I’ve blogged a few times about whether the dead have any privacy rights and whether their families have any rights. To those who still believe that the dead have no privacy nor need any, I would remind them to think of the pain privacy violations can cause the surviving family members. As one example,…
Author: Dissent
TN: Unknown If Student Info On Stolen Computers
From the Houston-we-may-have-a-problem dept: Larry Flowers reports: While students were enjoying fall break last week, someone broke into two Murfreesboro schools. Four computers were stolen, and now officials are trying to figure out if there was any personal information of students that could be in the hands of thieves. Read more on WSMV. Ironically, this…
Johnson & Johnson Seeks Access to Medical Records
newspersonalinjury blogs about a specific personal injury lawsuit but I mention it here because it raises a general issue about whether people should ever sign releases in such cases. For what it’s worth, I don’t think J&J is doing anything most defendant firms wouldn’t do under such circumstances, either. Johnson & Johnson has retained Broadspire,…
University of Oklahoma Neurology Clinic notifies almost 20,000 of security breach
In the process of updating PHIprivacy.net to reflect breaches newly disclosed by the U.S. Dept. of Health and Human Services (HHS), I found reference to a breach for which I was able to find a companion statement. The University of Oklahoma-Tulsa, Neurology Clinic recently notified HHS of an incident affecting 19,264 patients. According to HHS’s…
Nine more breaches newly revealed on HHS's web site
Thanks to Adam Shostack, I realized that although HHS provides two formats for their breach report database, the two databases do not necessarily contain the same number of breach reports on any given day. While he was analyzing data based on the .xml version containing 181 breach reports, I had been using the .csv version,…
Oracle database admins acknowledge security gaps
From the this-does-not-inspire-confidence dept.: Ellen Messmer reports: Database security is rife with pitfalls, according to 430 Oracle database administrators surveyed by the Independent Oracle Users Group. According to the results of the survey released last month, fewer than 30% encrypt personally identifiable information in all their databases, while about 75% acknowledge their organizations do not…