Ellen M. Giblin writes: With the first anniversary of the Massachusetts Data Security Regulations, 201 CMR 17 (pdf)(“Regulations”), coming in March, the International Association of Privacy Professionals (IAPP) recently hosted a panel discussion providing direct access to the Massachusetts Attorney General’s Office and the Office of Consumer Affairs and Business Regulation to discuss their investigations…
Category: Commentaries and Analyses
Wikileaks As Security Breach
Ryan Calo writes, in part: The leak represents an appalling security breach—one that makes TJX look like a misplaced diary. As I argue in a previous post, the leak threatens a set of classic privacy harms. One of the central roles of privacy is to help preserve the conditions for intimacy. The leak means that leaders will…
Data Stewardship: Managing Personally Identifiable Information in Electronic Student Education Records
Data Stewardship: Managing Personally Identifiable Information in Electronic Student Education Records SLDS Technical Brief Guidance for Statewide Longitudinal Data Systems (SLDS) SLDS Technical BriefGuidance for Statewide Longitudinal Data Systems (SLDS) November 2010, Brief 2 NCES 2011-602 The growth of electronic student data in America’s education system has focused attention on the ways these data are…
ITRC 2010 Breach Report
The Identity Theft Resource Center has issued its end of year press release. It includes some of the organization’s key findings and stresses the need for more information and mandated disclosures. Breach reports by sector can be found on their site as well as their chronology of the breaches they recorded for 2010: The Identity…
Policy puts troops at risk for identity theft
Andrew Tilghman reports: U.S. troops may be among the most vulnerable Americans to identity theft. That’s because the U.S. military is overusing Social Security numbers and putting at risk troops’ most basic personal information, according to a recent report from several professors at the U.S. Military Academy at West Point, N.Y. It’s been a problem…
As 2010 draws to a close, data breach version
A breach involving paper records just became my last breach post for 2010. It seems somehow appropriate, as breaches involving paper records constitute over 20% of breaches I find out about but they’re often not taken as seriously, it seems, as breaches involving large electronic databases. Yet these types of breaches, which often go unreported,…