PCI Data Security Standards: An Industry Self-Regulatory Approach

As an industry-based (as opposed to federal regulatory) approach to information security concerns, the Payment Card Industry (PCI) Security Standards Council was founded in 2006 by American Express, Discover Financial Services, JCB International, MasterCard Worldwide, and Visa Inc.  This council Continue reading PCI Data Security Standards: An Industry Self-Regulatory Approach

Privacy and Safeguards for Children Online: Complying with COPPA

Congress enacted the Children’s Online Privacy Protection Act (COPPA) in 1998. Unlike Gramm-Leach-Bliley and HIPAA, COPPA is directed at the Internet, particularly at websites that target children (persons under the age of 13, for purposes of the Act) or know Continue reading Privacy and Safeguards for Children Online: Complying with COPPA

Privacy and Safeguards in the Health Care Industry: HIPAA and HITECH*

The Health Insurance Portability and Accountability Act (HIPAA) sets forth federal information security requirements and personal information privacy rights related to individually identifiable health information, including patient records and medical files.  HIPAA’s “Privacy Rule” regulates the use and the potential Continue reading Privacy and Safeguards in the Health Care Industry: HIPAA and HITECH*

Privacy and E-Data Safeguards in the Financial Services Industry: Gramm-Leach-Bliley Today*

Does your company work in or in conjunction with the financial services industry? The Gramm-Leach-Bliley Financial Services Modernization Act of 1999 (GLB), through its “Privacy Rule” and its “Safeguards Rule,” includes provisions to protect consumers’ personal financial information held by Continue reading Privacy and E-Data Safeguards in the Financial Services Industry: Gramm-Leach-Bliley Today*

Privacy and Information Security in Cyberspace – An Introduction

As businesses store and transmit more and more information digitally, concerns over the potential for unauthorized access to consumers’ personal data continues to grow.  Although Canada, the European Union, and other venues outside of the United States have implemented uniform Continue reading Privacy and Information Security in Cyberspace – An Introduction