Legislation

A worldwide movement toward data privacy legislation has put pressure on organizations to improve their information privacy and security standards. The incidence of high-profile data breaches has created the need for strict privacy legislation and regulations to control the protection of personally identifiable information. The privacy legislative landscape has recently changed, requiring security measures that not only require protection to the doors to the data, but also to the data itself. Such privacy regulations demand that organizations take responsibility for the information that they collect, store, and share, thus requiring strict conformance and compliance.

American Legislation

The United States has been the leader in the development of privacy legislation, focusing specific pieces of legislation in many different industry sectors. The 110th congress will continue efforts to enact a single, national piece of privacy legislation that will govern the entire nation in both the public and private sectors.

Gramm-Leach-Bliley (GLB) Health Insurance Portability and Accountability Act (HIPAA) Sarbanes-Oxley Act (SOX) Fair and Accurate Credit Transactions Act (FACTA) Payment Card Industry (PCI) Data Security Standards (DSS) Family Educational Rights and Privacy Act (FERPA) USA Patriot Act The Privacy Act Federal Trade Commission

American State Legislation

Several American state laws have also been recently enacted. Since the passing of the the California Senate Bill 1386 in July 2003, more than half of the American states have passed varied, but similar breach notification laws. Such laws require organizations to disclose any breach or infringement of personally identifiable information to those individuals affected by the violation.

Listing of American state legislation

Canadian Legislation

The adoption of privacy legislation is not limited only to the United States. Canada has established its own regulations and privacy framework, including two prominent pieces of national privacy legislation governing the public and private sectors.

Office of the Privacy Commissioner of Canada The Personal Information Protection and Electronic Documents Act (PIPEDA) The Canada Privacy Act

Canadian Provincial Legislation

Like the United States, there exists a fragmented approach to privacy legislation, incorporating several individual pieces of provincial legislation.

Listing of Canadian provincial legislation

International Legislation

The adoption of privacy legislation is certainly not a trend of the past, nor is it a development that is limited to North America. Several countries around the world face the same privacy challenges, and have also established their own privacy regulations. Some of the most notable pieces of international legislation include: the European Union Privacy Act (EUPA), the European Union Personal Data Protection Directive 1998, the United Kingdom Data Protection Act of 1998, the Australian Privacy Act 1988 (Privacy Amendment Act of 2000), the Japanese Personal Information Act 2003 (JPIPA), and the Hong Kong Personal Data Ordinance of 1995.

Listing of international privacy commissioners

Camouflage and Compliance

Camouflage is designed to facilitate compliance with privacy legislation as it ensures the most efficient and least risky use of sensitive information. With a greater onus placed on organizations and their senior officials to protect personal information, and with the ever-increasing requirements of strict privacy legislation, Camouflage is ideal to secure sensitive information from data thieves. The software demonstrates to internal policymakers and third party auditors that appropriate security measures are in place to secure personally identifiable information in non-production environments. With the use of Camouflage's reporting capabilities, the auditing process is more manageable and straightforward in demonstrating compliance with worldwide privacy legislation.