Comments
Florida Law Aims To Tighten Data Security
Newest First  |  Oldest First  |  Threaded View
Alison_Diana
50%
50%
Alison_Diana,
User Rank: Author
7/9/2014 | 9:06:01 AM
Re: Nice proposal, but...
Yes, @MoarSauce, there is the nervousness that does seem to accompany every national election when you live in Florida! I live in Brevard County and our election commissioner recently unveiled new voting machines, piloted during a very small local election. I don't believe our region suffered from any major problems during the past two presidential elections (other than long lines at times), but there's always a risk when new machines are implemented (in any state!). 

In the case of the data privacy laws, I personally think one reason Florida is being so proactive is that the region has seen a lot of victims because of its population. There are many crimes against seniors here, and this is one way in which the state can try to add another layer of protection for elderly residents (and everyone else, of course). Would have to look up the stats but I read somewhere a few months ago (perhaps Florida Today?) that Florida has a higher rate of crimes against seniors, which would make sense.
moarsauce123
0%
100%
moarsauce123,
User Rank: Ninja
7/9/2014 | 5:58:33 AM
Nice proposal, but...
... Florida should first make sure that they get something simple and straight forward like an election right. I bet there will be again massive issues in Miami-Dade.
Alison_Diana
50%
50%
Alison_Diana,
User Rank: Author
7/8/2014 | 2:45:13 PM
Re: More excessive government regulation
Yes, it certainly is an election year (and already I've had notices stuck on my door and a mailbox stuffed full of fliers)! I cannot see how a small practice could feasibly cope with this new law without outside assistance. Thinking of a one- or two-doctor practice, where the burden for this type of compliance would fall upon the office manager, there really is no alternative but to find a partner that's proven to have successfully worked with other healthcare organizations (in Florida?) to address privacy, security, governance, and complaince. 
RobertS465
50%
50%
RobertS465,
User Rank: Apprentice
7/8/2014 | 1:57:36 PM
More excessive government regulation
Wow!  More burdensome regulations on Florida's businesses!  And from a Republican government.  What a surprise!  Oh, wait...it's an election year!

 
Alison_Diana
100%
0%
Alison_Diana,
User Rank: Author
7/8/2014 | 10:07:14 AM
Re: Good for consumers, but the burden falls on IT to ensure compliance!
If I was a Florida business, I'd probably begin by limiting my partnerships. I'd definitely work with a proven, third-party expert in auditing, security, risk, and compliance to review business associate agreements. I'd imagine large hospitals are really scrutinizing their partners -- and perhaps those smaller partners that survive that scrutiny can then use this as a marketing tool in some way. After all, if you are strong enough to pass XYZ Hospital's risk/security/compliance benchmarks, then it must say something about your technologies, processes, and procedures?
Alison_Diana
50%
50%
Alison_Diana,
User Rank: Author
7/8/2014 | 10:03:55 AM
Re: security solution?
Thanks, @Bob, for sharing one piece of the security equation. As you say, mobile devices are one of (if not the top) way in which data is stolen or lost, so individuals and organizations must take special care to protect them. As we've seen from some feel-good news pieces, not everyone who finds a lost device is a thief; often times, people want to do the right thing but have no idea who the rightful is or how to find the real owner. This type of solution resolves that problem! 
Alison_Diana
50%
50%
Alison_Diana,
User Rank: Author
7/8/2014 | 10:01:18 AM
Re: Good for consumers, but the burden falls on IT to ensure compliance!
@Tim - Thanks for sharing your expert opinion. I agree: As a Florida consumer, this provides me with a greater level of security. But part of me is thankful I no longer operate my one-person business! All organizations -- from sole proprietarships to massive conglomerates -- certainly should consider how they can automate as much of this process as possible. Ignorance of the law is no defense, and there are well-qualified experts within a range of budgets that can provide consulting and technological assistance to the entire spectrum of healthcare and non-healthcare organizations that do business in Florida (and elsewhere).

I agree with you, Tim, that more states are likely to follow Florida's model. I think consumers are frustrated by the constant flood of breaches and they feel helpless so they're turning to local lawmakers for assistance. These elected officials have to do something to appease voters, so they're enacting more stringent local laws.
danielcawrey
50%
50%
danielcawrey,
User Rank: Ninja
7/7/2014 | 11:29:27 PM
Re: Good for consumers, but the burden falls on IT to ensure compliance!
Very good for consumers - but it is going to be hard to manage third party risks. No one expects to have a breach, contingencies are planned for. But how much can you really rely on third party trust?

This whole issue reminds me of cloud computing to some degree because that's a third party trust as well. I think the unfortunate truth is that it will take another serious breach before we fully understand the implications of this Florida law. 
BobH088
50%
50%
BobH088,
User Rank: Apprentice
7/7/2014 | 8:52:40 PM
security solution?
One of the most common causes of data getting in the wrong hands is the loss of mobile devices that often contain a frightening amount of private information. I want to share a protection option that worked for me. Tracer tags (mystufflostandfound.com) let someone who finds your lost stuff contact you directly without exposing your private information.  I use them on almost everything I take when I travel like my phone, passport and luggage after one of the tags was responsible for getting my lost laptop returned to me in Rome one time.
TimSed_Dell
50%
50%
TimSed_Dell,
User Rank: Apprentice
7/7/2014 | 5:14:29 PM
Good for consumers, but the burden falls on IT to ensure compliance!
Thanks Alison - this is reminiscent of HIPAA and the heightened attention required by agencies and those working with agencies.

This also brings new levels of auditing into play for a much wider audience, since in effect, everyone is a consumer, and what was previously considered public data, has now been marked as private. While this is great for the Florida consumer, the burden on Florida retailers (and other commercial industries that deal with personal data), will have to implement deeper auditing (and hopefully software to automate as much as possible to enable continuous auditing) so that they aren't caught out with a data breach that causes leaks of consumers data, a fine or worst of all, damage to the corporate image (negative publicity) such that consumers no longer trust the retailer. We have certainly seen negative impacts on large retailers who have suffered from lax security and data breaches.

I think we'll see more states following Florida's lead!

 

Tim Sedlack

Sr Product Manager - Dell Software Group


IT's Reputation: What the Data Says
IT's Reputation: What the Data Says
InformationWeek's IT Perception Survey seeks to quantify how IT thinks it's doing versus how the business really views IT's performance in delivering services - and, more important, powering innovation. Our results suggest IT leaders should worry less about whether they're getting enough resources and more about the relationships they have with business unit peers.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest September 24, 2014
Start improving branch office support by tapping public and private cloud resources to boost performance, increase worker productivity, and cut costs.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.