Recent Comments
Tag Archives: regulations
Releative Position and Privacy
Ed Felton recently wrote two posts on the failure of the marketability of privacy, and how corporations and consumers should respond. According to Felton: There’s an obvious market failure here. If we postulate that at least some customers want to … Continue reading
The Easy No
From Concurring Opinions, this commentary on a recent New York Times article on Hypercompliance on the HIPAA front. Health care folks have been intimidated into denying access to PHI to people who have legitimate inquiries and a legal right to … Continue reading
New Concepts in Data, Compliance and Marketing or The Overly Dramatic Truth
Like the rest of the world, I read J. Cline’s article on the upcoming data eclipse while listening to El P’s I’ll Sleep When You’re Dead, which is the best way to read it. J. Cline is prophesyin’ the impending … Continue reading
Throwing Scorpion Out With the Frog Water
Declan McCullagh says that the federal government is unlikely to implement the National Research Council’s privacy recommendations, in particular, a privacy commissioner, because it isn’t in the federal government’s scorpion-like nature. Ars Technica also has coverage. (And why must it … Continue reading
Auditing Privacy Part 1 – Ethics and the Canon
It would comfort many compliance auditors to discover the ultimate checklist and tear after their organization’s privacy program, collecting tick marks and developing the dreaded deficiency finding. I say to them, “Google is your friend.” For the more enlightened internal … Continue reading
SSN Panic, Texas Style
Here’s the Computerworld run-down. And here’s the Attorney General’s letter (worth reading) and the proposed bill to change the law Texas HB 2061 so as all the county clerks don’t get thrown in jail. The AG letter says it in … Continue reading
Everyday Privacy and Security: The Drug Store
After a conversation with a friend, I thought I’d cite some examples of how privacy and security impact day-to-day life. Here’s the first in the series; though I admit, dissecting the CMEA would take more effort than I have time … Continue reading
Posted in Uncategorized
Tagged compliance, Everyday Privacy and Security, privacy, regulations
Leave a comment
With The AM Radio On
The imperial raftload of opinions on who really is the victim of credit card fraud, stemming from the Boston Globe article on the legislative reactions to the Stop and Shop Skimming Shenanigans, is centered around this quote as much as … Continue reading
Buzzword Compliance or Compensating Controls
The most recent SANS e-mail letter, this article from Computerworld on pretty minor (all things considered) security incident at federal retirement fund agency.The voice of SANS (Pescatore in this case) remarked thusly: This and the Nordea incident, as well as … Continue reading
The One In Five 