health information, healthcare, HIPAA, HITECH, medical data, PHI, protected health information
HHS Release Final Omnibus Rule Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA)
By InfoLawGroup LLP on January 18, 2013
Colorado, data privacy, Hearing, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, personal information, privacy, privacy legislation, privacy rule, public utilities commission, smart grid, SmartGrid
Colorado PUC Holds Hearing on Smart Grid Privacy Rules
By InfoLawGroup LLP on October 18, 2011
amendments, children, comments, Federal Trade Commission, FTC, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, online privacy, privacy, Rule
FTC Proposes Revisions to COPPA Rule
By InfoLawGroup LLP on September 15, 2011
concerted activity, employee privacy, enforcement, Facebook, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, NLRA, NLRB, privacy, privacy enforcement, Section 7, social media, social network
Nonprofit Must Rehire Employees Axed for Facebook Complaints
By InfoLawGroup LLP on September 08, 2011
Dodd-Frank, Heather Nolan, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Prize and Gift Acts, social media, social networking, Unfair and Deceptive Acts or Practices Acts
Financial Industry Gets New Guidance on the Use of Social Media
By Heather Nolan on July 28, 2011
Banks and other financial institutions face unique issues when it comes to the use of social media. Faced with conflicts between social media platform rules, customer expectations, self-regulatory standards, and the strict regulations that govern the industry, guidance has been needed. The industry received some of that guidance recently through a whitepaper issued by BITS, the technology arm of The Financial Services Roundtable whose members are 100 of the largest financial institutions in the U.S.The report addresses the compliance, legal, operational, and reputational risks - and related mitigation strategies - of using social media in connection with a financial or banking operation. Regarding compliance, the report discusses the myriad of compliance areas relevant to banks, including marketing, privacy and security. For example, because social media web sites and web activities are deemed advertising by regulators, the report warns of the risks of failing to comply with various marketing laws and regulations applicable to the banking industry, including state Unfair and Deceptive Acts or Practices Acts and Prize and Gift Acts, as well as others that require additional steps for financial institutions, such as Truth in Lending, Truth in Savings, and FDIC membership rules. The paper predicts even stronger and more subjective requirements to come under the Dodd-Frank Wall Street Reform and Consumer Protection Act. Risks of non-compliance vary widely - from litigation and reputation risk, regulatory enforcement actions and in some cases civil money penalties.
Consumer Financial Protection Bureau, credit, creditor, creditors, Dodd-Frank, E-Sign, Fair Credit Reporting Act, FCRA, FTC, FTC report, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess
CFPB Tasked with FCRA Interpretation - FTC Issues Staff Report to Aid Transition
By InfoLawGroup LLP on July 26, 2011
FTC, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, online, online privacy, privacy, privacy by design, privacy news
Capitalizing on Privacy Practices - Study Indicates Consumers Will Pay for Privacy
By InfoLawGroup LLP on July 14, 2011
California, children, data mining, First Amendment, health information, Info Law Group, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, pharmaceutical companies, privacy, privacy legislation, Supreme Court, Vermont, video games
Supreme Court Pro-Business and First Amendment - Targeted Regulations in Trouble
By InfoLawGroup LLP on June 28, 2011
access, Boris Segalis, Health Care, health information, HHS, HITECH, InfoLawGroup, information law group, InformationLawGroup, Nicole Friess, NPRM, privacy, privacy rule, protected health information, Regulation, Security, security rule
Changes to HIPAA Privacy Rule Proposed by HHS - Find Out Who Has Accessed Your Health Records
By InfoLawGroup LLP on June 01, 2011
Boris Segalis, creditor, FACTA, FCRA, FTC, FTC Red Flags Rule, identity theft, identity theft prevention program, Info Law Group, InfoLawGroup, information security, Red Flags
House and Senate Enact Amendment of FCRA, Limit Scope of Red Flags Rule
By InfoLawGroup LLP on December 07, 2010
The Blog of Legal Times is reporting that late on December 7, 2010 the House of Representatives passed a bill on a voice vote that amends the definition of "creditor" in the Fair and Accurate Credit Reporting Act (FCRA) and, as a result, dramatically limits the scope of the Red Flags Rule. The House bill is identical to the legislation enacted by the Senate last week. We previously covered in detail on our blog both the House bill and the Senate bill.The legislation has the effect of largely limiting the applicability of the Red Flags Rule to financial institutions and entities commonly understood to be "creditors". It will generally exclude from the Rule's scope organizations whose "credit" activities are limited to providing a product or service and allowing customers to pay for the product or service at a later time. The legislation leaves open the possibility that the FTC would bring various types of creditors within the scope of the Rule through rulemaking. However, it sets a procedural threshold for expanding the scope of the Rule and appears to require the determination to be specific to the type of creditor.
"When I think of the word 'creditor,' dentists, accounting firms and law firms do not come to mind," said Rep. John Adler (D-N.J.), speaking on the House floor.
health information, HHS, HIPAA, HITECH, privacy, Regulation, Security
InfoLaw Alert: HHS Issues Proposed Mofications to HIPAA Security and Privacy Rules
By InfoLawGroup LLP on July 08, 2010
1st Amendment, 4th Amendment, Apple, Breach, Facebook, health information, Kroll, litigation, opt-in, opt-out, Quon, security breach, security schedule
Quickhits: 4th Amendment & the Cloud; Dept. of Commerce Explores Privacy; Apple Plays Hardball; Kroll on Healthcare Data Security; The Senate on Facebook Privacy
By InfoLawGroup LLP on April 26, 2010
210 CMR 17-00, breach notification, creditors, driver's license, FACTA, Fair Credit Reporting Act, FCRA, financial account, FIPS, FTC, generally accepted, health information, HIPAA, HITECH, key management, laptops, Massachusetts, medical data, Nevada, payment card, Payment Card Industry Digital Security Standard, PCI DSS, portable devices, public networks, Red Flags, Red Flags Rule, Security, social security number, SSN, wireless
Code or Clear? Encryption Requirements (Part 2)
By W. Scott Blackmer on October 01, 2009
In the last post, I talked about the role of encryption in fashioning a "reasonable" security plan for sensitive personal information and other protected data routinely collected, stored, and used by an enterprise. But lawmakers and regulators are getting more specific about using encryption and managing data that is risky from an ID-theft perspective. Here are some leading examples of this trend.