by Daniel J. Solove
I recently created a new resource page for the TeachPrivacy website: HIPAA Training Requirements: FAQ.
New Resource Page: HIPAA Training Requirements FAQ
- SHARE:
-
-
-
-
Baseball’s “Hacking” Case: Are You a Hacker Too?
By Daniel J. Solove
I’m a St. Louis Cardinals fan, so I guess it is fitting that my favorite team becomes embroiled in a big privacy and data security incident. At the outset, apologies for the feature photo above. It pulled up under a search for “baseball hacker,” and as a collector of ridiculous hacker stock photos, I couldn’t resist adding this one to my collection. I doctored it up by adding in the background, but I applaud the prophetic powers of the photographer who had a vision that one day such an image would be needed.
- SHARE:
-
-
-
-
Cybersecurity: Leviathan vs. Low-Hanging Fruit
by Daniel J. Solove
There are certainly many hackers with sophisticated technical skills and potent malicious technologies. These threats can seem akin to Leviathan — all powerful and insurmountable.
It can be easy to get caught up focusing on the Leviathan and miss the low-hanging fruit of cybersecurity. This low-hanging fruit consists of rather simple and easy-to-fix vulnerabilities and bad practices.
- SHARE:
-
-
-
-
The OPM Data Breach: Harm Without End?
By Daniel J. Solove
The recent breach of the Office of Personnel Management (OPM) network involved personal data on millions of federal employees, including data related to background checks. OPM is now offering 18 months of free credit monitoring and identity theft insurance to victims. But as experts note in a recent Washington Post article, this is not nearly enough:
If the data is in the hands of traditional cyber criminals, the 18-month window of protection may not be enough to protect workers from harm down the line. “The data is sold off, and it could be a while before it’s used,” said Michael Sussmann, a partner in the privacy and data security practice at law firm Perkins Coie. “There’s often a very big delay before having a loss.”
- SHARE:
-
-
-
-
New Resource Page: Text of HIPAA’s Training Requirements
by Daniel J. Solove
I recently created a new resource page for the TeachPrivacy website: Text of HIPAA’s Training Requirements. This page provides excerpts of the training provisions in the HIPAA Privacy Rule and the HIPAA Security Rule.
This page is designed to be a useful companion page to our resource page, HIPAA Training Requirements: FAQ. The FAQ discuss my interpretation of the HIPAA training provisions, but the full text of those provisions is located on the separate new resource page above.
- SHARE:
-
-
-
-
Use of Encryption Is Increasing — Albeit Slowly
by Daniel J. Solove
According to a survey commissioned by Thales e-Security, the use of encryption by organizations is increasing. Ten years ago, only 15% had an enterprise-wide encryption strategy. Now, 36% have such a strategy.
Some other interesting findings from the survey also found, according to a ZDNet article:
- SHARE:
-
-
-
-
Cybersecurity in the Boardroom
by Daniel J. Solove
A few days ago, I posted about how boards of directors must grapple with privacy and cybersecurity. Today, I came across a survey by NYSE Governance Services and Vericode of 200 directors in various industries.
According to the survey, about two-thirds of directors are less than confident about their company’s cybersecurity. This finding is not surprising given the frequency of data breaches these days. There is a growing sense of exasperation, as if we are living in an age of a great plague, with bodies piling up in the streets.
- SHARE:
-
-
-
-
New Resource Page: An Overview of Education Privacy
by Daniel J. Solove
I recently created a new resource page for the TeachPrivacy site: An Overview of Education Privacy.
- SHARE:
-
-
-
-
Boards of Directors Must Grapple with Privacy and Cybersecurity
By Daniel J. Solove
Privacy and cybersecurity have become issues that should be addressed at the board level. No longer minor risks, privacy and cybersecurity have become existential issues. The costs and reputational harm of privacy and security incidents can be devastating.
Yet not enough boards are adequately engaged with these issues. According to a survey last year, 58% of members of boards of directors believed that they should be actively involved in cyber security. But only 14% of them stated that they were actively involved.
- SHARE:
-
-
-
-
New Resource Page: Privacy and Security Training Requirements
by Daniel J. Solove
I have created a new resource page for the TeachPrivacy website: Privacy and Security Training Requirements.
- SHARE:
-
-
-
-