BNA INSIGHTS: Compliance Program Implications of Recent HIPAA Privacy Enforcement Activities
March 21, 2011 in Privacy & Security Law Report · Leave a Comment
On Feb. 22, the Department of Health and Human Services’s (HHS) Office for Civil Rights (OCR) announced the first time use of civil monetary penalties (CMP) on a covered entity for violation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule in the amount of $4.3 million…
BNA INSIGHTS: Cost of Compliance with Privacy and Data Protection Laws: Benchmark Study of Multinational Organizations
February 10, 2011 in Privacy & Security Law Report · Leave a Comment
Multinational organizations in all industries must comply with privacy and data protection laws, regulations and policies designed to protect individuals’ sensitive and confidential information. The average cost of compliance for organizations studied was $3.5 million, while the cost of not being in compliance was much greater: nearly $9.4 million…
OUTLOOK 2011: Administration Seeks New Privacy ‘Framework’ for Commercial Activities
January 24, 2011 in Privacy & Security Law Report · Leave a Comment
The Obama administration is expected this year to finalize the blueprint for a new U.S. privacy “framework” governing business practices that involve the collection, use, and sharing of consumers’ personal data online.
The plan is expected to guide federal policymakers as they grapple with the challenge of protecting consumers’ privacy in the…
LEGISLATIVE OUTLOOK: Privacy Could Be Bipartisan Agenda Item in Divided Congress
January 14, 2011 in Privacy & Security Law Report · Leave a Comment
In what is expected to be a year of partisan gridlock on Capitol Hill, Republicans and Democrats will likely find common ground on the need for a serious examination of online privacy issues, laying the groundwork for…
BNA INSIGHTS: Practical Implications of Massachusetts’ New Comprehensive Data Security Regulations
January 10, 2011 in Privacy & Security Law Report · Leave a Comment
Overview—The Massachusetts Regulations May Affect Your Business
In response to the growing number of data and identity theft incidents involving residents of the Commonwealth in recent years, Massachusetts regulators took significant steps toward increasing regulatory control over data security. Effective March 1, 2010, the Massachusetts Office of…
Commerce Department Report Calls for New Office to Set Online Privacy Codes of Conduct
December 20, 2010 in Privacy & Security Law Report · Leave a Comment
The Department of Commerce Dec. 16 released an online privacy report calling for a new office within the department to lead the development of self-regulatory privacy “codes of conduct” for U.S. businesses…
BNA INSIGHTS: Data Management Responsibilities for Financial Services Companies under the New Dodd-Frank Act
November 8, 2010 in Privacy & Security Law Report · Leave a Comment
With Elizabeth Warren named as the special adviser to set up the new Consumer Financial Protection Bureau, the financial services industry faces a rapidly changing regulatory environment. While considerable attention has been paid to the significant restructuring of the…
Privacy Will Be on House Agenda in Next Congress, Republican Leaders Say
November 8, 2010 in Privacy & Security Law Report · Leave a Comment
House GOP leaders on privacy issues said Nov. 3 that passage of internet consumer privacy legislation will be on the agenda in the new Republican controlled lower chamber of the…
Senate Approves Measure to Protect Privacy of Social Security Numbers
October 4, 2010 in Privacy & Security Law Report · Leave a Comment
The Senate Sept. 28 passed legislation (S. 3789) aimed at reducing identity theft by…
BNA INSIGHTS: Proposed Rule for Protecting Department of Defense Information on Unclassified Contractor Computer Systems: The Devil Is in the Details
September 20, 2010 in Privacy & Security Law Report · Leave a Comment
Over the past twenty years, the world has seen technology develop at lightning speed. Exponential increases in our collective ability to communicate, access and process information have been created using the seemingly endless and ethereal collection of…


