Anatomy of a Data Breach - Association of Corporate Counsel：解剖数据泄露的企业法律顾问协会.ppt

Arrest and Conviction Records Legal filings Banks and Financial Records Mailing lists Cable Television Medical Records/Biological information/Bioidentifiers Computer crime Pharmacy Records Credit Reporting and Investigating Polygraphs in Employment Criminal Justice Records Privacy Statutes (such as the protection of certain pictures) Education Records Social Security numbers Electronic Surveillance State Constitutional guarantees Employment Records Sunshine Statutes Government Information on Persons Tax Records Identity Theft Telephone Services Insurance Records Testing in employment Library Records Tracking Licensing Information Vehicle/Drivers Licenses Types of Privacy Statutes And Regs Typically Found In State Laws Section 201(b) of the Food, Drug, and Cosmetic Act. Software is a medical device. HIPAA/HITECH and “Business Associates” FDA Regulation/HIPAA/HITECH All roads lead through Texas on medical records privacy /MedicalPrivacy.pdf Journal of Consumer Commercial Law “I Think They Mean It” By B. Joyce Yeager Do Not Track Section 22575 of the Business and Professions Code of California Compliance with 201 CMR 17:00: Standards for the Protection of Personal Information of Residents of the Commonwealth of Massachusetts Any person that receives, stores, maintains, processes or otherwise has access to personal information acquired in connection with employment or with the provision of goods or services to a Massachusetts resident has a duty to protect that information. A person, for purposes of the regulation, may be an individual, corporation, association, partnership or other legal entity. Personal information includes a surname, together with a first name or initial, in combination with one or more of the following three data elements pertaining to that person: Social Security Number; drivers license or state-issued identification card number; or financial account or credit or debit card number, with or without any o