricia Ballin reports: Generating a flurry of conversation among privacy professionals worldwide, the U.S. Federal Trade Commission (FTC) last week filed its response to Wyndham Worldwide Corporation’s interlocutory appeal in the Third Circuit. […] The FTC’s response outlines and affirmatively answers the three questions presented in Wyndham’s appeal: whether a company’s unreasonable failure to protect the security…
Month: November 2014
NV: Member of Organized Cybercrime Ring Responsible for $50 Million in Online Identity Theft Sentenced to 115 Months in Prison
A Georgia man who purchased stolen credit card data and other personal information through the identity theft and credit card fraud ring known as “Carder.su” was sentenced today to serve 115 months in federal prison. He was further ordered to pay $50.8 million in restitution. Cameron Harrison, aka “Kilobit,” 28, of Augusta, Georgia, admitted at…
NHS breaches data laws 'six times a day'
David Barrett reports: Confidential patient records are being lost and inappropriately shared by the NHS an average of six times a day, according to new research. A survey of NHS trusts across Britain by a privacy campaign group found there had been 7,255 breaches of data protection rules in three years, including at least 50…
UK: Pharmacist who unlawfully spied on family and friends’ medical records prosecuted
From the Information Commissioner’s Office: A pharmacist who worked for West Sussex Primary Care Trust has been prosecuted by the Information Commissioner’s Office (ICO) after unlawfully accessing the medical records of family members, work colleagues and local health professionals. Appearing at Barkingside Magistrates Court today, Harkanwarjit Dhanju, 50, was prosecuted under section 55 of the…
Retailers are skirting data security issue, NAFCU, trades tell Congress
The National Association of Federal Credit Unions writes: Retailer groups’ data security arguments are “inaccurate and misleading” given their members “are not covered by any federal laws or regulations that require them to protect data and notify consumers when it is breached,” NAFCU and six other financial trades told House and Senate leaders Wednesday. “National…
UK: Unencrypted data of 45,000 patients shared by south west ambulance bosses despite "no justifiable legal reason" to do so
jrmaidment reports: Ambulance bosses have been criticised after the unencrypted data of more than 45,000 patients was shared with NHS chiefs despite there being “no justifiable legal reason” to do so. South Western Ambulance Service sent seven discs of “descriptive patient data” relating to 45,431 people by recorded delivery to a Clinical Commissioning Group in…