From the FTC’s press release: The Federal Trade Commission will delay enforcement of the new “Red Flags Rule” until August 1, 2009, to give creditors and financial institutions more time to develop and implement written identity theft prevention programs. For entities that have a low risk of identity theft, such as businesses that know their…
Category: Breach Laws
Rush introduces breach notification bill in House
Yesterday in Congress, Rep. Bobby Rush (D-IL) introduced H.R. 2221, co-sponsored by Reps. Stearns (R-FL), Barton (R-TX), Schakowsky (D-IL), and Radanovich (R-CA). The text of the bill is not yet available online, but it was introduced as “A bill to protect consumers by requiring reasonable security policies and procedures to protect computerized data containing personal…
HHS offers health IT privacy guidelines
Brian Robinson reports in Government Health IT: The Health and Human Services Department has begun overhauling the privacy and security rules that govern personal health information, which is considered vital to attempts by Congress and the Obama administration to broaden the adoption of electronic health records. HHS published guidance on April 17 that outlines the…
Data Breach Notification Law Across the World from California to Australia
Alana Maurushat of University of New South Wales has published a review and comparison that is available online at bepress.com in pdf format. The abstract: Data breach notification and disclosure laws are emerging around the globe. The following article and table examine the specifics of data breach notification frameworks in multiple jurisdictions. Over the year…
FTC Publishes Proposed Breach Notification Rule for Electronic Health Information
From the FTC: The Federal Trade Commission today announced that it has approved a Federal Register notice seeking public comment on a proposed rule that would require entities to notify consumers when the security of their electronic health information is breached. The American Recovery and Reinvestment Act of 2009 (the Recovery Act) includes provisions to…
AL: Retailers: Proposed bill creates problems for business owners
Trevor Stokes reports: Credit unions and retailers reacted differently Wednesday to two proposed Alabama bills that would require businesses to notify residents when personal information accessible by computer has been breached. The companion bills, introduced this week by Rep. Tammy Irons, D-Florence, and Sen. Roger Bedford, D-Russellville, are aimed to protect consumers against personal data…