Things you should know before going live with a Complete Data Breach Response Strategy

by Heather Noonan June 14, 2013

So you find yourself in the debacle of a data breach? Where in the world do you begin? Your management team is sending you emails left and right, meetings have started to run amok, and you haven’t had lunch in the last two days.

What I learned at the ID 360 event in Austin

by Christine Arevalo June 13, 2013

I spent a week at The Center for Identity’s ID360 event in Austin, TX last month. What an amazing event this proves to be year after year!

Analyzing the US HIPAA Legacy and Future Changes on the Horizon

by Christine Arevalo June 10, 2013

The US Department of Health and Human Services issued the long-awaited final omnibus rule under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) on January 17^th,2013. This ruling set a federal level baseline for US healthcare privacy.

Are You a HIPAA Business Associate? It isn’t as Simple a Question as it Sounds.

by Doug Pollack June 5, 2013

As we enter summer this year, it is just a short few months to September 23, 2013. And so what is special about that date? That is when HIPAA business associates, those organizations that work with healthcare providers, health plans, and others who are exposed to sensitive patient data (protected health information, or PHI), are required to comply with new privacy, security and breach notification rules from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR). Known as the HIPAA Omnibus Final Rule.

How to manage employee based data breaches?

by Heather Noonan June 4, 2013

Employee perceptions and satisfaction will be swayed during a breach, whether it is a security break-in or a system hacking. Employees fear not only for their personal information and job security, but now their trust in the company has also been altered.

Harm Standard: Gone But Not Forgotten? New Factors Mimic Current Breach Regs

by ID Experts June 3, 2013

Although covered entities (CEs) have been required since 2009 to notify affected individuals and the government, when appropriate, of breaches of unsecured protected health information (PHI), the so-called “harm” standard that triggers notice no longer exists under the new final regulations. Or does it?

Cyber Risk & Privacy Liability Forum 2013

by Jeremy Henley May 29, 2013

Well it’s that time of year again when all the key players of the cyber liability insurance world arrive in Philadelphia. Net Diligence works closely with HB Litigation conferences to get more than 300 attendees to the Cyber Risk & Privacy Liability Forum on June 6-7 which is sure to be another great event.

HHS’ Sensible Compromise on the Controversial Harm Threshold (Part 2)

by Mahmood Sher-jan May 28, 2013

In part 1 of my analysis of the HIPAA final breach notification rule I focused on the implications for covered entities and business associates of the change to the definition of “breach.” The revised definition removed the controversial “risk of harm” language and instituted an incident specific risk assessment requirement. According to HHS, the harm threshold was giving covered entities too much flexibility to apply their own perception of whether the incident could harm the affected patients. The focus of this Part 2 analysis is on the practical choices facing covered entities to comply with the newly minted “compromise” standard and the associated risk four factors.

Big Data Increases Breach Risk

by Deanna Jones (DJ) May 20, 2013

Our existence as a consumer society has led us to our current big data reality. Everything about us is compiled, categorized, sorted, analyzed, often with our permission, though the knowledge of what we’re doing has largely been hidden in the fine print, if shared at all. In exchange for dense digital dossiers of our lives, we often get a coupon or an offer, matched just for us, from the logs maintained about our lives. And this is just the mild form of big data’s usage.

Senior Identity Theft: A Problem In This Day and Age

by Robin Slade May 16, 2013

The May 7^th Federal Trade Commission (FTC) Senior Identity Theft: A Problem in This Day and Age panelists related that seniors are often preferred targets, especially for medical identity theft. Fraudsters, who may include unscrupulous relatives and/or caregivers, view these individuals as more trusting, less financially sophisticated and less likely to report the crime because they fear family members may think they cannot maintain their independence.[1] Panel members discussed the many still unanswered questions regarding how to prevent tax and government benefits fraud, medical identity theft, and identity theft in long-term care, and how to reach older consumers.