{"id":621,"date":"2006-06-09T13:17:27","date_gmt":"2006-06-09T20:17:27","guid":{"rendered":"http:\/\/www.redmonk.com\/jgovernor\/wp\/?p=621"},"modified":"2006-06-09T13:17:27","modified_gmt":"2006-06-09T20:17:27","slug":"why-hipaa-and-the-uk-data-protection-act-are-bloody-useless","status":"publish","type":"post","link":"https:\/\/redmonk.com\/jgovernor\/why-hipaa-and-the-uk-data-protection-act-are-bloody-useless\/","title":{"rendered":"Why HIPAA and the UK Data Protection Act are bloody useless"},"content":{"rendered":"<p>If there is <a href=\"http:\/\/www.washingtonpost.com\/wp-dyn\/content\/article\/2006\/06\/04\/AR2006060400672.html?referrer=email&amp;referrer=email\">no enforcement<\/a> legislation provides no protection for consumers or citizens. Heathcare Insurance Portability and Accountability Act (HIPAA) just acts as a fig-leaf, a compliance tick-list item, but what is really needed is a <em>culture<\/em> of security, a <em>culture<\/em> of really caring for your customers&#8217; information. (hat tip <a href=\"http:\/\/chuvakin.blogspot.com\/2006\/06\/using-hipaa-compliance-to-sell.html\">Anton<\/a>)<\/p>\n<p>In the UK the data protection act is just as much of a <a href=\"http:\/\/www.ico.gov.uk\/\">lame duck<\/a>. Codes of practice and <a href=\"http:\/\/www.ico.gov.uk\/eventual.aspx?id=5248\">enforcement notices<\/a> achieve nothing.<\/p>\n<p>More California-style notification legislation please. Bring on that sunlight! Bring on that disinfectant. Bring on some jail sentences for negligence.<\/p>\n<p>I have talked to many people in the security field that claim their clients are deeply worried about reputational damage concerning breaches. They always seem shocked when I tell them its nonsense. The share price hits, where there are any, don&#8217;t last more than a few days&#8230;Reputational problems mean nothing when all the companies in a sector don&#8217;t get it.<\/p>\n<p>If organisations were serious about data governance, new breaches wouldn&#8217;t bubble up every week.<\/p>\n<p>Customers and citizens are being screwed. <a href=\"http:\/\/www.greghughes.net\/rant\/IdentityTheftAListOfDataBreachesWhyImShockedAndAngryAndWhyYouShouldBeToo.aspx\">I am with Greg<\/a> when it comes to the problem description, but I disagree about the solution. I actually think stronger legislation around notification is called for. The market is failing to come up with a solution and complaining isn&#8217;t getting us anywhere. We need lawyers and police involved. Sad but true. Maybe <a href=\"http:\/\/www.oag.state.ny.us\/\">Elliot<\/a> can step up once he gets this little case he&#8217;s working on finished.<\/p>\n<p>Tags: <a rel=\"tag\" href=\"http:\/\/technorati.com\/tag\/privacy\">privacy<\/a>, <a rel=\"tag\" href=\"http:\/\/technorati.com\/tag\/Data+protection\">Data protection<\/a>, <a rel=\"tag\" href=\"http:\/\/technorati.com\/tag\/data+governance\">data governance<\/a>, <a rel=\"tag\" href=\"http:\/\/technorati.com\/tag\/HIPAA\">HIPAA<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>If there is no enforcement legislation provides no protection for consumers or citizens. Heathcare Insurance Portability and Accountability Act (HIPAA) just acts as a fig-leaf, a compliance tick-list item, but what is really needed is a culture of security, a culture of really caring for your customers&#8217; information. (hat tip Anton) In the UK the<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[1],"tags":[],"class_list":["post-621","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9wfjh-a1","_links":{"self":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts\/621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/comments?post=621"}],"version-history":[{"count":0,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/posts\/621\/revisions"}],"wp:attachment":[{"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/media?parent=621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/categories?post=621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/redmonk.com\/jgovernor\/wp-json\/wp\/v2\/tags?post=621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}