Brightfly, Inc.» That Was Fast! http://brightfly.com Enlighten Your Enterprise Tue, 15 Jun 2010 20:45:10 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 That Was Fast! http://brightfly.com/that-was-fast/ http://brightfly.com/that-was-fast/#comments Tue, 08 Jan 2008 15:54:02 +0000 admin Related articles:
  1. Big 4 Settlements
]]> A New Jersey resident has filed a $5 million class action lawsuit against the Sears. In a complaint filed on Friday in Cook County, Ill., where Sears has its headquarters, plaintiff Christine Desantis alleges that the company’s exposure of customer data represents a breach of contract and a violation of the Consumer Fraud Act.  While the Act only applies to the state of New Jersey, I can easily see how this could snowball very quickly.  And while I think that a class action lawsuit is a bit extreme, Sears will probably settle just to get itself out of the news.  I’m also asking myself how a retailer like Sears could have done something so stupid.  It’s 2008 for heaven’s sake!  The Internet wasn’t invented yesterday, and web hacks have been around for years, so I have to ask myself who is calling the shots over there.  Can you say “IT governance issues”?


Related articles:

  1. Big 4 Settlements

]]> http://brightfly.com/that-was-fast/feed/ 0 Improperly Disposing of PII Can Cost You http://brightfly.com/improperly-disposing-of-pii-can-cost-you/ http://brightfly.com/improperly-disposing-of-pii-can-cost-you/#comments Wed, 02 Jan 2008 22:12:14 +0000 admin Related articles:
  1. The True Cost of Compliance
  2. Harmonizing Controls to Reduce Your Cost of Compliance
]]> On December 17 the FTC fined and penalized American United Mortgage Company for throwing the personally identifiable information (PII) and financial information of its customers into an open, publicly-accessible dumpster.

The ruling indicated American United Mortgage Company violated the following:
  • The Disposal Rule portion of FACTA (an amendment to FCRA)
  • The Privacy Rule portion of GLBA
  • The FTC Act

It's also interesting that the mortgage company denied throwing the customer PII into the dumpster, even though the information was found within the dumpster and used as evidence.  My question is who found these documents and how? Was the company set up by a disgruntled employee, or is the company simply lying? I guess it doesn't really matter at this point, but it's still food for thought.  The full article can be found here .

Related articles:

  1. The True Cost of Compliance
  2. Harmonizing Controls to Reduce Your Cost of Compliance

]]> http://brightfly.com/improperly-disposing-of-pii-can-cost-you/feed/ 0