Practical HR Tips, News & Advice. Updated Daily.
An administrative law judge (ALJ) upheld the imposition of $4,348,000 in monetary penalties against The University of Texas MD Anderson Cancer Center under the Health Insurance Portability and Accountability Act (HIPAA).
While the lead up to the enforcement date of the European Union’s (EU) General Data Protection Regulation (GDPR) was highly publicized, a recent survey suggests that most U.S. companies are unprepared to comply … if they’re aware at all. The May 2018 online survey was conducted by CompliancePoint, an information security and risk management firm. […]
American companies that do business in the European Union (EU) have until May 25 to come into compliance with the EU’s new General Data Protection Regulation (GDPR).
A new law taking effect this summer means Arizona employers will face more stringent requirements in the event of a breach of personal information (PI) of customers or employees.
No one disputes the importance of proper recordkeeping in the workplace. But what’s the best way to keep that information? In bulky paper files kept on-site or maybe entrusted to a vendor to be kept off-site? Perhaps an employer’s information, both routine and sensitive, should be kept in a digital format. And if electronic storage […]
by Timothy C. Cavazza and Matthew H. Parker The Rhode Island Identity Theft Protection Act of 2015 will take full effect on July 2, meaning employers need to have their data security and notification policies in compliance or face serious financial consequences if even one data breach occurs. The new law applies to employers and […]
by Joanna Perini-Abbott Oregon’s expanded data breach law will take effect January 1, making two significant changes to the old law—a notification requirement and a change in the definition of “personal information.” Like the old law, the new law requires businesses that maintain personal information digitally, including information about employees, to notify Oregon residents whose […]
by Joelle Hong and Amelia Morrow Gerlicher Washington’s expanded data security breach notification laws are set to take effect July 24, meaning employers must make sure they have safe and effective privacy practices in place and are ready to respond in the event of a security breach. Under the old law, businesses that own or […]
by Brad Cave Wyoming’s new data breach notification law takes effect July 1, meaning employers need to be ready for beefed-up notification requirements. Wyoming law requires that any entity or person who conducts business in Wyoming and owns or licenses computerized data that include personal identifying information must notify affected consumers of a data breach. […]