Another class action has been filed alleging the disclosure of employee personally identifiable information due to a cyber attack. This time, the employer is the federal government, and another target in the lawsuit is the third party vendor allegedly used by the…
Posts by Category: Data Protection & Privacy
Final NIST Guidance Addresses Protection of Sensitive Data in Hands of Contractors
Final guidance (SP 800-171) from the National Institute of Standards and Technology on protecting sensitive federal information on nonfederal information systems “will prove important, perhaps profound, as the nation seeks to improve its cyber defenses,†said an…
FTC’s New Consumer Data Security Guidance Offers Businesses Practical Tips
The Federal Trade Commission has issued new guidance on data security for companies that collect, store and use consumer information, gleaned from the more than 50 enforcement actions brought by the agency over the past decade. The guidance, “Start with…
Data Privacy Challenges & Considerations for Cross-Border Ethics & Compliance Investigations
Investigations of potential misconduct can be taxing for any organization. But for organizations operating in multiple countries, the variability of data privacy laws around the globe present a special challenge. The stakes are high: if investigators violate data…
New York City Will Ban Employers From Viewing Credit History of Prospective Workers
The City Council is expected to pass a bill that will make it illegal for employers to check job-seekers’ credit history. In addition to banning credit reports on a prospective employee, the bill also prohibits employers from asking people what their credit…
Major FERPA Overhaul Under Consideration in U.S. House
A proposed overhaul of the country’s primary law protecting student-data privacy is being circulated for feedback, offering yet another sign of the federal government’s interest in reshaping the legislative landscape around this hot-button issue. The…
FTC Settles with Two Companies Falsely Claiming to Comply with International Safe Harbor Privacy Framework
Two U.S. businesses have agreed to settle FTC charges they falsely claimed they were abiding by an international privacy framework known as the U.S.-EU Safe Harbor, which enables U.S. companies to transfer consumer data from the EU to the US in compliance with EU law….
Lessons on Work-Related Fraud and Abuse
The Association of Certified Fraud Examiners recently released its 2014 Report to the Nations on Occupational Fraud and Abuse (the “Report”), which provides interesting statistics and insights for HR professionals hoping to better understand and combat…
When Will Your Data Breach Happen? Not a Question of If But When
IT security is a growing threat for businesses of every type and no organization is safe. U.S. consumer cyber-attacks in 2013 came at a price of $38 billion, according to the 2013 Norton Cybercrime Report by ZDNet and USA TODAY. Employees have ready access to company…
Identity Theft Tops FTC’s Consumer Complaint Categories Again in 2014
Identity theft topped the Federal Trade Commission’s national ranking of consumer complaints for the 15th consecutive year, while the agency also recorded a large increase in the number of complaints about so-called “imposter” scams, according to the…