Data Encryption Software: Ohio Policyholder Information Data Breach Notification Rules – Ohio Department of Insurance.

Update (28 SEPT 2009): A copy of Bulletin 2009-12 can be found at According to a newly released press release by the Ohio Department of Insurance, insurance companies doing business in Ohio will have to contact the Department of Insurance if they discover a data breach.  This new requirement will go into effect on November […] read more

Data Encryption: HIPAA Data Breach Notification In Effect SEPT 23, 2009.

The Health Insurance Portability and Accountability Act (HIPAA) has a new notification requirement that goes into effect next week, on September 23.  This requirement was part of the HITECH Act, which in turn was part of the American Recovery and Reinvestment Act of 2009.  Safe harbor is provided for healthcare providers and other covered entities […] read more

Texas Personal Information Data Privacy Notification And Encryption Laws: Business and Commerce Code Chapter 521.

Under the Texas Identity Theft Enforcement and Protection Act (a link is provided at the end of this post), notification to customers is required if there is an information security breach of the customers’ computerized data.  The notification must be done as quickly as possible.  Safe harbor is provided if the sensitive data is protected […] read more

Sell Social Security Numbers, Get 10 Years In Jail And $250,000 Fine.

According to, a regular on the show “One Tree Hill” has admitted to dealing Social Security numbers.  Antwon Tanner, known as “Skills” on the CW show, got caught in a sting by the US Immigration and Customs Enforcement. He attempted to sell 16 SSNs and three fake cards to undercover officers for a total […] read more

Hard Disk Encryption: UPS In UK Encrypts All Mobile Devices.

The UK-branch of UPS has announced that all of their laptops and smartphones have been encrypted.  The increased security stems from a data breach UPS experienced nearly a year ago.  In that case, a laptop computer was stolen.  This computer did not have drive encryption software securing its contents.  The only form of data security […] read more

Nevada Personal Information Data Privacy Encryption Law NRS 603A To Replace 597.970.

Nevada passed an update version of their data privacy and breach notification laws on May 30, 2009.  According to Nevada Senate Bill 227, NRS 597.970 has been repealed to make way for NRS 603A.  The new law will go into effect on January 1, 2010, according to  And, it looks like the use of […] read more