Compliance, Privacy
Medical transcription provider settles data security charges
Danielle Walker August 21, 2014
The Federal Trade Commission (FTC) has finalized a settlement which resolves data security charges against a California provider of medical transcription services.
GMR Transcription Services was accused of "deceptive and unfair information security practices," when the FTC filed a complaint (PDF) saying that medical information belonging to thousands of consumers was exposed online by the company. Transcribed information provided by healthcare professionals was publicly available via major search engines, a Thursday release from the FTC explained.
Under the settlement, GMR and its owners, Ajay Prasad and Shreekant Srivastava, are barred from misrepresenting their privacy and security practices to consumers. The company must also create a comprehensive information security program, which will be evaluated by a third-party every two years.
GMR must abide by the terms of the settlement for two decades, the FTC said.
Danielle Walker
2nd Edition: How to Measure Anything in Cybersecurity Risk – Doug Hubbard – BSW #291
Richard Seiersen and our guest, Doug Hubbard, are finishing the second edition of How to Measure Anything in Cybersecurity Risk. Doug is here to share the success of the first edition and preview the second edition. With more insights, the second edition will share more more research data, free tools, and new concepts like FrankenSME. If you're ...
US data breaches in 2022 just shy of all-time high set in 2021
Stephen Weigand January 26, 2023
The Identity Theft Resource Center's annual data breach report shows 1,802 data compromises last year that affected about 422 million Americans.
Ransomware fears, regulatory requirements drive threat intelligence interest
Steve Zurier January 26, 2023
While threat intelligence remains challenging for security teams, many remain cautiously optimistic that budgets will expand and automation tools will improve.
How IT Risk Translates into Enterprise Risk
Beyond basic security compliance: Using automation to build advanced workflows
Part 2: Endless endpoints, one solution: A new strategy for simplifying endpoint management