HHS Urges Orgs to Develop Data Security Policies, Procedures Around Electronic Devices

The U.S. Department of Health and Human Services' Office for Civil Rights recently detailed steps organizations should take to secure protected health information (PHI) on electronic media and devices.

---

New PCI SSC Tool Educates Small Merchants on Payment Card Data Security

The PCI Security Standards Council released a new tool Tuesday designed to help small merchants better protect their customers' payment card data.

---

Semiconductor Company Awarded $66M in Trade Secret Theft Case

A California jury ruled earlier this month that Elec-Tech International Co., a Chinese competitor of semiconductor company Lumileds, misappropriated trade secrets belonging to Lumileds, and used them to develop ETI's energy efficient LEDs.

---

Financial Service Associations Petition for Data Breach Legislation

Financial services trade groups this week are pushing Congress to create a federal data breach notification standard.

---

DHS Report on Hacked Electric Utilities Highlights Supply Chain Fragility

The Department of Homeland Security confirmed this week that Russian hackers successfully infiltrated the control rooms of U.S. electrical utilities after compromising the networks of their corporate suppliers.

---

Understanding the Financial Industry Regulatory Authority (FINRA) and FINRA Rules

Learn about the Financial Industry Regulatory Authority, or FINRA, its function, and the scope of its rules, in this week's Data Protection 101, our series on the fundamentals of information security.

---

FDA Urges Data Security, Controls When Using EHR in Clinical Trials

The Food and Drug Administration issued new guidance on electronic health record data security this week that encourages employing privacy and security controls when performing clinical trials.

---

Phishing Attacks at Hospice Expose PHI, PII

A hospice in Tennessee didn't realize until months after suffering a phishing attack that it may have resulted in the access of sensitive protected health information.

---

Sinovel Fined $1.5M in IP Theft Case

Sinovel, a Chinese turbine manufacturer behind one of the decade's classic insider threat cases, was ordered to pay $1.5M by a federal judge last week for the theft of trade secrets.

---

NYDFS Extends Cybersecurity Regulation to Credit Reporting Agencies

Credit bureaus that operate in New York will have to fall in line with NYDFS's rigid cybersecurity rules by November in order to avoid stiff penalties and heavy fines.

---