Jay Heiser

I hesitate to suggest that what the world really needs are more laws, but it is not reasonable is not reasonable to suggest painting some lipstick on the breach notification pig and then taking credit for protecting consumers.

Comments Off

Category: IT Governance risk management security     Tags: congress, Federal government, Federal regulation, legislation, privacy, regulation, Security-Summit-NA

Share

We are in the midst of one of humanity’s grand experiments, and it is increasingly characterized by a struggle over the control of personal data.

Comments Off

Category: Cloud risk management security     Tags: congress, Facebook, Google, privacy, regulation

Share

By Jay Heiser and Carsten Casper, with Terry Allan Hicks A new court ruling on data retention practices in Germany is getting a lot of attention from the media, and from some Gartner clients. On Tuesday, 2 March, the German Federal Constitutional Court overturned a three-year-old law that required telecommunications providers and Internet service providers [...]

Comments Off

Category: Uncategorized     Tags: communications laws, government authority, politics, privacy, regulations, regulatory compliance, state power, surveillance, telecommunications

Share

I’m concerned that we’re going to legally mandate the application of last century’s standards and practices (SAS 70, FISMA, etc) to new computing models that we have only begun to understand. I’m in favor of revisiting the US privacy regulations, but it would be premature to apply them to cloud computing in any highly specific way. Commercial and goverment entities that want to store PII in unproven multi-tenanted services should be held accountable if that experiment fails.

1 Comment »

Category: Uncategorized     Tags: Cloud, PII, privacy, privacy regulation, regulation, regulatory compliance, risk assessment, security, US Congress

Share