Posted on February 6th, 2010 No comments
In mid-November the U.S. Senate Judiciary Committee approved both the Personal Data Privacy and Security Act and the Data Breach Notification Act, sending the clear message that comprehensive information protection legislation is back on the congressional agenda.
It may strike readers as odd to say “it’s back,” but consider that both the HITECH (Health Information Technology for Economic and Clinical Health Act) amendments to HIPAA (Health Insurance Portability and Accountability Act) and the Red Flag Rule were driven from outside Congress. (HITECH was actually born of the new administration’s stimulus package, and Red Flag is actually a regulatory rule change by the Federal Trade Commission.) The numerous proposed data protection bills of a few years back were killed by committee jurisdictional issues, an unsupportive administration and other priorities on the national agenda. Frustration over this situation took data protection out of serious congressional consideration for the last two or three years.
While no one can argue the national agenda has been cleared of other issues, many privacy watchers say they believe the time is ripe to move its promises of comprehensive data protection legislation forward.
In the meantime, NAID will do its best to keep members abreast of developments and exert its influence if and when the time is necessary.
By Bob Johnson – the executive director of the National Association for Information Destruction
[email protected]National Association for Information Destruction Bob Johnson, Data Breach Notification Act, HIPAA (Health Insurance Portability and Accountability Act), HITECH (Health Information Technology for Economic and Clinical Health Act), naid, National Association for Information Destruction, Personal Data Privacy and Security Act
Posted on September 25th, 2008 No comments
Many commercial records storage facilities offer records destruction as a service to their customers. However, in a survey conducted by the National Association for Information Destruction, a majority of the commercial storage firms were found lacking the equipment necessary to provide the service themselves. It is a common practice in that industry to subcontract the destruction of the records. In some cases, disreputable storage firms were found misleading their customers by charging for secure records destruction, while the materials were being sold to a recycling company for scrap.
Any business using a commercial records storage firm should inquire as to the nature of the destruction services that are available. It is an unacceptable risk to permit a storage firm to select a subcontractor to provide the records destruction service. The owner of the records is ultimately responsible for their security and, therefore, should be selecting the vendor directly.
Posted on August 19th, 2008 No comments
It’s hard to say when the term “Identity Theft” became a household phrase, but one thing is clear : Identity theft is a very real crime that robs its victims not just of their names but of their time, good credit, and sense of security. Luckily, there are ways to protect yourself and your identity from theives.
Shredding all paperwork with identifying data is the easiest, safest, and often most affordable way to protect yourself from getting your identity stolen. Unfortunately, the task of shredding your documents by yourself can be time consuming and cumbersome. Confidential shredding companies are a great alternative for both individuals and businesses regarding this matter.
Using confidential shredding services is convenient and often affordable. Customers can choose how often they need the service, ranging from as much as daily to as little as yearly, making the service viable for both the individual and for businesses that produce a higher volume of paperwork. Also, shredding services can destroy any product with indentifying data, including CD’s and floppy discs – something personal shredders cannot do.
When choosing a professional confidential shredding company, it is very important to choose one that is a member of the NAID-the National Association for Information Destruction. This association requires all members to follow a code of ethics as well as a certification program. Also, always go with a professional shredding company that requires their employees to be bonded, which gives you an extra layer of security and protection that shredding at home simply can’t provide.