Email Address:
An important element of data protection compliance is knowing, identifying and inventorying the applicable information...
Continue reading Proposed HIPAA Privacy Rule Change Explicitly Makes Genetic Info PHI...
Late last month I posted, "HIPAA/HITECH Breach Notice Rule: Applies To PHI of Deceased Individuals + Training A Key Element" and since then I've had around half a dozen or so folks ask me to write about privacy for the deceased...
I have had the great opportunity to participate in the NIST Smart Grid privacy standards group since July...
Continue reading 10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?...
A couple of week's ago I had the great opportunity and pleasure to speak with the both equally delightful and brilliant Anyck Turgeon and Scott Draughon on MyTechnologyLawyer.com about "Is encryption enough to achieve privacy?"
The feedback and followup to that show was spectacular! I got a ton of questions as a result. I will answer some of them here in the coming days. Here is the first...
Continue reading Don't Throw Your Privacy Out The Window; Know How Your PII Is Used...
Last week I was very fortunate to be able to speak at the IAPP Privacy Academy in Boston...
I am talking to increasing numbers of privacy and information security pros who are concerned about not only getting their pandemic plans in place, but also wanting to know what kinds of privacy issues need to be addressed within the plans.
Continue reading What Happens To Privacy During Pandemics?...
Of course the answer is no. But there are many reasons! Tune in this afternoon at 4:00pm Pacific time to hear Anyck Turgeon, Scott Draughon and me discuss this topic and talk about encryption laws and the impacts to privacy. Here is the information about the event...
Continue reading Is Encryption Enough to Achieve Privacy?...
The Department of Health and Human Services (HHS) 45 CFR Parts 160 and 164: "Breach Notification for Unsecured Protected Health Information; Interim Final Rule" (Breach Notice Rule) has been written about a lot. But much of what is written overlooks some of the very interesting prologue within that document that is very important to consider to frame the context within which the regulation was written...
Continue reading HITECH Impacts Over 734,178 "Small Business" HIPAA Covered Entities...
This was another very busy week, and I didn't have a chance to post as much as I would have liked. Part of what kept me busy was an unusually increased amount of email...
The Department of Health and Human Services (HHS) issued their interim final rule for breach notification standards on August 19. Federal Trade Commission (FTC) issued their final rule of breach notification standards on August 17. The HHS rule covers all healthcare covered entities (CEs) and business associates (BAs). The FTC rule covers all personal health record (PHR) vendors and their service providers...
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine