Executive Order 13402 commanded the creation of a Presidential Identity Theft Task Force to examine how the Federal Government could better respond to and protect against data breaches resulting in identity theft. Under Federal regulations, such as the Privacy Act of 1974 and the Federal Information Security Management Act, individuals are guaranteed the security of their data, making adequate protection of data a matter of [...]
Memorandum 06-19 was issued by the Office of Management and Budget in July 2006 to update the reporting requirements for data breaches involving personally identifiable information. It also addressed the need to budget in anticipation of providing adequate data security. Memorandum 04-26 was issued in September 2004 regarding personal use policies for employees accessing government computers and the use of file sharing [...]
In September 2006, The Office of Management and Budget issued a memorandum suggested by the President’s Identity Theft Task Force to help government departments and agencies adequately protect data.
What is Identity Theft?
Identity theft is the unauthorized use of personally identifiable information (PII) by an individual to commit fraud, usually financial related fraud. This is achieved either by using financial account information or using an individual’s Social Security Number (SSN) to open new financial accounts. Identity theft is a serious problem costing American citizens millions of dollars every year. As one of the largest collectors of information, the U.S. Government must implement strong measures to reduce the risk of security breaches leading to identity [...]
OMB Memoranda 06-15 and 06-16: Safeguarding Information Maintained by the U.S. Government
In 2006, the Office of Management and Budget published two memoranda back to back dealing specifically with protecting certain types of information maintained by the Federal Government. M-06-15 addresses safeguarding personally identifiable information. M-06-16 deals with the protection of sensitive agency information. Both memoranda reiterate the security requirements of previous regulations, and expand upon them to make them more effective.
OMB M-06-15: Safeguarding Personally Identifiable Information
M-06-15 served as a reminder to government agencies of their responsibilities towards protecting personally identifiable information.
Under the Privacy Act of 1974 agencies must:
Establish rules [...]
The E-Government Act of 2002, containing 5 separate Titles and 40 different sections, created many new regulations for the implementation and use of electronic information in the Federal [...]
The Implementing Recommendations of the 9/11 Commission Act of 2007 passed a large number of regulations to increase national security. Increasing security protection, often, unfortunately decreases privacy protection, so the act also included a number of regulations restricting the use of personally identifiable information by the Federal Government. Among these regulations is Section 803, which amended the National Security Intelligence Reform Act. This policy created new positions called privacy and civil liberties officers to oversee the protection of such rights in government agencies and [...]
Visiting the doctor’s office is a nightmare for the Data Privacy Professional. One glance at all that paper reaching as far as the eye can see and all containing so much PII. Nancy Northrup discusses a new encryption product which shows potential for slowing the persistence of the [...]
The Privacy Act of 1974 is a public sector law that regulates the use of personal information by the United States Government. Specifically it establishes rules, similar to the Fair Information Practice Principles that determine what information may be collected and how it may be used in order to protect the personal privacy of U.S. [...]
The Europeans value privacy; it is a fundamental human right in their eyes. The European Commission began legal action against the United Kingdom Tuesday for failure to “ensure, among other things, the confidentiality of communications by prohibiting interception and surveillance without the user’s [...]