WASHINGTON, DC – Bipartisan members of the Subcommittee on Commerce, Manufacturing, and Trade today announced draft legislation to tackle the nation’s growing data security challenges. The “Data Security and Breach Notification Act” is a comprehensive plan to help safeguard sensitive consumer information and shield Americans from the consequences of cyber attacks. The subcommittee is scheduled to…
Category: U.S.
Jury rules in favor of Sonoma County employee in privacy case
This is a follow-up to a case noted previously on this blog. Paul Payne reports: Jurors on Thursday found a Santa Rosa man was not entitled to monetary damages from a neighbor he claimed used her position as a Sonoma County social worker to pry into his confidential files and embarrass him. The panel deliberated about a day…
Uber sued over breach involving 50,000 drivers’ information
Daniel Siegal reports that Uber has been sued in federal court in California over the breach involving 50,000 drivers’ names and driver’s license numbers. You can read his report on Law360 if you have a subscription.
San Francisco General Hospital notifies 2,500 patients that doctor removed copies of their records from the hospital
I had noted this breach on PHIprivacy.net, but since there’s an update today, I’ll repeat the original information here. On March 6, Erin Allday reported that a former UCSF doctor who was employed at San Francisco General Hospital from 2005 to 2013 had wrongfully removed copies of patient records from the medical center. Allday reported:…
Aurora Health Care notifying caregivers of breach (updated)
Wisconsin-based Aurora Health Care is notifying current and former caregivers after discovering malware on some of their workstations and servers. The malware was discovered on January 27. A forensics investigation revealed that the malware was designed to intercept active sessions and capture login information when certain web sites – mostly financial and some social media –…
Saintly mix-up results in breach notification for Providence Health & Services
Providence Health & Services is notifying some of their patients that their data were exposed after an error concerning the name of the facility where they were treated: We are writing to you about the disclosure of your medical billing information to one of our business partners. On February 18, 2015, Providence St. Joseph Medical…