NIST Draft Practice Guide: Securing Electronic Health Records on Mobile Devices
The National Institute for Standards and Technology issued a “draft” version of a Cybersecurity Practice Guide aimed at doctors, hospitals, and other health care providers. The 82-page Guide discusses how medical providers access patient data remotely and that “the use of mobile devices to store, access and transmit electronic health care …
Second Cir: Facebook Case Reveals Difference b/t CFAA & SCA Statute of Limitation Periods
The Second Circuit confirmed that the Computer Fraud and Abuse Act (18 USC 1030) and the Stored Communications Act (18 USC 2701) calculate the starting point of their two year statute of limitation differently. If someone’s email and/or social media accounts are hacked, the statutory periods are calculated differently. This …
Recent Government Guidelines on Data Breach / Cyber Security
Various federal agencies have been busy this Winter-Spring 2015 issuing various guidelines regarding data breach and cyber security: DOJ Best Practices for Victim Response and Reporting of Cyber Incidents (April 2015) – drafted “with smaller, less well-resourced organizations in mind…” Office of National Coordinator for Health Information Technology (April 2015) …
Storm v Paytime — Data Breach Case
According to Judge John E. Jones, III, “[t]here are only two types of companies left in the United States… ‘those that have been hacked and those that don’t know they’ve been hacked.’” Citing the now infamous USAToday article statistic that 43% of companies have experienced a data breach, the US …