Realtime Community | IT Compliance: Information Security Archives

Smart Grid Privacy: Possible Privacy Standards To Address Concerns

Sorry to be so tardy in getting a blog post out. As many of you know I've been working with the NIST Smart Grid Privacy Subgroup since late June. The work done for this group is through time volunteered by all involved.

As a quick recap, I led the privacy impact assessment (PIA) for the consumer-to-utility portion of the planned smart grid during the late June to late August/early September time frame. On Friday, 11/20, I provided an update on our NIST groups activities during the Gridwise Alliance phone conference; perhaps some of you were on that call?

Here are some links showing information about our NIST Smart Grid privacy group's work:

Continue reading Smart Grid Privacy: Possible Privacy Standards To Address Concerns...

Tags: awareness and training information security IT compliance IT training NIST personally identifiable information PIA PII policies and procedures privacy impact assessment privacy law privacy training security training Smart Grid Smart Meter SmartGrid

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

HIPAA And Surveillance In Hospitals

Over the years there have been many...too many...instances where doctors have performed the wrong types of surgeries on patients, and even the wrong surgeries on completely wrong patients...

Continue reading HIPAA And Surveillance In Hospitals...

Tags: awareness and training HIPAA HITECH information security IT compliance IT training patient privacy personally identifiable information PIA PII policies and procedures privacy impact assessment privacy law privacy training Rhode Island Hospital security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

Smart Grid Privacy: Laws and Implications

I was recently asked several questions about my work with the NIST Smart Grid privacy group and associated issues. Here are a couple of those questions, and my answers to them...

Continue reading Smart Grid Privacy: Laws and Implications...

Tags: awareness and training information security IT compliance IT training NIST NISTIR 7628 personally identifiable information PIA PII policies and procedures privacy impact assessment privacy law privacy training security training Smart Grid

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

6 Critical Factors for Effective Information Security & Privacy Policies

I've been feeling bad about not posting to my blog as often as I have historically...

Continue reading 6 Critical Factors for Effective Information Security & Privacy Policies...

Tags: awareness and training HIPAA HITECH information security IT compliance IT training policies and procedures privacy policies privacy training security policies security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

Who Are Your Business Associates?

Since just before HIPAA went actively into effect I've done a lot of HIPAA compliance work for covered entities (CEs). In the past few years I've done around 200 business associate (BA) information security and program reviews for just one CE, and these don't even scratch the surface for how many BAs each CE has...

Continue reading Who Are Your Business Associates?...

Tags: awareness and training HIPAA HITECH information security IT compliance IT training personally identifiable information PII policies and procedures privacy training security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

Proposed HIPAA Privacy Rule Change Explicitly Makes Genetic Info PHI

An important element of data protection compliance is knowing, identifying and inventorying the applicable information...

Continue reading Proposed HIPAA Privacy Rule Change Explicitly Makes Genetic Info PHI...

Tags: awareness and training breach notice breach response genetic data GINA Law HIPAA HITECH information security IT compliance IT training personally identifiable information PII policies and procedures privacy training security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?

I have had the great opportunity to participate in the NIST Smart Grid privacy standards group since July...

Continue reading 10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?...

Tags: awareness and training Christophe Veltsos Gal Shpantzer IAPP information security IT compliance IT training NIST NISTIR 7628 personally identifiable information PIA PII policies and procedures privacy impact assessment privacy training security training Smart Grid SmartGrid

Posted by Rebecca Herold | Permalink | Comments (2) | TrackBacks (0)

Don't Throw Your Privacy Out The Window; Know How Your PII Is Used

A couple of week's ago I had the great opportunity and pleasure to speak with the both equally delightful and brilliant Anyck Turgeon and Scott Draughon on MyTechnologyLawyer.com about "Is encryption enough to achieve privacy?"

The feedback and followup to that show was spectacular! I got a ton of questions as a result. I will answer some of them here in the coming days. Here is the first...

Continue reading Don't Throw Your Privacy Out The Window; Know How Your PII Is Used...

Tags: Anyck Turgeon awareness and training encryption information security IT compliance IT training personally identifiable information PII policies and procedures privacy training Scott Draughon security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

How To Do Privacy Impact Assessments

Last week I was very fortunate to be able to speak at the IAPP Privacy Academy in Boston...

Continue reading How To Do Privacy Impact Assessments...

Tags: awareness and training CSI information security IT compliance IT training NIST NISTIR personally identifiable information PIA PII policies and procedures privacy impact assessment privacy training security training Smart Grid SmartGrid

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

What Happens To Privacy During Pandemics?

I am talking to increasing numbers of privacy and information security pros who are concerned about not only getting their pandemic plans in place, but also wanting to know what kinds of privacy issues need to be addressed within the plans.

Continue reading What Happens To Privacy During Pandemics?...

Tags: awareness and training breach law breach notification breach response employee privacy HIPAA HITECH Act information security IT compliance IT training pandemic patient privacy personally identifiable information PII policies and procedures privacy training security training

Posted by Rebecca Herold | Permalink | Comments (0) | TrackBacks (0)

Now Available:

Featured Resources:

Realtime Communities

Newsletter

Monthly Archives

RSS

Ask the Expert

November 28, 2009

Smart Grid Privacy: Possible Privacy Standards To Address Concerns

November 5, 2009

HIPAA And Surveillance In Hospitals

October 21, 2009

Smart Grid Privacy: Laws and Implications

October 14, 2009

6 Critical Factors for Effective Information Security & Privacy Policies

October 8, 2009

Who Are Your Business Associates?

October 2, 2009

Proposed HIPAA Privacy Rule Change Explicitly Makes Genetic Info PHI

September 25, 2009

10 Smart Grid Consumer-to-Utility Privacy Concerns; Are There More?

September 23, 2009

Don't Throw Your Privacy Out The Window; Know How Your PII Is Used

September 21, 2009

How To Do Privacy Impact Assessments

September 14, 2009

What Happens To Privacy During Pandemics?

Search

Library Resources

Categories

Rebecca Herold's Bio: