Re: Personal Info From PA. Welfare Rolls Stolen

["Dale Jordan" <jordantd () comcast net>]

Hi Rodney,
 
Not all states have the privacy laws enacted.  The link below describes the
Pennsylvania law that went into effect in 2006:
 
http://www.privsecblog.com/archives/state-legislation-pennsylvania-becomes-2
2nd-state-to-enact-a-data-breach-disclosure-law.html
 
Thank you,
 
Dale Jordan

 

  _____  

From: dataloss-bounces () attrition org [mailto:dataloss-bounces () attrition org]
On Behalf Of Rodney
Sent: Thursday, December 06, 2007 8:21 PM
To: dataloss () attrition org
Subject: Re: [Dataloss] Personal Info From PA. Welfare Rolls Stolen



On Thu, 2007-12-06 at 18:50 -0600, Henry Brown wrote:


The Department of Public Welfare began mailing letters Wednesday warning 
the recipients to take steps to protect themselves from identity theft, 
agency spokeswoman Anne Bale said.



This strikes me as odd and I have a couple of questions for the group.

1. If your data is lost and there is a clear "at fault" party as seems to be
the case here (the data was unencrypted) they isn't the "at fault party
supposed to provide ID theft protection? Is that a law or just something
done to reduce damages should they ever be sued over release of personally
identifiable information without informed consent?

2. If it is welfare rolls, then these people can't afford to do this on
their own, so again why isn't the state setting this up for them?

Rodney Wise 

_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml