In June 2023, PogoWasRight.org reported that DataBreaches.net (DataBreaches) had submitted a complaint and inquiry to Canada’s Commissioner of Privacy and Alberta’s Information and Privacy Commissioner. The complaint stemmed from a data leak involving mental health-related information that appeared to be collected by university researchers. The leak had been found by a member of the public…
Category: Breaches
Users say Glassdoor added real names to user profiles without their consent
Zack Whittaker reports: Users of the popular site Glassdoor, which lets anyone anonymously sign up to review companies they have worked for, say Glassdoor collected and added their names to their user profiles without their consent. One user, who goes by Monica, wrote in a post on her personal blog that Glassdoor added her name and…
Kate Middleton security ‘breach’ as hospital staff ‘attempted to view private medical records’
As if anyone really needed a reminder that breaches of even one patient’s privacy matter, just look at all the headlines this morning. How many reports do you see about allegations that an employee at The London Clinic where Kate Middleton, the Princess of Wales, was hospitalized improperly attempted to access her medical records? The…
HHS OCR Issues Updated Guidance on “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates”
From HHS OCR: On March 18, 2024, OCR revised its guidance on “Use of Online Tracking Technologies by HIPAA Covered Entities and Business Associates” to remind regulated entities and the public that the use of online tracking technologies is subject to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy, Security, and Breach…