Tuesday, February 25, 2003

In collaboration with the Library of International Affairs they post Documents in the News (http://worldpress.org/library/documents/) Also nice individual brief country profiles available at http://worldpress.org/map.htm. Check out Iraq[base ']s at http://worldpress.org/profiles/Iraq.cfm Great list of International Think-Tanks and Research Organizations (http://worldpress.org/library/ngo.htm) Extensive Links to World Newspapers (http://worldpress.org/gateway.htm) 6:06:51 PM    comment []

Amateur satellite makers succeeded: http://web.usna.navy.mil/~bruninga/pcsat.html It makes you wonder about the shuttle. It makes you wonder about decisions of supposedly expert government officials. 1:01:07 AM    comment []

ICANN's domain name dispute resolution process may not be as effective as we thought: http://www.law.com/jsp/article.jsp?id=1045754124197 "An arbitration panel's decision in a dispute over the rights to an Internet domain name is not entitled to "extremely deferential" review in the federal courts because such proceedings do not fall under the Federal Arbitration Act, the 3rd U.S. Circuit Court of Appeals has ruled. "In Dluhos v. Strasberg, a unanimous three-judge panel found that the dispute resolution policies established by the Internet Corporation for Assigned Names and Numbers does not qualify as a true arbitration under the FAA." 12:51:18 AM    comment []

Don't take privacy statements lightly, because the consedquences of a mistake can cost a lot and last a long time: http://www.akingump.com/docs/publication/67.pdf Remember that the Eli Lilly case was not dependent upon HIPAA but relied instead on unfair trade practice law. This is a management issue for the whole company. Thanks to tobylynns@yahoo.com and dave@farber.net Here are some sample web site privacy statements from Disney, Mattel and Viacom, where information is collected from youngsters, and the federal COPPA law applies: http://disney.go.com/legal/privacy_policy.html http://www.barbie.com/Parents/Policy.asp http://www.nick.com/blab/site_wide/privacy/index.jhtml The FTC, which enforces COPPA, has set up some useful resources including a privacy policy generator: http://www.ftc.gov/bcp/conline/edcams/kidzprivacy/index.html http://www.ftc.gov/bcp/conline/pubs/buspubs/coppa.htm http://cs3-hq.oecd.org/scripts/pwv3/pwhome.htmI HIPAA: http://www.computerworld.com/securitytopics/security/story/0,10801,80744,00.html http://www.hhs.gov/ocr/hipaa/ http://www.hhs.gov/ocr/hipaa/privacy.html http://www.hhs.gov/ocr/hipaa/guidelines/guidanceallsections.pdf] 12:31:12 AM    comment []

Summary of HIPAA privacy rules: http://www.sans.org/projects/hipaa.php Thanks to SANS Newsbites: (20/21 February 2003) The Department of Health and Human Services (HHS) has published the final version of health care information security standards under the Health Insurance Portability and Accountability Act (HIPAA). While affected entities must comply with HIPAA privacy standards by April 14, 2003, they have until April 21, 2005 to comply with the security rule. The standards include conducting a risk analysis, developing policies and procedures and contingency plans in the event of an attack, and ensuring that everyone is aware of the policies. The standards do not dictate specific technology, but instead allow health care organizations tailor their policies and procedures to their specific needs. There is some concern that the rules will invite litigation. http://www.nwfusion.com/news/2003/0220goverpubli.html http://www.fcw.com/fcw/articles/2003/0217/web-hippaa-02-21-03.asp http://www.computerworld.com/governmenttopics/government/policy/story/0,10801,78684,00.html Good seven-page summary of the 289-page HIPAA regulations: 12:23:32 AM    comment []

© Copyright 2003 Noel D. Humphreys.