OMB Memorandum 07-16 Safeguarding Against and Responding to the Breach of Personally Identifiable Information

Executive Order 13402 commanded the creation of a Presidential Identity Theft Task Force to examine how the Federal Government could better respond to and protect against data breaches resulting in identity theft. Under Federal regulations, such as the Privacy Act of 1974 and the Federal Information Security Management Act, individuals are guaranteed the security of their data, making adequate protection of data a matter of [...]

  • Share/Bookmark

OMB Memorandums 06-19 and 04-26: Small Changes with Big Impacts

Memorandum 06-19 was issued by the Office of Management and Budget in July 2006 to update the reporting requirements for data breaches involving personally identifiable information. It also addressed the need to budget in anticipation of providing adequate data security. Memorandum 04-26 was issued in September 2004 regarding personal use policies for employees accessing government computers and the use of file sharing [...]

  • Share/Bookmark

OMB Memoranda 06-15 and 06-16: Safeguarding Information Maintained by the U.S. Government

OMB Memoranda 06-15 and 06-16: Safeguarding Information Maintained by the U.S. Government

In 2006, the Office of Management and Budget published two memoranda back to back dealing specifically with protecting certain types of information maintained by the Federal Government. M-06-15 addresses safeguarding personally identifiable information. M-06-16 deals with the protection of sensitive agency information. Both memoranda reiterate the security requirements of previous regulations, and expand upon them to make them more effective.

OMB M-06-15: Safeguarding Personally Identifiable Information

M-06-15 served as a reminder to government agencies of their responsibilities towards protecting personally identifiable information.

Under the Privacy Act of 1974 agencies must:

Establish rules [...]

  • Share/Bookmark

The E-Government Act of 2002

The E-Government Act of 2002, containing 5 separate Titles and 40 different sections, created many new regulations for the implementation and use of electronic information in the Federal [...]

  • Share/Bookmark

Privacy and Civil Liberties Officers

The Implementing Recommendations of the 9/11 Commission Act of 2007 passed a large number of regulations to increase national security. Increasing security protection, often, unfortunately decreases privacy protection, so the act also included a number of regulations restricting the use of personally identifiable information by the Federal Government. Among these regulations is Section 803, which amended the National Security Intelligence Reform Act. This policy created new positions called privacy and civil liberties officers to oversee the protection of such rights in government agencies and [...]

  • Share/Bookmark

All that Information, and So Personal

Visiting the doctor’s office is a nightmare for the Data Privacy Professional. One glance at all that paper reaching as far as the eye can see and all containing so much PII. Nancy Northrup discusses a new encryption product which shows potential for slowing the persistence of the [...]

  • Share/Bookmark

Privacy Act of 1974

The Privacy Act of 1974 is a public sector law that regulates the use of personal information by the United States Government. Specifically it establishes rules, similar to the Fair Information Practice Principles that determine what information may be collected and how it may be used in order to protect the personal privacy of U.S. [...]

  • Share/Bookmark

Twitter is following your clicks

Several Twitter users noticed a change in their service Tuesday. It wasn’t obvious to most, and might not represent a significant difference. This examination of Twitter’s privacy policy questions their [...]

  • Share/Bookmark

EU begins legal action against UK over privacy

The Europeans value privacy; it is a fundamental human right in their eyes. The European Commission began legal action against the United Kingdom Tuesday for failure to “ensure, among other things, the confidentiality of communications by prohibiting interception and surveillance without the user’s [...]

  • Share/Bookmark