The Washington My Health My Data Act (WHMDA) is a new law that aims to protect the privacy and security of personal health information in Washington State. The law applies to any entity that collects, uses, or discloses personal health
Assured SPC Blog
The Assured SPC Blog, published by Assured SPC, focuses on privacy and data security compliance for mid-sized businesses. It covers topics such as evolving privacy laws including state-specific regulations like Washington's My Health My Data Act, HIPAA compliance, and consumer health data protection. The blog also addresses practical aspects of privacy program implementation, risk assessment, data governance, and privacy operations automation. Additionally, it discusses cybersecurity frameworks, emerging challenges like AI/ML biases, and strategies for incremental cybersecurity improvements. The content is aimed at helping organizations navigate complex regulatory environments and implement sensible privacy and security programs.
Blog Authors
Latest from Assured SPC Blog
The Washington MHMD law could have a big impact on your organization
By Barry Weber
There are many health data privacy and protection laws in the US. Most people know HIPAA protects their privacy and requires protection of their personal health information. But it only affects specific business that are classified as covered entities (doctors,
…
Worried about AI / ML?
By Barry Weber
This is a scary moment for AI / ML
This is a scary moment for artificial intelligence / machine learning (AI / ML). We are at a point where developers are implementing AI / ML wherever there it has potential
This is a scary moment for artificial intelligence / machine learning (AI / ML). We are at a point where developers are implementing AI / ML wherever there it has potential
…
CIS Controls 8.0 Webinar
By Barry Weber
Announcing SecureTheVillage Webinar on CIS Controls 8.0
Barry Weber, a partner in Assured SPC will be joining Stan Stahl, a legendary cybersecurity evangelist in a lively discussion of the 18 controls in v8, including the Asset Type, Security Function, and
Barry Weber, a partner in Assured SPC will be joining Stan Stahl, a legendary cybersecurity evangelist in a lively discussion of the 18 controls in v8, including the Asset Type, Security Function, and
…
Agile Cybersecurity
By Barry Weber
Incremental or Agile Cybersecurity
Description: Organizations struggle with many cybersecurity issues. These issues include managing information security risk, changing threats and the cost of safeguards. An effective solution is to approach cybersecurity as a step-by-step journey. Barry Weber, vCISO and
Description: Organizations struggle with many cybersecurity issues. These issues include managing information security risk, changing threats and the cost of safeguards. An effective solution is to approach cybersecurity as a step-by-step journey. Barry Weber, vCISO and
…
Finally, a test for “reasonable” security
By Barry Weber
Overview
Many privacy laws require that organizations implement “reasonable security”. There have been many definitions of reasonable security. The Sedona Conference issued a final commentary on reasonable security for personal information on February 17, 2021. This definition is likely to
Many privacy laws require that organizations implement “reasonable security”. There have been many definitions of reasonable security. The Sedona Conference issued a final commentary on reasonable security for personal information on February 17, 2021. This definition is likely to
…
Webinar: Cybersecurity (Without Boiling the Ocean)
By Barry Weber
Announcing a Secure The Village Webinar on Cybersecurity (without boiling the ocean)
Date and Time: March 11, 2021 (10-11am PT)
Description: Organizations struggle with many cybersecurity issues demanding attention, time and money. These issues include managing information security risk, the ever-changing
Date and Time: March 11, 2021 (10-11am PT)
Description: Organizations struggle with many cybersecurity issues demanding attention, time and money. These issues include managing information security risk, the ever-changing
…
How to avoid or minimize the cost of privacy compliance
By Barry Weber
Minimizing privacy requirements is good for business
At Assured SPC, we help businesses satisfy regulatory and third-party requirements for information security and consumer/resident privacy. Whenever possible, we provide guidance on how to avoid and minimize cost and impact of privacy
At Assured SPC, we help businesses satisfy regulatory and third-party requirements for information security and consumer/resident privacy. Whenever possible, we provide guidance on how to avoid and minimize cost and impact of privacy
…
Solarwinds Orion Supply Chain Attack
By Barry Weber
Learnings from the Solarwinds Orion cybersecurity attack
Some details on the Solarwinds attack are coming out. Full details on the attack may not be fully understood for months. But we know it has been significant. I participated in an insightful
Some details on the Solarwinds attack are coming out. Full details on the attack may not be fully understood for months. But we know it has been significant. I participated in an insightful
…
Top 5 CCPA Privacy Do’s (and Don’ts)
By Barry Weber
Top 5 CCPA Privacy Do’s (and Don’ts)
There is a lot of talk about legal privacy requirements, the steps to implement a privacy program and technology that can assist. Here is a list of what we consider the Top 5
…