Additional federal legislation may be needed to protect data on students

Congressman John Kline, a Republican from Minnesota and the ranking minority member of the House Committee on Education and Labor, publicly expressed concerns last week about potential risks to personal information on students that collected and…

FTC, Congress trying to make commercial privacy more manageable

In two separate developments this week we see efforts from both the executive and legislative branches intended to make it easier for financial institutions to comply with regulations on privacy practices required under the Gramm-Leach-Bliley Act…

Supreme Court takes on expectations of privacy for personal text messages

As noted in a post here about a week and a half ago, the Supreme Court will hear arguments on April 19 in City of Ontario v. Quon, which is an appeal by the city of…

Sharing data in EHR systems without consumer preferences may lead to information withholding

An unintended, if not wholly unexpected, consequence of the health care industry’s heavily incentivized move towards use of electronic health records and sharing data contained in those records appears to be a greater likelihood that individuals…

Key government security initiatives making slower than anticipated progress

The Government Accountability Office released two reports, completed in March and released publicly on Monday, that highlight slower-than-expected progress being made on key government-wide information security initiatives. The first report focuses on the Federal Desktop Core…

Mistakes in UK NHS organ donor consent data show importance of validating data from outside sources

As reported in the Daily Telegraph, the British National Health Service (NHS) is blaming an IT error for the presence of inaccurate consent information for about 800,000 people about their wishes for organ donation after death….

Virginia enacts limited-scope medical information breach notification law

Last month, the Virginia General Assembly passed a new law, to take effect on January 1, 2011, that will implement new disclosure notification rules for breaches of medical information about Virginia residents. The new law appears…