Monthly Archives: May 2015

Lege Trend: Expand Definition of Personal Information to Trigger Notification

Nevada is the most recent state to expand the definition of personal information that trigger data security laws. 

The expanded definition includes:

  • individual’s medical identification number or health insurance identification number and
  • a user name, unique identifier or email address with its associated password, access code or security question and answer that would permit access to an online account

This reflects a growing trend to include ema…

Oregon Data Breach of Employment Background Checks leads to False IRS Tax Refunds

Thieves aquired names, addresses, social security numbers and other personal information from a database owned by CICS employment services., whiched housed employment background check information.

The thieves then took the personal information and filed false IRS forms to obtain tax refunds. The company does not know how the informaiton was taken, but they know it was when the theft ring was busted.

Posted byadminPosted inlaw enforcement

States have hard time hiring data security experts.

The National Association of State Chief Information Officers, an organization for states’ chief information technology officials, found states are plagued by problems with hiring cybersecurity experts.

Why? 

  • “Nearly 92 percent of states said salary and pay grades presented a challenge in attracting and keeping employees.
  • 86 percent of states said they’re having trouble recruiting people to fill vacant slots. Four years ago, only 55 percent of states reported …

The difference between data security & data privacy?

Data security:

  • “knowing where your data is located”
  •  ” who may access the data. “

Data privacy:

  • “predicated on data security”
  • “requires further understanding how personal data is being collected, processed (and by whom), and transferred,”
  • “and the consistency of these practices with applicable laws, regulations, and the reasonable expectations of the relevant consumers”

Posted byadminPosted indata privacy, legislative trend