OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Dataloss] Personal Info From PA. Welfare Rolls Stolen

From: Dale Jordan (jordantdcomcast.net)
Date: Fri Dec 07 2007 - 06:19:41 CST


Hi Rodney,
 
Not all states have the privacy laws enacted. The link below describes the
Pennsylvania law that went into effect in 2006:
 
http://www.privsecblog.com/archives/state-legislation-pennsylvania-becomes-2
2nd-state-to-enact-a-data-breach-disclosure-law.html
 
Thank you,
 
Dale Jordan

 

  _____

From: dataloss-bouncesattrition.org [mailto:dataloss-bouncesattrition.org]
On Behalf Of Rodney
Sent: Thursday, December 06, 2007 8:21 PM
To: datalossattrition.org
Subject: Re: [Dataloss] Personal Info From PA. Welfare Rolls Stolen

On Thu, 2007-12-06 at 18:50 -0600, Henry Brown wrote:

The Department of Public Welfare began mailing letters Wednesday warning
the recipients to take steps to protect themselves from identity theft,
agency spokeswoman Anne Bale said.

This strikes me as odd and I have a couple of questions for the group.

1. If your data is lost and there is a clear "at fault" party as seems to be
the case here (the data was unencrypted) they isn't the "at fault party
supposed to provide ID theft protection? Is that a law or just something
done to reduce damages should they ever be sued over release of personally
identifiable information without informed consent?

2. If it is welfare rolls, then these people can't afford to do this on
their own, so again why isn't the state setting this up for them?

Rodney Wise

_______________________________________________
Dataloss Mailing List (datalossattrition.org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml