FTC, Southern Methodist University Dedman School of Law to Host Workshop for Businesses on Best Practices for Protecting Personal Information and Securing Data

The Federal Trade Commission and the Southern Methodist University (SMU) Dedman School of Law will host a half-day public workshop in Dallas on Thursday, November 13, 2008, on how businesses can better secure personal information and protect the privacy of consumers and employees.

The workshop, “Protecting Personal Information: Best Practices for Business,” is presented in partnership with the International Association of Privacy Professionals and the Better Business Bureau of Metropolitan Dallas. It features business people, attorneys, government officials, privacy officers, and other experts who will provide practical guidance for businesses of all sizes on data security, privacy, best practices for developing an appropriate data-security program, and responding to data breaches and other privacy and security problems.

The FTC and SMU will provide a brief overview of the business and legal reasons to address data security. The program will also include two panels:

  • The first panel addresses steps and strategies for developing a data security plan. Panelists include: Billy Spears, Global Privacy Officer, Dell, Inc.; Sherry Ramsey, Assistant Vice President for Public Policy, AT&T; Peter Reid, Chief Privacy Officer, EDS; and Christopher Volkmer, Managing Member, Volkmer Law Firm, LLC.
  • The second panel addresses how to prepare for and respond to data breaches. Speakers will be: Kevin McCaslin, Director of Privacy and Security Compliance, Tenet HealthCare Corporation; David Morrow, Former Chief Security and Privacy Officer, EDS; Robert Scott, Managing Partner, Scott & Scott, LLP; Robert Sheffield, United States Secret Service.

The workshop starts at 9:30 a.m. in Storey Hall’s Karcher Auditorium, on the campus of SMU Dedman School of Law, 3315 Daniel Avenue, Dallas, Texas. It is free and open to the public. On-site registration begins at 9:00 a.m. Parking is available in Building #43, also known as Airline Parking Garage, at 6506 Airline Road. After the workshop, attendees may buy lunch and network with the panelists and other participants in the cafeteria of Building #6, also known as Carr Collins Hall. For information about advance registration, go to www.ftc.gov/bcp/workshops/infosecurity/index.shtm.

The workshop follows a recommendation from the President’s Identity Theft Task Force, co-chaired by the chairman of the FTC, which called on federal agencies to improve their efforts to educate the private sector on safeguarding consumers. A report issued by the Task Force recommended regional seminars to help small businesses and others in the business community understand the importance of safeguarding information, preventing and reporting data breaches, and assisting identity theft victims. The report is available at www.idtheft.gov/reports/StrategicPlan.pdf.

As part of its business education program, the FTC has information to help businesses develop their own data security plans, including an online tutorial, a booklet, and a series of
articles suitable for reprinting in print or electronic newsletters. All are available at www.ftc.gov/infosecurity.

The Federal Trade Commission works for consumers to prevent fraudulent, deceptive, and unfair business practices and to provide information to help spot, stop, and avoid them. To file a complaint in English or Spanish, visit the FTC’s online Complaint Assistant or call 1-877-FTC-HELP (1-877-382-4357). The FTC enters complaints into Consumer Sentinel, a secure, online database available to more than 1,500 civil and criminal law enforcement agencies in the U.S. and abroad. The FTC’s Web site provides free information on a variety of consumer topics.

MEDIA CONTACT:
Office of Public Affairs
202-326-2180

(FYI data security)

PassPack Password Manager

Yesterday I signed up for the PassPack Password Manager service and I learned about a whole new level of data security.  But before I continue, if you’re going to sign up for PassPack here’s an important tip:

Sign up in a place where nobody else is around and keep a pad of paper handy! This is just to record your information initially. Maybe your memory is better than mine, but I forgot my "unpack" key soon after I first signed up for the PassPack password manager (it’s actually much more than just a password manager).

From their site:

"Passpack does not maintain a copy of your Packing Key and can not recover it, nor your Entries, if it is lost."

Also important is this notice from PassPack’s "Terms and Conditions" page:

"Furthermore it is forbidden to store critical data such as, but not limited to, financial data or access data to financial institutions, or any data which, if lost, stolen or destroyed, could result in personal or public catastrophe."

Click here to view PassPack’s full Terms and Conditions.

I’m planning to discuss some impressive data security measures HyperOffice has in place, including employee-based security measures (and the legal ramifications for HyperOffice employees if the don’t follow the measures which is actually the most important part of a policy like that) but for now I just want to discuss PassPack’s security algorithm which is based on the Advanced Encryption Standard which is an algorithm approved by the National Security Agency for protecting top secret information.

Right now you can store up to 100 passwords for free but as of 6/30/2008 you can upgrade for free and then the first paid upgrade will be at about $10.00 per year and will include some features that PassPack isn’t disclosing yet.

Click here to visit the PassPack blog here to keep tabs on current developments and news.