Friday, January 6, 2006


News Item 4717 EPIC West: Electronic Privacy Information Center West Coast Office: CA OPP: 13 New Privacy Laws in Effect

California's Office of Privacy Protection just released an announcement that 13 new laws took effect on January 1 related to privacy. The annoucement is not yet online, but is reprinted in full in the extended entry section below. Some highlights:
11:52:14 AM  PermaLink   / trackback []  

News Item 4716 Telegraph | News | Albert wins privacy ruling

France's privacy laws were under new scrutiny yesterday after its best known magazine had to put a ruling denouncing its disclosure of Prince Albert of Monaco's illegitimate son on its front page.
11:48:51 AM  PermaLink   / trackback []  

News Item 4715 Three more states add laws on data breaches.

Three more states add laws on data breaches. Laws prescribing actions that companies must take in the event of data breaches took effect in three more states this week, adding to the complexity companies face in trying to keep up with the different requirements they must meet. [Computerworld Privacy News]
11:44:34 AM  PermaLink   / trackback []  

News Item 4714 TownOnline.com - Watertown TAB & Press - Markey slams White House on NSA surveillance program

Congressman Edward Markey, D-7th, held a forum Wednesday night on the contentious and recently revealed NSA surveillance program.

The New York Times revealed the existence of the program weeks ago, and the issue has since become a lighting rod for divisive controversy.

With an image of the U.S. Constitution as a backdrop projected behind him, Markey spoke to a nearly filled-to capacity crowd in Lexington's Museum of National Heritage auditorium. Marc Rotenberg, executive director of the privacy advocacy group EPIC, and Carol Rose, executive director for the ACLU in Massachusetts, served as a guest panel in the discussion.

Since the existence of the surveillance has come to light, the White House has insisted that the program, conducted since shortly after Sept. 11, 2001, is legal. Many privacy groups such as the ACLU and EPIC have claimed the electronic surveillance is in violation of the Constitution. So-called wiretaps are allowed by law if approved by courts. The White House has admitted that no such court authorization was granted.
Markey went through a list of justifications the White House has used in its claim of legality, labeling them myths.
11:42:31 AM  PermaLink   / trackback []  

News Item 4713 Philadelphia Inquirer | 01/06/2006 | Editorial | A dose of bad medicine

In cases stretching back years, the federal courts have upheld Americans' fundamental right to keep prying eyes from obtaining access to their most personal health information.

Why, then, have the courts of late been unable, or unwilling, to plug the biggest potential lapse in patient privacy - one triggered by a Bush administration policy?

That's a question of national importance as well as local interest, since the legal battle over patient privacy is being played out in federal court in Philadelphia.

In successive rulings - most recently by the U.S. Court of Appeals for the Third Circuit - judges have written opinions that express support for patient privacy. But their decisions would actually allow wider access to patient data.

Under challenge is a so-called federal "privacy rule" enacted in 2003 as part of HIPAA, the Health Insurance Portability and Accountability Act of 1996. Patient groups, physicians and privacy advocates make a compelling case that HIPAA's privacy protections are an illusion.

With an Orwellian turn of phrase, the "privacy rule" has little to do with patient confidentiality. In fact, it permits the widespread sharing of medical data among 800,000 or so health, business and government entities.

Patients can limit access to their medical information if they refrain from seeking care, especially for mental health and other sensitive illnesses such as cancer and AIDS. But that's neither good medicine nor good public health policy.

The HIPAA regulation was enacted in the name of streamlining health-care services and cutting red tape while protecting sensitive health data. But its undisputed side effect has been to rupture any notion of patient privacy.

Even worse, the rule as rewritten by administration officials says a patient's consent is not needed to share his health information. (An earlier version crafted by the Clinton White House gave patients far more control over their records.)

In a recent ruling, Third Circuit Judges Marjorie O. Rendell, Theodore A. McKee and Richard L. Nygaard noted their skepticism of Justice Department claims that Americans' medical records are secure. But the judges turned down the legal challenge to the HIPAA rule and came to the surprising and troubling conclusion that it isn't the government's fault if health-care providers infringe upon patient privacy.

There's enough confusion surrounding the ruling to warrant a second look by the entire Third Circuit appeals court. Failing that, the Supreme Court needs to clarify whether patients have a meaningful right to protect their medical records.

An even better prescription for patient privacy would be for Congress to restore patients' right of consent over the use of their medical records. A proposal that does that from Rep. Edward J. Markey (D., Mass.) - so far shunned by Republican leaders - illustrates how that could be done without hampering health-care providers' important work.


11:38:56 AM  PermaLink   / trackback []  

News Item 4712 The Pueblo Chieftain Online - Pueblo, Colorado U.S.A - Salazar expects compromise on Patriot Act

Sen. Ken Salazar, D-Colo., expects the Senate to reach a compromise with President Bush over the few sections of the Patriot Act that are in dispute in the legislative battle over renewing the anti-terrorism law.

"We're trying to strike a balance between protecting our privacy rights under the Fourth Amendment and protecting the nation from terrorism," Salazar said Thursday. "We are not a police state and people have a constitutional right to be secure in their privacy, their homes and their businesses."

Earlier this week, President Bush harshly criticized the Senate for not renewing the legislation, saying it was blocked for "partisan reasons." He was surrounded by nearly 20 federal U.S. attorneys at the press conference, where he called on the Senate to pass the legislation or risk aiding terrorists.

Salazar, one of a bipartisan group of nine senators who led the Senate opposition to renewing the version of the Patriot Act that was passed by the House last month, said the key issues involve a few sections of the law, dealing primarily with what evidence federal agents must disclose in getting court approval to conduct secret searches and surveillance. "All of us want the Patriot Act renewed," he said. "I'm confident we'll come to some compromise over the sections we disagree on."

He said the Senate staffs of the nine lawmakers have begun discussing various forms of language for the bill that would provide privacy protection while still giving federal agents the investigative tools the White House wants.


11:33:46 AM  PermaLink   / trackback []  

News Item 4711 Dental School Blogger Punishment Reduced.

Dental School Blogger Punishment Reduced.   John McAdams writes  "When a Marquette University Dental School student blogger made some nasty comments about an (unnamed) professor and (unnamed) classmates on his personal blog, the Dental School administration imposed a draconian punishment on him. He was to be suspended from school for a year, lose a prestigious scholarship, and seek counseling for supposed "behavioral problems." The case received wide attention, starting with local talk radio, the local daily paper and reverberated through the blogsphere.

Dental School Dean William Lobb, considering the case on appeal, has now reduced the student's punishment. The student now faces probation rather than suspension, will be allowed to keep his scholarship, and will not have to seek counseling. He will have to do 100 hours of community service, and apologize for the blog posts. While this is certainly good news for the student, it leaves open the question of how much freedom Marquette Dental School students have in posting on their personal, non-university connected blogs." [Slashdot: Your Rights Online]
11:26:33 AM  PermaLink   / trackback []  


News Item 4710 Microsoft censors Chinese blogger - ZDNet Asia

Microsoft has admitted to removing the blog of an outspoken Chinese journalist from its MSN Spaces site, citing its policy of adhering to local laws.

The blog, written by Zhao Jing, also known as Michael Anti, was removed from MSN servers on Dec. 31, according to investigative journalist and former CNN reporter Rebecca Mackinnon. She claimed that the blog was actively removed by MSN staff rather than being blocked by Chinese authorities.

A Microsoft representative told ZDNet UK on Wednesday that it blocked Anti's MSN Space blog to help ensure that the service complied with local laws in China.

"MSN is committed to ensuring that products and services comply with global and local laws, norms and industry practices. Most countries have laws and practices that require companies providing online services to make the Internet safe for local users. Occasionally, as in China, local laws and practices require consideration of unique elements," the representative said.


11:23:45 AM  PermaLink   / trackback []  

News Item 4709 Microsoft Censors Chinese Blogger.

Microsoft Censors Chinese Blogger.   wooppp writes  "Microsoft has admitted to removing the blog of a Chinese journalist from MSN Spaces. The censored site has been re-hosted elsewhere after a short down-time, but is no longer accessible to the folks in China." From the ZDNet article:  "MSN is committed to ensuring that products and services comply with global and local laws, norms and industry practices. Most countries have laws and practices that require companies providing online services to make the Internet safe for local users. Occasionally, as in China, local laws and practices require consideration of unique elements..." [Slashdot: Your Rights Online]
11:19:48 AM  PermaLink   / trackback []  

News Item 4708 Fake Anti-Spyware Makers Settle Fraud Charges.

Fake Anti-Spyware Makers Settle Fraud Charges. Two supposed anti-spyware companies that used misleading ads to frighten consumers into purchasing software to eliminate non-existent threats have settled deceptive trade practice charges brought by the Federal Trade Commission (FTC). The civil lawsuits targeted the makers of the SpywareAssassin and Spykiller software titles.  [Security Fix]
11:13:31 AM  PermaLink   / trackback []  

News Item 4707 IT Observer | Demystifying Security Enhanced Linux

In this paper I will try to explain the philosophy behind the Security Enhanced Linux (SE Linux). I will however try to explain the concept with an example but to keep the length readable I will restrain myself to go into much of implementation details for e.g. commands and similar stuff.

This flavor of linux has strong Mandatory Access control Built into the kernel where by the process and objects such as files are classified based on the confidentiality and integrity requirement, hence the affect of a security breach is reduced to minimal.

It is to be noted that this doesnot mean that SE Linux was designed to correct flaws which are present in the Linux rather it's an attempt to use MAC (in contrast to DAC used by traditional Linux Systems) to make a system which will mitigate the affects of security policy breaches to a minimum, by the help of policies which specify the security requirements of a system.

Read the full paper in PDF format

11:11:05 AM  PermaLink   / trackback []  

News Item 4706 Phone Companies Set Off A Battle Over Internet Fees.

Phone Companies Set Off A Battle Over Internet Fees.

Large phone companies, setting the stage for a big battle ahead, hope to start charging Google Inc., Vonage Holdings Corp. and other Internet content providers for high-quality delivery of music, movies and the like over their telecommunications networks.

...

"They want to charge us for the bandwidth the customer has already paid for," said Jeffrey Citron, chief executive of Vonage. Customers who already pay a premium for high-speed Internet access, he said, will end up paying even more if online services pass the new access charges to consumers. "The customer has to pay twice. That's crazy."

[Public Knowledge - Breaking News]
11:05:28 AM  PermaLink   / trackback []