Executive Order 12333 was issued in 1981 to regulate national intelligence activities. Part I of the Order outlines the goals and responsibilities of major Federal Agencies and Departments involved with national security an intelligence gathering. Part II created regulations for the collection of intelligence [...]
OMB Memoranda 06-15 and 06-16: Safeguarding Information Maintained by the U.S. Government
In 2006, the Office of Management and Budget published two memoranda back to back dealing specifically with protecting certain types of information maintained by the Federal Government. M-06-15 addresses safeguarding personally identifiable information. M-06-16 deals with the protection of sensitive agency information. Both memoranda reiterate the security requirements of previous regulations, and expand upon them to make them more effective.
OMB M-06-15: Safeguarding Personally Identifiable Information
M-06-15 served as a reminder to government agencies of their responsibilities towards protecting personally identifiable information.
Under the Privacy Act of 1974 agencies must:
Establish rules [...]
The E-Government Acts of 2002 involved a large number of new regulations to implement and control the use of electronic technologies by the U.S. Government. Title III of this Act, called the Federal Information Security Management Act required all Government agencies to develop extensive information security [...]
Visiting the doctor’s office is a nightmare for the Data Privacy Professional. One glance at all that paper reaching as far as the eye can see and all containing so much PII. Nancy Northrup discusses a new encryption product which shows potential for slowing the persistence of the [...]
The Privacy Act of 1974 is a public sector law that regulates the use of personal information by the United States Government. Specifically it establishes rules, similar to the Fair Information Practice Principles that determine what information may be collected and how it may be used in order to protect the personal privacy of U.S. [...]
The notion of freedom of information is one widely held around the globe. At present there are over 85 countries with freedom of information legislation in effect. The concept of freedom of information relates to the Fair Information Practice Principle of access which states that individuals have the right to view the records an entity maintains about them. However, due to security reasons it is impractical and dangerous to allow the public to access all federal records. In the United States, the Freedom of Information Act, passed in 1966 attempted to resolve the public’s right to access with the necessity of keeping certain records [...]
The Driver’s Privacy Protection act was enacted in response to a number of crimes resulting from abuse of personal information maintained in Department of Motor Vehicle records systems. Most prominent of these crimes, was the death of actress Rebecca Schaeffer. A private investigator retrieved her home address from the California Department of Motor Vehicles database. The information was the used by her stalker to follow and eventually kill her. The Driver’s Privacy Protection Act helps to prevent such crimes by creating strict rules for the disclosure of an individual’s DMV [...]
Under the Federal Trade Commission Act, the FTC has the authority to take enforcement actions for the use of “unfair trade practices.” In 2004, the FTC used the fairness principle to enforce privacy law for the first time by launching a case against the Gateway Learning company, owner of the popular “Hooked on Phonics” product [...]
French citizens are beginning to weigh sacrificing the privacy held so dearly in the name of security. After listening to a round table forum with several well known French privacy advocates and security researchers, Shal “realized the antagonism between security & privacy was thinking all along that not getting the debate to some extent translated into other languages would be very unfortunate.
The participants tackle the deployment of cameras over Paris, face recognition, RFID usage etc. This is part 6 of the [...]
Privacy law proponents often find themselves at odds with policymakers developing security regulations. In order for effective monitoring to take place, the Government and law enforcement agencies require access to sensitive information about individuals including their financial transactions, and electronic and phone communications. The following laws are known colloquially as “anti-privacy laws” because they take away some individual privacy rights in the interest of trying to detect and prevent fraud, terrorism and other significant [...]