FTC Proposes Strengthening Children’s Privacy Rule to Further Limit Companies’ Ability to Monetize Children’s Data

by Security DeskC Suite, Compliance, FTC Actions, General NewsPosted on Comments are Disabled

The Federal Trade Commission (FTC) has proposed changes to the Children’s Online Privacy Protection Rule (COPPA Rule) to strengthen children’s privacy and limit companies’ ability to monetize children’s data. The proposed changes include prohibiting the collection of more personal information than necessary for a child to participate in an activity, clarifying the meaning of “activity,” …

Read more “FTC Proposes Strengthening Children’s Privacy Rule to Further Limit Companies’ Ability to Monetize Children’s Data”

Rite Aid Banned from Using AI Facial Recognition After FTC Says Retailer Deployed Technology without Reasonable Safeguard

by Security DeskC Suite, FTC Actions, General NewsPosted on Comments are Disabled

Rite Aid has been banned by the Federal Trade Commission (FTC) from using facial recognition technology for surveillance purposes for five years. The retailer failed to implement proper procedures, resulting in false tagging of consumers as shoplifters. The FTC’s order aims to protect consumer rights and prevent further misuse of the technology. Rite Aid will …

Read more “Rite Aid Banned from Using AI Facial Recognition After FTC Says Retailer Deployed Technology without Reasonable Safeguard”

FTC has taken action against Global Tel*Link Corp

by Security DeskBreach News, C Suite, Compliance, FTC Actions, General NewsPosted on Comments are Disabled

The Federal Trade Commission (FTC) has taken action against Global Tel*Link Corp. and its subsidiaries for failing to adequately secure personal data and notify consumers after a data breach. The breach occurred due to changes made by a third-party vendor to the security settings for the data stored in the cloud, leaving the personal data …

Read more “FTC has taken action against Global Tel*Link Corp”

Snooping in Medical Records

by Security DeskBreach News, C Suite, Compliance, General News, HIPAA News - FinesPosted on Comments are Disabled

Yakima Valley Memorial Hospital has settled with the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) for $240,000 after security guards accessed medical records without authorization. The hospital will update policies and procedures to protect patient information and train employees to prevent future breaches. OCR Director Melanie Fontes Rainer stressed the …

Read more “Snooping in Medical Records”

FTC Finalizes Order with 1Health.io Over Charges it Failed to Protect Privacy and Security of DNA Data

by Security DeskC Suite, Compliance, FTC Actions, General NewsPosted on Comments are Disabled

The Federal Trade Commission (FTC) has reached a settlement with genetic testing firm 1Health.io over charges of failing to protect the privacy and security of DNA data and making unfair changes to its privacy policy. The FTC accused 1Health.io, formerly known as Vitagene, of deceiving consumers about its privacy and security practices. The company allegedly …

Read more “FTC Finalizes Order with 1Health.io Over Charges it Failed to Protect Privacy and Security of DNA Data”

Disclosure of Patients’ Protected Health Information to a News Reporter

by Security DeskBreach News, C Suite, Compliance, General News, HIPAA News - FinesPosted on Comments are Disabled

St. Joseph’s Medical Center has settled with the Office for Civil Rights (OCR) over a HIPAA investigation regarding the disclosure of patients’ protected health information to a news reporter. The medical center provided a national media outlet with access to COVID-19 patients’ information without obtaining written authorization. OCR determined that three patients’ information was disclosed, …

Read more “Disclosure of Patients’ Protected Health Information to a News Reporter”

How Effectively Managing Risk Bolsters Cyber Defenses

by Security DeskBreach News, C Suite, Compliance, General NewsPosted on Comments are Disabled

In today’s rapidly evolving digital landscape, where cyber threats and vulnerabilities continually emerge, it’s obvious that eliminating all risk is impossible. Yet, there’s a powerful strategy that can help address your organization’s most critical security gaps, threats and vulnerabilities — comprehensive cyber risk management. It goes beyond technical controls and considers organizational factors such as …

Read more “How Effectively Managing Risk Bolsters Cyber Defenses”

FTC Announces Exploratory Challenge to Prevent the Harms of AI-enabled Voice Cloning

by Security DeskCompliance, FTC Actions, General NewsPosted on Comments are Disabled

The Federal Trade Commission (FTC) has announced the Voice Cloning Challenge to prevent the misuse of AI-enabled voice cloning technology for fraud and other harms. The challenge aims to promote the development of ideas that protect consumers from the negative effects of voice cloning. The FTC will use its enforcement authority to target companies that …

Read more “FTC Announces Exploratory Challenge to Prevent the Harms of AI-enabled Voice Cloning”

Four Ways Disasters Fuel Cyberattacks

by Security DeskBreach News, C Suite, Compliance, General NewsPosted on Comments are Disabled

Your business, in all likelihood, already faces numerous challenges in today’s tech-driven world. However, the aftermath of an unexpected disaster can push your organization to breaking point. This unintentionally creates opportunities for cybercriminals to launch devastating attacks, amplifying the chaos caused by such events. Disaster preparedness should be a top priority for your business — …

Read more “Four Ways Disasters Fuel Cyberattacks”

3 Steps to Zero Trust Cybersecurity for Small Businesses

by Security DeskC Suite, Compliance, General NewsPosted on Comments are Disabled

Cyberattacks have become rampant and have also grown in sophistication. A simple lapse in your network security could lead to a chain of events that could prove catastrophic for your business. You can avoid this by implementing a robust cybersecurity framework such as zero trust.   Zero trust asserts that no user or application should be …

Read more “3 Steps to Zero Trust Cybersecurity for Small Businesses”