PrivacyAuthority.org

Texas Drops the Ball - Exposes SSN's of 3.5 million teachers, others

2011-04-12T09:29:00.000-07:00

"This was the second high-profile technological failure at the comptroller's office in the past year. Last April, thousands of consumers seeking rebates for energy-efficient appliances could not get access through phone banks or a website. That problem was blamed on the outside vendor."

Full Story

Tennis Star Moves to Monaco for Privacy

2011-02-22T12:58:00.000-08:00

Court pro Novak Djokavic says that a lack of privacy in his native Serbia, where he enjoys a cult-like status, was the reason for his move to Monaco.

Monaco is where I call home now, says Novak Djokovic - The National

"It's [privacy] one of the reasons I am not spending too much time at home in Serbia because I just don't have my private life," he said to The National. "That's what I looked for and I found it in Monaco. I just feel great spending time there."

GOOGLE TO DEBUT CHROME "DO NOT TRACK" TOOL

2011-01-24T11:45:00.000-08:00

January 24, 2011 / http://www.politico.com/morningtech/ //-- Watch for Google today to unveil a new Chrome browser extension called “Keep My Opt-Outs,” the search company's response to recent federal calls for browser-based “Do Not Track” technology to protect consumer privacy. The new tool builds off of work by the Network Advertising Initiative – a group of Web advertisers, including Google – that allows Web users to say no to ads targeted to their browsing behavior.

The difference between NAI's own opt-out tool and Google's work is what's under the hood: NAI allows you to opt out, and communicates that via cookie, but that can be deleted whenever you erase your saved history. By contrast, Google's tool keeps the no-lever pulled permanently: It means you can avoid seeing targeted ads from NAI members, including Google and Yahoo, even if you delete your full browsing history. We hear Google will offer the code as open source, and that the company is expected to roll out a similar tool for other browsers in the future. Keep your eyes peeled today, and find more on privacy after the jump.

RFID Pickpockets in Full Effect

2010-12-07T23:03:00.000-08:00

I don't want to say I told you so...but yes I do.

The RFID industry trade groups continue to defend this rediculous technology for use in all of the wrong applications. The two worst? As I've been saying for the past few years - credit cards and passports.

Imagine the ramifacations of this with celebrities, political or public figures. What can be scanned from your daughter's purse or backpack?

It's not what you have to hide, it's what you've got to lose.

Caught Spying on Student, FBI Demands GPS Tracker Back | Threat Level | Wired.com

2010-10-08T08:47:00.000-07:00

Routine oil change uncovers unwarranted tracking device. FBI shows up to reclaim it. Oops.

Read the full story at Wired.com

New state law bans employer credit checks in hiring

2010-08-20T11:01:00.000-07:00

Character assassination by HR department employees favoring friends in applicant pool: $5 million

Privacy violation by leaks of credit reports of applicants by HR department employees: $6 million

Actually having to do an interview and decide on ability rather than circumstance: Priceless!

Clout St: New state law bans employer credit checks in hiring

Bravo, Illinois!

TV Personality home address revealed by his cell phone photo. Yours is too.

2010-08-12T13:28:00.000-07:00

Ever heard of "Geotags?"

Geotags are embedded in the photos taken by 'smart' mobile phones, and they give the exact longitude and latitude where the photo was taken. So disable the feature if your phone allows it, and be aware that when you post that photo on Twitter, Facebook or your blog, anyone can tell where it was taken.

Full Story:

Web Photo Geotags Can Reveal More Than You Wish - NYTimes.com

Think twice before referencing a photo to yourself, your home, or anyone else's. You may be jeopardizing the safety of your friends, your family, or yourself.

The Web's New Gold Mine: Your Secrets - WSJ.com

2010-08-07T11:11:00.000-07:00

PC's gather personal data, sell it for one tenth of a penny:

The Web's New Gold Mine: Your Secrets - WSJ.com

BlackBerry bites back at governments | Technology | guardian.co.uk

2010-08-07T10:48:00.000-07:00

Since President Obama's high-profile blackberry use, the platform has become one of the most secure. Intrustive governments, finding it the only phone they can't routinely monitor, are threatening to ban it's use.

Can Blackberry hold the fort?

Full story:
BlackBerry bites back at governments Technology guardian.co.uk

Principal Protected Index Investing Provides Innovative Method to Significantly Reduce Stock Market Loss and Risk

2010-06-25T02:48:00.000-07:00

Principal Protected Index Investing Provides Innovative Method to Significantly Reduce Stock Market Loss and Risk

Used Copiers - Your Data For Sale

2010-05-18T00:25:00.000-07:00

Your Doctors office, employer, bank, car dealer, mortgage company and others are selling hard drives containing perfect copies of your most private information.

In fact, nearly everything ever copied, scanned or faxed in the past decade is likely for sale in various warehouses full of second hand copiers.

Privacyauthority.org's previous posting regarding the risks of copy machines was met with disbelief. The following additional piece from CBS News may bring the proper level of attention to the matter.

Watch the CBS News Story

Craigs List Ad Leads to Home Invasion

2010-05-07T22:12:00.000-07:00

A few simple guidelines:
1. Never sell anything from your home.
2. Never reveal your home address to anyone whom you do not want to come to your house, including anyone from a cashier to a police officer.
3. Remove your home address from your ID. Nobody needs to know where your kids sleep in order to do business with you, or issue you a drivers license.
Another case of home invasion due to a published address in a classified ad, ending in tragedy. Don't be next.
FULL STORY:

Craigslist diamond ad leads to deadly home invasion, police say - CNN.com

Your Birth Date is Prime Material for ID Theft

2010-04-30T22:06:00.001-07:00

So you think that letting the world know your birth date is not an issue? Try telling that to ID thieves around the world who depend on using your birthday as the trifecta of information to assume your identity. The trifecta includes your social security number, name and date of birth. That is all that is needed to make your life a living hell of identity destruction.

To find out just how public your date of birth is use the following website http://www.birthdatabase.com/ . Type in your name or someone you know. Many US born citizens are now listed publicly. The WHOIS database lists the registrant and administrator of the website as:
Greencove Services Ltd.
PO Box 146Road
Tortola NA VG
Phone: +507.5072021221

An offshore firm is maintaining a list of potentially millions of birth records. The next question is how did they ascertain this information? Is it legal? Many states and counties now have strict requirements against anyone except the person named on the birth certificate to obtain the information.

I would strongly suggest that everyone reading this tell their friends and family and start making online complaints about this to the Federal Trade Commission (FTC). You may make an online complaint to the following link: https://www.ftccomplaintassistant.gov/ .

With millions of people subjected to their information leaking through data breaches each year just in the US alone, don't be a victim to another method of ID thieves gaining access to your personal information. Write your Members of Congress and State Legislature to pass tough privacy laws. There is a reason the European Union and various countries do not suffer the mass amount of data breaches; they have tough laws.

Legal Syping Via Mobile Phone - Who's listening to your voicemail?

2010-04-21T16:08:00.000-07:00

Private parties legally gather all caller ID data in a given region, find your name, access your voicemail, texts, conversations ad in-person meetings, all through your phone.

The Chief Information Officer of the Consular Chamber or Commerce refuses to carry a mobile phone. Heres' why:

Legal spying via the cell phone system | InSecurity Complex - CNET News

Guess Who's Coming to Dinner...

2010-04-16T20:14:00.000-07:00

Defcon Las Vegas Hacker Conference Chooses Private Homes over Hotel Rooms « Chez Paulina
Look who's coming to the neighborhood! Shut off your wireless, they hackers are back in town soon. Many Las Vegans have grown accustomed to the antics of the annual hacker convention when the cyphers invade and want to show the weakness in every computer system they can.

Residents complain about being hacked when accessing public internet connections, or having their phones hacked via open bluetooth connections. With that in mind, some are concerned about them staying in neighborhoods full of wireless routers.

Protection can be had, however, for a price. The Consular Chamber of Commerce Consultancy offers IAPP-certified expertise to keep things running smoothly. Yes, you may be hiring some of the participants in the conference itself, but if you can't beat 'em...

How much do you trust that bouncer?

2010-04-16T09:50:00.000-07:00

Australian nightclubs feel they are leading the way in scanning and retaining ID's, and even biometric data, of patrons.

No, it isn't a joke.

The more sophisticated will of course throw their heads back and laugh before walking down the street to a club with a clue. Giving a nightclub operator carte blanche to steal the patron's ID, or to lose it to a thieving employee with virtually no consequence, is not smart.

Privacy concerns as clubs roll out ID scanning - ABC News (Australian Broadcasting Corporation)

"Nightclub operators, and private business in general, are not qualified to hold your ID. Show it to them, but never hand it to them. Refuse, deny, walk out. If you operate such an establishment, understand the liability of allowing your employees to demand this info. One cell phone photo of an ID, and it's over for you." - Jonathan Warren

UN Preparing International Privacy Treaty

2010-04-05T10:49:00.000-07:00

A business seeking to outsource an operation in the United States may find it does not violate privacy law by contracting with a firm in a jurisdiction completely outside the laws of the US. A german firm may find that it is breaking the law by contracting with a service provider in the US or India, when transferring personally identifiable information is necessary.

These and other situations are leading the United Nations to act further on best practices regarding international privacy, which it published in November. A United Nations Privacy Treaty could be just around the corner.

UN treaty on privacy possible - technology | Stuff.co.nz

Privacy Settings: Don't blame your tools for your work results

2010-03-26T17:46:00.000-07:00

Articles regarding privacy evaporation, and blaming the phenomenon on social networks, makes for lots of readers. But the reality is, the social networks are seldom to blame for the embarrassing and often dangerous positions people put themselves in regarding online information sharing.

A review of privacy settings can virtually eliminate the risk of unwanted sharing. Like anything else, users need to make sure they understand the powerful tool of a Twitter or Facebook account before they begin using it. Yes, you have to read.

Linkedin, Facebook, Plaxo, Twitter, Myspace and others actually provide some of the best methods for perserving personal privacy, when they are utilized properly. In fact, many use these services instead of standard email because they mask your IP address to the public, and are capable of offering just the information you want to be presented to the public at large. They also allow you to cut off or prevent communications from any user with a simple click.

Don't Blame Facebook for the Erosion of Online Privacy - Business - The Atlantic

To review your privacy settings and your overall presentation, have a trusted friend or a personal privacy consultant go through your social networking membership page, and provide feedback. A professional can tell you what information can be gleaned from your entries, which is critical in protecting yourself online.

High-tech copy machines a gold mine for data thieves - thestar.com

2010-03-22T11:35:00.000-07:00

Beware: You now have to verify deletion of digital files kept from paper copies, in order to protect yourself. High-tech copy machines a gold mine for data thieves - thestar.com

Many Mobile Phones Now Equipped to Detect Personal Activity, Not Just Location

2010-03-12T08:53:00.000-08:00

The newest incarnation of the cellular phones offered by most manufacturers contain "accelerometers". These sophisticated sensors are easily co opted to determine what exactly the carrier is doing. The phone can tell if you are walking, sitting, driving, even eating.

Manufacturers of the co opting software and additional add-ons are are quick to point out the potential uses for employers.

BBC News - Mobile that allows bosses to snoop on staff developed

The obvious ramifications for privacy are tremendous. Access of the data falling into the wrong hands could bring about an entirely new level of thievery and voyeurism, especially in light of the Obama Administration's recent statement that Americans have "no reasonable expectation of privacy" as to the location history of their mobile phones.

The likelihood of acceptance, however, as a so-called "self protection" measure, or "mothering" feature is likely to allow for mass use, according to some industry leaders.

DMV to Scan Your Hand for Employment: Senators Schumer (D) & Graham (R)

2010-03-10T12:45:00.000-08:00

In what some are calling a case of monumental buffoonery, the Senate is about to consider a bill which would not only create a giant new bureaucracy and a new ID card which every employed person will have to buy, it also will have you going to the DMV to have your hand scanned. No kidding.

The new ID card is supposed to have something biometric "like fingerprints" to connect the holder to the card. The card is supposed to also verify that the holder is working legally. To make matters worse, employers are expected to buy $800 hand scanners from some lucky government contractor (probably in a state where a senator supports this nonsense) so that they can become the defacto immigration patrol.

Waiting in the wings are the thousands of scammers who will simply obtain the driver's licenses under fake pretenses to begin with, thereby using the ridiculous new ID card to buoy up the scam. The DMV simply is not qualified to verify immigration status.

If the motive for this legislation were anything other than pork barrel contractor gains, it would not exist. The passport already does more than the capabilities of the new ID card. In no country but the U.S. can you work, drive, open a bank account or climb on a domestic or international flight with any ID other than a passport.

The passport is verified by the State department of the issuing country, standardized as to content and structure by international treaty, internationally recognized, issued by all countries all over the world through consulates, and already held by millions. It is the toughest ID to fake, and the easiest faked ID to catch.

Contact Senator Schumer (http://schumer.senate.gov/new_website/contact.cfm) and Senator Graham (http://lgraham.senate.gov/public/index.cfm?FuseAction=Contact.EmailSenatorGraham) and let them know that your passport is the only ID you will get for work, and all you will require of your workers.

Sign the petition to make the Passport the only US National ID, on Facebook at http://apps.facebook.com/causes/causes/424117/about

Read the full story:

Worker ID Card at Center of Immigration Plan - WSJ.com

WARNING: Copy Machines Save Everything You Copy

2010-03-10T11:08:00.000-08:00

Before you copy that tax return, your ID, child's passport application, or legal documents, you'd better check the privacy policy of the copy machine owner.

Copy machines are not the Mimiagraph machines of old. They are computers attached to very sophisticated scanners. Whatever you copy is stored in that computer. For how long? Ask the machine's owner.

Where does your lawyer make copies? Who copied your loan application? what about that lease? Who copied your daughters's school amission forms? All of those images are easily extracted from the copier, usually with a laptop, and not always by the owner. Who has access to copiers containing your private information?

Chances are, you shouldn't risk copying anything with personal information on any copy machine which you do not own.

Copy Machines Can Store Your Private Info - wbztv.com

Classmates.com Sued Over Privacy Setting Change

2010-03-09T17:46:00.000-08:00

Changing privacy options without giving users the whole picture and a real opt-out option can be risky. Classmates.com apparently hoped nobody would notice.

MediaPost Publications - High School Reunion Ruin: Classmates.com Sued Over Opt-Out Privacy Setting Change 03/09/2010

Lifelock to pay $12 Million in False ID Theft Protection Claims Settlement

2010-03-09T16:21:00.000-08:00

"...Protection actually provided left enough holes that you could drive a truck through it" - FTC

03.09.2010 International Association of Privacy Professionals--/

In a press conference held Tuesday, March 9, Federal Trade Commission (FTC) Chairman Jon Leibowitz and Illinois Attorney General Lisa Madigan announced that LifeLock, Inc., has agreed to pay $11 million to the FTC and $1 million to a group of 35 state attorneys general to settle charges that the company’s claims of providing 100-percent protection against identity theft were false.

“While LifeLock promised consumers complete protection against all types of identity theft, in truth, the protection it actually provided left enough holes that you could drive a truck through it,” Leibowitz said.

In addition to the $12 million settlement, LifeLock and its co-founders Richard Todd Davis and Robert J. Maynard, Jr. are prohibited from making deceptive claims and required to better safeguard customers’ personal information.

According to the FTC’s complaint, LifeLock’s claims included protecting against identity theft “ever happening to you” and being “the first company to prevent identity theft from occurring.” The FTC, however, contended that LifeLock’s practice of placing fraud alerts on its customers’ credit reports only protected them against specific types of ID theft, but had no effect on the most common form: the misuse of existing credit card and bank accounts.

“There is nothing you can do or purchase that will provide you with a 100-percent
guarantee against identity theft,” Madigan said during Tuesday’s announcement, urging consumers to be aware of the steps they can take to protect their personal information. “Most of what they did you can do on your own, and you can do it for free.”

In addition to what the FTC described as deceptive identity theft protection claims, Leibowitz noted that LifeLock’s own data security practices did not adequately protect its customers’ information.

According to an FTC press release issued after Tuesday’s conference, LifeLock routinely collected sensitive information from its customers, including their Social Security numbers and credit card numbers, but did not encrypt the data. Additionally, the FTC alleges, “sensitive consumer information was not shared only on a ‘need to know’ basis…the company’s data system was vulnerable and could have been exploited by those seeking access to customer information.”

The FTC has confirmed it will use the $11 million it receives from the settlements to provide refunds to consumers. For more information, visit www.ftc.gov/lifelock.

— Jennifer L. Saunders IAPP

Google Execs Convicted on Privacy Charges

2010-02-24T14:38:00.000-08:00

International Association of Privacy Professionals (IAPP)/- 24 Feb. 2010

(Updated 1:31 p.m. ET)

In a decision that is expected to have ramifications worldwide, an Italian judge convicted three Google executives on privacy violations in Milan court today. Global Privacy Counsel Peter Fleischer and two other executives were found guilty of failing to comply with Italian privacy code in allowing a disparaging video to be posted online. A fourth defendant was acquitted.

Google described the decision as an “astonishing” attack on freedom of expression on the Internet. All three will appeal the decision.

Judge Oscar Magi ordered a six-month suspended jail sentence and fines for
Chief Counsel of Global Privacy among those convicted. Fleischer, Chief Legal Officer David Drummond and former Google Italy board member George De Los Reyes. The three were absolved of defamation charges.

Outside the Milan courthouse, public prosecutor Alfredo Robledo said the decision sends a clear signal. "A company's rights cannot prevail over a person's dignity.”

The trial stems from the posting of a video to Google Video—a YouTube predecessor—that showed teenage boys taunting a classmate with Down syndrome. Prosecutors charged that the executives did not do enough to keep the offensive video off its site.

The case opened the door for a debate about who is responsible for content posted to the Internet. EU law is cloudy concerning user-generated content.

In a statement, Peter Fleischer said the ruling sets a dangerous precedent. “If company employees like me can be held criminally liable for any video on a hosting platform…then our liability is unlimited.” He said today’s decision raises questions for the operators of many Internet platforms.

The ruling has provoked reactions from privacy and legal experts worldwide. “It is quite hard to comment on such an incredible sentence,” said Rome lawyer and privacy expert Rocco Panetta of Panetta & Associati, who described the sentence as “most interesting from a legal point of view” and one that “needs to be assessed with prudence.”

A Centre for Information Policy Leadership advisor likened the decision to prosecuting the post office for hate mail that is sent in the post. “I find it worrying that the chief privacy officer who had nothing to do with the video has been found guilty,” said Richard Thomas. “It is unrealistic to expect firms to monitor everything that goes online.” - IAPP

Obama Administration: "No reasonable expectation of privacy" of your mobile phone locations tracking

2010-02-13T12:37:00.000-08:00

BIG BROTHER RETURNS

The Obama administration has asserted its authority to maintain what it earlier referred to as Bush-era, draconian, big brother privacy invasion of American citizens.

With all of the next-generation mobile phones giving away your location to anyone interested enough to look, a new buffet of opportunities may be provided to your local criminal.

"I HAVE NOTHING TO HIDE"

Think you have nothing to hide? As yourself if you would answer these questions if posed by some stranger in a parking lot:

1. Where do you sleep?
2. Where do your kids sleep?
3. When are you home?
4. When are your kids home without you?
5. When is nobody home?
6. Where do you work?
7. When are you at work?
8. Where do you bank?
9. When do you go to the bank?
10. Where do you go on Saturday night?
11. Where were you on X date last year?
12. What schools do your kids go to?
13. How do they get home from school?

Do these make you uncomfortable? If so, you may in fact have 'something to hide'.

The obvious point is that having 'nothing to hide' is relative. Nothing to hide from Whom?

Nothing to hide from "the Government"? Which Government? Nothing to hid from government employees? Nothing to hide from government contractors? Nothing to hide from your next door neighbor? Nothing to hide from your co-worker? Nothing to hide from you next-door neighbor's daughter's degenerate brother-in-law? Nothing to hide from your co-worker's criminal cousin visiting from Milwaukee? Nothing to hide from the home invader lurking in the parking lot of the grocery store, looking for his next victim?

Exactly how open are you with your your invitation for others to view your private information?

OBAMA ADMINISTRATION: "NO REASONABLE EXPECTATION OF PRIVACY"

Apparently, according to the Obama Administration, you have "no reasonable expectation of privacy" of the tracking information produced by your mobile phone.

Feds push for tracking cell phones | Politics and Law - CNET News

As always, the federal government cites terrorism as its reason for needing the capability of tracking granny as she buys her depends, or Dad's stop at a slot machine. But so far, they've only shown use against American Citizens in garden-variety crimes as their told-you-so moments.

Many of course would argue that allowing such tracking to fall outside the realm of constitutional privacy puts Americans at risk of criminal activity and government abuse. As Obama argued in his campaign, the government has a strong and valid system for obtaining warrants for the searches they claim they need. They seem to some to be addicted to the voyeurism, however, facilitated by the practices of previous administrations.

Religious Right Weighs In On Human Tracking Chips

2010-02-11T06:44:00.000-08:00

The religious right is beginning to voice concern of the concept of mandatory human chipping. The practice of forceably installing tracking chips in human beings has been proposed by others on the right, as a means of tracking people who have lost their civil rights, such as certain kinds of convicted criminals.

The State of Virginia has cited religious freedoms in its decision to outlaw the practice:

House Oks Bill Banning Implanted Tracking Devices | WSLS 10

Del. Mark L. Cole (R-Fredericksburg), the bill's sponsor, said that privacy issues are the chief concern behind his attempt to criminalize the involuntary implantation of microchips. But he also said he shared concerns that the devices could someday be used as the "mark of the beast" described in the Book of Revelation in the Christian Bible.

Full story of the run-up to the vote Washington Post

The government has your baby's DNA - CNN.com

2010-02-10T21:03:00.000-08:00

Hospitals have been collecting and keeping the DNA of our children for years.

The government has your baby's DNA - CNN.com

The liability to which the the Government exposes itself by this carelessness is so catastrophic, it is difficult to tally. The opportunity for government employee abuse and a new "perfect crime" level of identity theft are obvious.

And here come the class actions...

European Parliament rejects EU-US counter-terrorism deal on sharing of personal financial data

2010-02-05T09:21:00.000-08:00

It's Official: No deal between the US and the EU on bank transfer data sharing. The US is officially out of the loop from here on, regarding SWIFT international bank transfer information.

FULL STORY - TIMES ONLINE

Secretary Clinton calls parliament chief in attempt to save bank data deal

2010-02-04T11:58:00.000-08:00

EUobserver / Clinton calls parliament chief over bank data deal

US Secretary of State Clinton has called the EU Chief of Parliament in attempts to save the now flatlining deal to turn over bank transfer information to the US.

FULL STORY - EU OBSERVER

INTERNATIONAL FUNDS TRANSFERS FROZEN BY SWIFT

2010-02-03T10:18:00.000-08:00

SWIFT Says No Transfers until Parliament Votes

The Society for Worldwide Interbank Financial Transactions (SWIFT) says it will not share European banking data with U.S. officials, pending further action by the European Parliament, reports Handelsblatt (in German).

On February 10, Parliament will vote whether to accept the SWIFT agreement reached between U.S. authorities and the EU Council of Ministers late last year, prior to the Lisbon Treaty going into effect. The agreement allows for the sharing of European citizens' transaction data with the U.S. Justice Department for counterterrorism efforts. Under the deal, SWIFT was to have resumed the data sharing as of February 1, but the society now says it will not engage in such transfers until Parliament has had its say.

It is widely expected that Parliament will vote against extending the agreement next week. "This shows that companies in the EU take Parliament seriously," says Henriette Tielemans, a partner in the Brussels office of Covington & Burling LLP. "It also shows that Parliament has every intent to use the powers that it received under the Lisbon Treaty."

EU Parliament to Reject US Demand for Bank Transfer Data

2010-02-01T10:48:00.000-08:00

Recent years of what some have described as over-reaching US policy has lead to a backlash from the European Parliament.

SWIFT, the Society for Worldwide Funds Transfers, is the mechanism by which nearly all international bank transfers are sent and received, and by which funds are verified internationally. SWIFT handles some 15 million international money transfers each day.

Secret deals during the last decade moved SWIFT servers from Europe to US Soil, so that US intelligence agencies could monitor money transfer activity over the SWIFT system. This arrangement met with severe opposition when it saw the light of day in 2009, as SWIFT defied US requests and moved its servers back to Europe.

FULL STORY: SPIEGEL ONLINE

Now the European Parliament is likely to spike a deal which would allow US terrorism investigators access to European bank transfer data. Privacy advocates oppose the deal and Germany's Federal Criminal Police Office says the data profiling is ineffective in counter terrorism efforts.

US Loses Ground in Swiss Diplomatic Banking Standoff

2010-01-29T01:31:00.000-08:00

UBS CUSTOMER WINS SWISS APPEAL, DENIES CAUSE IN TAX EVASION CLAIMS

4,450 OTHER CASES IN JEOPARDY BY PRECEDENT-SETTING CASE

FULL STORY - NY TIMES

The case follows a deal in August in which Switzerland agreed to give data to authorities in the United States on as many as 4,450 UBS accounts to settle a lawsuit in which the United States had sought information on as many as 52,000 accounts. This ruling throws doubt on whether Switzerland will be able to turn over all 4,450 accounts.

2 in 5 Employers Admit Eliminating Candidates Due To Facebook Profile

2010-01-19T10:02:00.000-08:00

Creditors have already admitted to screening you on Facebook, now its employers. Half of employers now admit to screening your facebook profile as part of the hiring process.

COMPLETE STORY from CareerBuilder.co.uk

What if they have the wrong person? Search for friends by your own name, and see how many pop up. Could you be confused with them? What if one of those other people with your name decides to pretend to be your facebook profile, to improve their chances of getting a job, or even credit?

A new Facebook application can make sure your profile checks out as yours, and that nobody else's can pretend to be you. Identify.nu, a service of the Consular Chamber of Commerce has created a global platform whereby members provide passport copies to consular officers anywhere in the world, who then verify and legalize a copy of the passport for upload to identify.nu secure servers in Denmark. The member always owns and can delete the data.

COMPLETE STORY - FACEBOOK APPLICATION

Members can trade passport identification with other members, and can authorize social networking interfaces like Facebook and even Gmail to display certain criteria, such as the name, age and confirmation that a full passport copy including passport photo is on file and can be provided to other members when authorized by the identified person.

Credit Issuers Turn to Social Networks to Profile You

2010-01-19T09:43:00.000-08:00

It's not just your score anymore. Now it's your friend list too.

CNBC: "They're able to scour the social media universe. They are constantly listening and reporting back."

-Jesse Torres, CEO of Pan American Bank in Los Angeles, regarding the new Social Network Information Aggrigators

COMPLETE STORY

New Hampshire Bars RFID

2010-01-11T12:32:00.000-08:00

Leading the nation in what is sure to be a wildfire of similar legislation, NH House votes to bar the unauthorized implants of tracking chips in people and clothing, criminalizes the use of RFID for tracking consumers.

FULL STORY: ASSOCIATED PRESS

In a further sign of things to come, the State is updating its anti-skimming laws to prohibit the closing of data broadcast by RFID-enabled credit and debit cards. The affect may render RFID without value to retailers otherwise supporting its use.

Local Governments Not Qualified to Handle Personal Data

2010-01-11T12:17:00.000-08:00

Yet another example of local government offices unqualified to handle personally identifiable information.

THINK TWICE before you turn over any personal document or information to local government, or even worse, any government contractor.

FULL STORY:

Confidential information abandoned in forgotten Houseing Authority building

Phillippine Supreme Court Wrestles With RFID for DMV

2009-12-23T18:43:00.000-08:00

A public transport group has asked the Supreme Court sday to nullify the Land Transportation Office’s radio frequency identification system for being unconstitutional.

FULL STORY

'InvisibleBracelet.org' says 'trust us' with your medical records, personal contacts, insurance and exact physical location data

2009-12-22T22:30:00.000-08:00

If you wonder how a private firm like Docvia can afford to intake, store, document, disburse, update and protect your medical history, personal emergency contacts, health insurance records and more for only $5. per year, don't. It doesn't really happen like that.

InvisibleBracelet.org, or "iB" as the firm likes to call it, appears to have a profit model entirely different than they would have you believe from their very government-looking website. In press releases accommodatingly picked up verbatim by the AP, the Company appears benevolently intervening to assist the American Ambulance Association, among others, with the capability to virtually diagnose your medical problems, call your wife, text your kids and probably take out the trash, all while you are on the way to the hospital, in the capable hands of a paramedic to whom you have granted all this data.

The magic pill to perform this miracle is iB's online storage of your information, and its provision of documents to carry in your wallet to prove it. All for $5. per year.

Or not.

According to iB's Terms of Use and Privacy Policy:

If you want to opt out, "[iB] stores all electronic communications...your health information, contact information and financial information for a period of at least ten years."

"Locator information is your name, electronic mailing address, physical address, and/or other data that allows someone to identify you."

"Docvia and your internet service provider (ISP) may use locator information as is necessary to enforce any of the terms of the Docvia Terms of Use."

"Docvia works with many business partners in making the iB service available to consumers."

"Certain features of the iB service may be used in conjunction with other Docvia products, and those features may share information..."

"Docvia may assign a Member's rights under the program with or without notice to such member."

"Aggregate information may be provided or sold to third parties."

Docvia and iB appear to be just another firm masquerading as a public service provider in an effort to gain valuable data under misleading marketing practices. This practice has itself come to be known as noncompetitive privacy policy.

Noncompetitive privacy policy is demonstrated whenever a company gathers valuable information from customers, for resale, without acknowledging the value gained, and obtaining the data under misleading circumstances.

Insurance companies and their investigators are certainly salivating to become 'partners' according to Docvia's privacy policy. This would allow them to track you using your IP address, mobile phone, and the mobile phones and contact numbers of those in your emergency contact list.

Customer lists, blinded as to specific health records, can easily be sold to insurers, health provider networks and more. The list goes on and on.

And they even get $5. from the consumer.

Has an RFID tracking chip been smuggled into your implants?

2009-12-22T14:20:00.000-08:00

According to presenters of the 2009 RFID Journal's medical proposals, RFID chips have been implemented to track "implantable medical devices."

Questions arise concerning whether or not RFID chips, which broadcast an ID number or other data, remain in the chipped products when they are implanted into patients.

Journal Evidence: http://www.rfidjournal.com/videos/healthcare

The safeguards and disclosures regarding the practice have likely yet to be developed or considered. Potential HIPAA violations, in addition to other likely challenges, are lurking, yet nobody has spoken up. The RFID Journal trade group continues to quietly lobby for zero regulation on the matter.

Auto License Plates With RFID: Sport-bike Outlaws Cited as National Cause

2009-10-11T12:19:00.000-07:00

In one of the strangest, most reaching arguments for promoting RFID contractors, the RFID Journal has printed the argument that speeders riding sports motorcycles across the US are such a menace to society that we all must now broadcast an ID number from our license plates, from 30 feet away, to anyone who wants to read it.

Believe it or not, the article actually makes the case that if the speeding sport bikers across the US only had RFID chips in the license plates, which they routinely remove or "flip" to hide, then the stalwart police would not have to give high speed and winged persuit. The image is one of the officer in his crisp uniform, slowly shaking his head as the biker goes by at mach 2, returning to his latte secure in the knowledge that the biker would get his ticket and summons in the mail.

"Drat!" Says the biker when he gets the later uniformed knock on his door, "foiled again by the RFID chip!"

Needless to say, not only would the bikers remove the entire plate if they want, since the cops can't catch them anyway, they would also buy, borrow or steal other license plates to broadcast the wrong number to the idiot with the latte.

Here's the article: Please comment!

U.S. Department of Transportation Solicits Proposals From Small RFID Companies

In actuality, it doesn't need to be a motorcycle. What do they do when they are outrun by a bicycle?

In a generous handout to what will surely be picked up by both civil libertarians and ultra-right wing conspiracy nuts, the Federal Government has jumped into the fray by having the Departement of Transportation request bids by RFID contractors to submit solution bids.

RFID SECURITY NIGHTMARE CONTINUES

2009-10-09T18:02:00.000-07:00

Our earlier post on RFID security problems (http://privacy-pimp.blogspot.com/2009/07/chips-in-official-ids-raise-privacy.html) has seen the predicted eventuality:

The SunBreak News Business Cyberthieves are Picking Pockets with RFID

Costing US Jobs: FBI’s Data-Mining System Sifts Airline, Hotel, Car-Rental Records, May Be Chasing Away Business

2009-09-23T09:25:00.000-07:00

Competetive Privacy Policy is the new vernacular referring to companies and jurisdictions which demonstrate an understanding that personal security requires personal privacy, and that the sacrifice of privacy sometimes necessary to do business with a company, or to do business within a jurisdiction, has a monetary and social value to consider, to safeguard, and at times to trade.

Companies and organizations large and small are fleeing countries with privacy policy which does not recognize the value of personal and private business data gathered, or the responsibility of the holder of the data to protect it.

Case in point: US Loses SWIFT Wire Transfer System to Europe. Again.

http://www.irishtimes.com/newspaper/world/2009/0728/1224251491497.html

Case in point: FBI invades tourism industry. Again.

FBI’s Data-Mining System Sifts Airline, Hotel, Car-Rental Records Threat Level Wired.com

Case in point: Google Street View challenged in U.K.

http://news.cnet.com/8301-1009_3-10202817-83.html?tag=mncol;title

Companies have choices as to where they operate from, where they base themselves, and where they pay taxes. Jurisdictions have to compete to get the 'customer'. Arrogance is not paying off. US lawmakers may need to get out more often to see what the competition is offering.

http://www.isoc.org/briefings/015/

http://www.msnbc.msn.com/id/15221111/ns/technology_and_science-privacy_lost/

FTC Under Heavy Pressure to Establish RFID Safeguards

2009-09-19T05:37:00.000-07:00

Washington D.C. based, non-profit Electronic Privacy Information Center (EPIC) sets its successful sights on the FTC to establish RFID safeguards

In comments to the Federal Trade Commission, EPIC reiterated recommendations (pdf) it made in 2004 to the consumer protection agency to address the risks to consumer safety of the unregulated use of RFID tags that reveal personal data. The FTC is hosting a "Transatlantic RFID Workshop on Consumer Privacy and Data Security" to discuss consumer concerns. The workshop follows an event, organized by the US Department of Commerce, promoting the benefits of RFID. Comments on RFID may be submitted to the FTC until October 23. For more, see EPIC's RFID Privacy page. (Sept. 22, 2008).

Guidelines were issued back in 2004, and are gaining traction due to the new attention given RFID in the press. They would prevent, among other things, "Tracking, Snooping and Coersion" using RFID data.

Guidelines on Commercial Use of RFID Technology
(FINAL VERSION - July 9, 2004)

Introduction

The guidelines are proposed to guide the use of RFID technology in order to protect both
private enterprise interests and consumer privacy interests. This means that these
guidelines do not address protection of consumer privacy from any governmental action.
Rather, they seek to protect consumer privacy from private enterprises. Further, these
guidelines focus on use in the retail and manufacturing industry where retailers and
manufacturers are beginning to implement item-level RFID tagging to facilitate supply
chain efficiency, inventory control, and similar applications.

These guidelines primarily address commercial, private applications which may use
RFID tags to draw conclusions about consumers without their knowledge or consent, or
that might generate data which could be used for entirely different purposes at a later
date.

These guidelines are divided into three parts. Part A addresses the duties of private
enterprises that use RFID technology. It imposes minimum requirements on RFID users,
recognizing the advantages that RFID technology can provide while at the same time
addressing privacy concerns. Part B addresses practices in which the RFID Users
should never engage, including tracking, snooping, and coercing consumers to accept
live RFID tags or associate their personal data with an RFID application. Finally, Part C
states the rights of consumers who are exposed to RFID technology and incorporates
some of the Users' duties stated in Part A.

2
Definitions
"RFID" means Radio Frequency Identification, i.e., technologies that use radio waves to
automatically identify individual items.
"Tag" means a microchip that is attached to an antenna and is able to transmit
identification information, i.e., capable of receiving data from, or transmitting data to, a
Reader.
"Reader" means a device, capable of reading data from a tag or transmitting data to a
RFID tag.
"RFID Subject" or "Individual" means a consumer, customer, or any other such individual
that comes in contact with a product that has attached to it, or contains, an RFID tag.
"RFID User" means an RFID operator, such as a store, warehouse, hospital, and the
like, who employs RFID technology, including RFID readers and tags.
"Premises" means a store, a warehouse, a hospital, or any other such equivalent space
that encompass the tags and the readers that communicate with RFID tags.
"Consent": means the freely given, specific and informed indication of a RFID subject's
wish to have his/her personal information processed by the means of RFID technologies.
RFID Guidelines

A. What RFID Users Must Do:

1. NOTICE. Give notice to a RFID Subject of:

a. Tag presence, whether through labels, logos, or equivalent means, or through
display, either at the place where a tagged item is stored, such as a shelf or counter, or
at point of sale, such as a cash register. The notice shall be reasonably conspicuous to
the individual and contain information that enables the individual to be reasonably aware
of the nature of the RFID system and the data processing in place.

b. Reader presence, whether through labels, logos, or equivalent means, or through
display, whenever tag readers are present. The notice shall be reasonably conspicuous
to the individual and contain information that enables the individual to be reasonably
aware of the nature of the RFID system and the data processing in place.
c. Reading activity. RFID Users must use a tone, light, or other readily observable and
recognized signal whenever a tag reader is in the act of drawing information from an
RFID tag anywhere on the sales floor.

2. REMOVAL. Attach tags to items in such a way as to allow for the easiest possible
removal of tags.

3. ANONYMITY PRIORITY. Any RFID user -- before linking RFID tags to personal
information -- should first consider alternatives which achieve the same goal without
collecting personal information or profiling customers. If personal information must be
collected and associated with tag data, the RFID user must satisfy the following five
requirements:

a. Consent. Obtain written consent from an individual before any personally identifiable
information of the individual, including name, address, telephone number, credit card
number, and the like, is attached to, stored with, or otherwise associated with data
collected via the RFID System.

b. Purpose. Before obtaining written consent, the RFID User must inform the RFID
subject about the purpose of associating gathered data with personal information, and
specify that purpose before such attaching, storing, or association.
c . Use limitation. Before obtaining written consent, the RFID User must inform
individuals about the scope of use of gathered data, whether the use is limited to the
person's own interests or whether the data will be disclosed to third parties. Keep data
only as long as it is necessary for the purpose for which the data was associated with
personal information.

d. No third party disclosure. Not disclose, directly or through an affiliate, to a
nonaffiliated third party an individual's personally identifying information in association
with RFID tag identification information.

e. Data quality. Keep gathered data accurate, complete and up-to-date, as is necessary
for the purposes for which it is to be used.

4. SECURITY. Take reasonable measures to ensure that any data processed via an
RFID system is transmitted and stored in a secure manner, and that access to the data
is limited to those individuals needed to operate and maintain the RFID system.

5. OPENNESS. RFID Users must make readily available to individuals, through the
Internet or other equivalent means, specific information about their policies and practices
relating to its handling of personal information. Any personally identifiable information
itself shall be provided upon written request of the individual in a secure manner.

6. ACCOUNTABILITY. Designate someone who is accountable for the RFID User's
compliance with these guidelines.

B. What RFID Users Must NOT Do:

1. TRACK. Track the movement of RFID subjects at any time without their written
consent to all tag reading events. RFID users shall not track individuals via tagged items
on the premises or outside the premises where an RFID system is employed to obtain
individual shopping habits or any other such information obtainable through tracking,
even upon suspicion of such activities as fraud or shoplifting.

2. SNOOP. Record or store tag data from tags that do not belong to the RFID User for
any reason except for the processing of returns or warranty service and upon the
consumer's request. RFID users shall not collect RFID data from objects on, or carried
by, an individual person for the purpose of generating a consumer profile, even if the
profile is assigned anonymously.

3. COERCE. Coerce or force individuals to keep tags turned on after purchase for such
benefits as warranty tracking, loss recovery, or compliance with smart appliances; and
not require individuals to provide unnecessary personal information as a precondition of
a transaction. RFID Users must allow individuals who so desire to enroll anonymously in
any RFID data-gathering scheme.

C. RFID Subjects' rights:

1. ACCESS. RFID Subjects must have the right to access data containing personally
identifiable information collected through an RFID system, and have the opportunity to
make corrections to that information.

2. REMOVAL. RFID Subjects have the right to get tags removed from tagged items.

3. ACCOUNTABILITY. RFID Subjects have the right to challenge the compliance of
persons employing RFID systems when practice contradicts the guidelines set forth
above.

CARS.gov Site Accused of Government Takeover of PC's

2009-08-06T18:00:00.001-07:00

Where is the "Privacy Czar"?

The US Federal Government's Cars.gov site, which facilitates the Cash for Clunkers program, lets the government take over the using dealer's PC and everything in it. The dealer actually has to deem his PC government property, and assign its content. Does the consumer know his info has been turned over to the Treasury?

Few would take seriously anything reported by Glen Beck or Fox News, but they broke the story. Beck tries to make it seem like this applies to consumer use of the site, which it does not, but if you are a dealer, you are in danger for two reasons.

First, the feds have control of your computer and all of its content. Files, passwords, downloads, emails, web site surfed - theirs.

Second, the consumer surely isn't noticed that they are turning over all info given to the dealer - credit, references, income, deposits, etc. - to the feds. This will surely lead to privacy violation lawsuits from the consumers against the car dealers.

Here's Beck's story:

http://www.youtube.com/watch?v=oy8wgS69xjI

US Rates Poorly in Corruption Index

2009-08-06T09:45:00.001-07:00

Transparency.org has issued its latest Corruption Barometer, whereby citizens polled rate various categories of corruption in their countries.

In the categories of Political Parties, Legislature, and Private Sector the US rated worse then Russia, Moldova, Belarus, Azerbaijan and Armenia, among others.

See the entire report at:

http://media.transparency.org/fbooks/reports/gcb_2009/

Feds at DefCon Alarmed After RFID’s Scanned | Threat Level | Wired.com

2009-08-04T10:22:00.000-07:00

Those following the privacyauthority.org entry http://privacy-pimp.blogspot.com/2009/07/chips-in-official-ids-raise-privacy.html will be interested to in this update.

Feds get a taste of their own Medicine in Las Vegas annual hacker summit.

Feds at DefCon Alarmed After RFID’s Scanned Threat Level : Wired.com

The security risks of RFID use have been visited on the very federal agent proponents of such devices. Fortunately for the feds, this surprise took place in the somewhat safer environment of the DefCon hacker convention in Las Vegas.

The amiable individuals who scanned the feds were nice enough to destroy the data in front of the feds, causing heartbeats to resume their regular rythm.

Another lesson in Las Vegas.

Bill Gates Demostrates Lack of Privacy Comprehension

2009-07-27T12:12:00.000-07:00

Quotes from Gates make one wonder if the Microsoft founder comprehends the security problems posed by over-tracking of individuals. Indeed, he does not seem to grasp the basic problem of everyone around you knowing your name and health history before you even introduce yourself:

Gates Faults U.S. Policy on Data Privacy and Immigration - NYTimes.com

It is little wonder that privacy advocates shy away from Microsoft. It will be interesting to see how they are able to compete with this inablity to comprehend the need for privacy or to act with best practices.

Privacy comprehension and practice have become a proving ground of international business, on which the US is, at least for now, failing miserably.

BACKLASH TO US FOREIGN BANKING INFORMATION GRAB

2009-07-27T11:47:00.000-07:00

In the end, banking customers make the choice. For now, it seems that Europe's more individualist and consumer-friendly approach to privacy regulation has gained the upper hand. The US has a long way to go to regain its reputation as a defender of privacy rights.

The story is also that of the US losing its bid to house the massive, job-producing data center of SWIFT, by which virtually all banks transfer funds across borders. This loss is due entirely to the fact that the US is no longer a credible location for data, due to warrantless searches, seizures, spying, insider deals and a host of related accusations. Integrity and transparency have suffered in the wake of the implementation of the USA Patriot Act, standards of practice and other regulations put into place since 9/11/2001.

The US also lost the bid for storage and management of the ID data held by identify.nu, the passport ID storage and delivery facility of the Consular Chamber of Commerce. This data was moved to Denmark for the privacy protection offered by the more comprehensive and transparent EU and Denmark regulation.

US Snooping Rights in Europe: Criticism Grows over Banking Data Deal - SPIEGEL ONLINE - News - International

The EU is about to enter talks with the US on giving it access to banking data in its fight against terrorism. German politicians from across the political spectrum are up in arms, and members of the European Parliament say they will try to scupper any deal that violates data privacy.

Israeli Biometric ID - Israel National News

2009-07-26T02:04:00.000-07:00

Israelis voice concern over biometric identification gathering by the Israeli government, including facial and fingerprint collection:

Opponents of Biometric Law: 'It's a Step to a True Police State' - Inside Israel - Israel News - Israel National News

Ethiopia Goes to Biometric Tax ID

2009-07-26T01:59:00.000-07:00

Ethiopians are concerned about privacy in the face of required fingerprinting by the Country's national taxing authority:

Ethiopian Revenue and Custom Authority Collecting Fingerprints

U.S. vs. UBS: A Fight Over Secret Swiss Bank Accounts

2009-07-17T19:57:00.000-07:00

Privacy showdown.

I love it when the US flexes diplomatic muscle. This, however, is not the proper purpose or venue. The US can't win this. Obama needs to reign in the Treasury. If the accounts were in the US, the IRS likley would not be able to get the data with the same methods.

U.S. vs. UBS: A Fight Over Secret Swiss Bank Accounts

Individuals the world over - including in the US - are siding with Switzerland 9-1. It's not the way to keep improving our standing in the world.

If the US has the names, they can pressure the individuals by other means, as we all know. They are instead looking for UBS to do their work for them. Treasury boys need to do their own homework, stick to legal methods. Yes, even if there are tax evaders in the bunch (which has yet to be determined).

Kaiser Bellflower is fined $187,500 for privacy breach [Updated] | L.A. Now | Los Angeles Times

2009-07-17T19:42:00.000-07:00

State of California deserves congratulations for catching this one:

Kaiser Bellflower is fined $187,500 for privacy breach [Updated] L.A. Now Los Angeles Times

If the State protects the medical privacy even of idiot reality show clowns, we can all be pretty confident.

I wonder how CA caught the accessing of the medical records. The article gives us no clues. Anyone got any feedback?

Twitter Hack Raises Flags on Security of Web Tools - NYTimes.com

2009-07-17T19:23:00.000-07:00

Don't Twitter your life away.

It's social engineering, actually, not hacking. The invasion is done by someone who figures out your password because your entire life is public.

They got the CEO of Twitter, and his wife. They got his Paypal account, and his credit cards. Here's how:

Twitter Hack Raises Flags on Security of Web Tools - NYTimes.com

Deal Sought in Swiss Bank Suit - washingtonpost.com

2009-07-14T11:32:00.000-07:00

Deal Sought in Swiss Bank Suit - washingtonpost.com

US cools threats against UBS when Swiss government backs decision not to allow US 'fishing expedition'. Negotiations back under way.

Chips in official IDs raise privacy fears - Yahoo! News

2009-07-11T17:46:00.000-07:00

Nightmare security issues with the new US Passport and e-Passport (Passport Card) call into question the compliance of these documents with even the most basic security issues.

Chips in official IDs raise privacy fears - Yahoo! News

The Dept. of Homeland Security did much to avoid risk of hackers getting in to the database, by making the number a mere pointer to their own files grounded in DHS computers. But the very function of the RFID chip, broadcasting an ID number, is easily co-opted by the private sector (retailers), and combined with the other information the retailer collects.

No need to obtain the government's data file, just about anyone can buy the data collected by the retailer, including your identity, all of your buying habits and payment options, demographics information, etc. The data then is neatly wrapped up and tied together with your RFID number, then sold, legally, to any number of buyers.

Now you walk through the mall, with your new drivers license, passport or passport card in your wallet, and that Israeli chick at the kiosk with the Dead Sea soap calls you by name - from 30 feet away.

Worse, some creepy guy likes what he sees when you pull up next to him in traffic. He inputs your RFID on his mobile, and gets everything about you, including address. He may even add your license plate number to the database app on his iphone.

Worse again, you can be completely watched on cameras which turn on only when you are within 30 feet, anywhere in the world. You might not be worried about that at home, but what about when you are at a foreign airport, or in a foreign city? How about when you are crossing between two foreign countries?

It seems that RFID has no redeeming value. Please comment.

Report: Bush surveillance program was massive - Yahoo! News

2009-07-10T17:01:00.001-07:00

Watch your back...

Report: Bush surveillance program was massive - Yahoo! News: "'President's Surveillance Program' did not have any connection to terrorism"

- Team of 5 US Inpectors General, July 10, 2007.

Is this what they mean by "less government?"
Maybe this is this the example we set when we say we are "spreading democracy."
Is the "freedom" our soldiers fight for?

Social-networking site Tagged accused of massive invasion of privacy traffic - San Jose Mercury News

2009-07-10T15:38:00.000-07:00

Social-networking site Tagged accused of massive invasion of privacy traffic - San Jose Mercury News

Never, never, never give any social networking site access to your email address book. Big mistake. Huge.

Virtually every social networking site attempts to gain access to your email address book right off the bat. Best practice is not to let them in to it.

Privacy breach shocker | Alberta | News | Edmonton Sun

2009-07-09T09:46:00.000-07:00

Article:

Edmonton Sun

The liability of holding this information on local hard drives far outweighs any benefit. The people who's information has been breached can be blackmailed, fired, divorced or worse when this information goes to those in their communities. The class actions will cost American companies, many of which have had the same problem and not let it hit the news, billions.

Health service providers are notoriously cavalier in the security of data and in HIPAA practices. Data security is everything here, and they's better take notice.

Court: IP Addresses Are Not 'Personally Identifiable' Information 07/07/2009

2009-07-07T13:46:00.000-07:00

MediaPost Publications Court: IP Addresses Are Not 'Personally Identifiable' Information 07/07/2009

Watch your back! Ip addresses are now considered public. The judge who decided this probably does not realize that anyone now can pull his IP address off of his email, and come to his home.

Is it Personally Identifiable Information then?

If you would rather mask your IP address, go to http://jonathanwarren.wordpress.com/.

The Management of Privacy

2009-07-06T22:07:00.000-07:00

It is amazing how much information is available regarding personally identifiable information. The consumer slander sites are providing easy dissemination of libelous material under the guise of free speech. Free speech does not protect speech that hurts others and damages people.

Whats just as scary are the data brokers like Intellius, US Search, People Finder among many others that culminate information into a neat file that anyone can pay nominal fee to ascertain past addresses, phone numbers, income, real assets, tax liens, civil suits, criminal charges or convictions, schools attended, etc. Is anything safe?
Well there is a service from http://jonathanwarren.wordpress.com/2009/06/30/privacy-for-high-profile-and-politically-exposed-individuals/ that provides privacy protection. Part of their service includes getting much of your personal data removed from these data brokers on the Internet.

Your County Assessor may have information publicly available you may want to hide such as your signature. Go to your local County Assessor website and look up your homes information and see there is any sensitive information displayed about you. You may be able to redact or remove this information with a written request.

Hire someone knowledgeable that knows where to find and snuff out your private information from public distribution.

Google Street View Pitfalls

2009-07-06T21:14:00.000-07:00

Google's Streetview product, a free service seems to be more controversial in Europe, where the dangers are more commonly understood:

http://www.sbpost.ie/post/pages/p/story.aspx-qqqt=IRELAND-qqqm=news-qqqid=42911-qqqx=1.asp

Want to scare yourself? Google your home phone number, in this format: xxx-xxx-xxx. See if it produces your address anywhere. If it does, google the address. Check Street view.

A single woman showed me how her un-listed phone number directs anyone who cares directly to her home. It also showed her car in the driveway.

The liability here is tremendous. Not only is her phone number on the FTC do-not-call list, but combining it with such information as a photo of her home may be tantamount to trading in her Personally Identifiable Information, an FTC violation.

Eliminate these risks at http://jonathanwarren.wordpress.com/2009/06/30/privacy-for-high-profile-and-politically-exposed-individuals/

Wife of Sir John Sawers, the future head of MI6, in Facebook security alert - Times Online

2009-07-06T09:39:00.001-07:00

Wife of Sir John Sawers, the future head of MI6, in Facebook security alert - Times Online

Unbelievable! Sir John and his wife could use a briefing from http://jonathanwarren.wordpress.com/2009/06/30/privacy-for-high-profile-and-politically-exposed-individuals/

pissedconsumer.com, ripoffreport.com, complaintsboard.com Violate FTC Regs

2009-07-06T02:15:00.000-07:00

A NEW SCAM

Newly formed complaint sites have sprung up in several incarnations. Each is designed to take the Better Business Bureau model to a new, for-profit extreme.

Ripoffreport.com, pissedconsumer.com (formerly pissedcustomer.com until they lost their domain name), and complaintsboard.com are happy to take any complaint about any person or business. Any gripe will do, true or not. The sites then generate a URL which includes the name of the "defendant" (read "victim") of the complaint. Complainants have learned to place the name of their adversary in the complaint line, making the complaint pop up whenever anyone executes a google search on that person or business.

High maintenance customers of small business have married themselves to these sites, using them bully retailers of all sorts into capitulation.

Search the rolls of complaints, and you will find that everyone from the President to your corner deli has hatemail posted.

How do you remove it? Generally speaking, you don't. Lawsuits have been pursued fruitlessly, with few exceptions (see http://www.citmedialaw.org/threats/johnson-v-complaintsboardcom#description) The sites hide behind freedom of speech, while using the traffic generated by your name to sell ads. And they don't just sell ads. Inquire about removal and you will quickly learn about their "Reputation Management" programs. Lucky you, now you can pay a few grand to have these anonymous gutter vermin "manage your reputation", which really means pay-to-remove-your-complaint. Yes, that's probably a form of blackmail. Tell some one who cares.

THE WEAKNESS

Slander sites may have a serious problem. Many people who want to attack a person or business will post their victim's name, address, phone number or more on the site. These pieces of information, taken together, are considered Personally Identifiable Information by the Federal Trade Commission.

By federal privacy regulations, you must have an option to remove your personally identifiable information from nearly any publication. Even worse for these blackmail sites, they trade in your information by selling ads to place in font of viewers seeking your information. Without your data, they don't have advertisers.

That amounts to trading your personally identifiable information. That's an FTC violation.

A POSSIBLE REMEDY

Anyone with personally identifiable information posted on any of these slander sites could therefore file a simple complaint with the FTC at https://www.ftccomplaintassistant.gov/. There is a wizard to help you quickly file your complaint at https://www.ftccomplaintassistant.gov/FTC_Wizard.aspx?Lang=en

If need help filing your complaint, I will be happy to help you myself. You can contact me at http://www.jonathanwarren.org/