E-Records
May 11, 2008
* New on LLRX.com
April 06, 2008
March 26, 2008
* National Committee on Vital and Health Statistics Report Issued

National Committee on Vital and Health Statistics, 2005-2006. February 2008 37 pp. (PHS) 2008-1205

  • "This report is the latest in a series of periodic reviews of the work of the National Committee on Vital and Health Statistics (NCVHS), the statutory public advisory committee on health information policy to the Secretary of the U.S. Department of Health and Human Services (HHS). During this 2-year period, the Committee produced recommendations on privacy issues in the Nationwide Health Information
    Network (NHIN); functional requirements for the NHIN; improvements to data on race, ethnicity, and language; personal health records and systems; multiple Health Insurance Portability and Accountability Act (HIPAA), Consolidated Health Informatics (CHI), and e-prescribing standards; quality measurement; and reflections on lessons learned from the first 10 years of HIPAA."
  • March 23, 2008
    * Paperless Existence Still an Illusion - At Work and at Home

    Still Seeking a Truly Digital Life - Analysis: "The French call it 'dematerialization' but the search for a paperless existence continues to elude even technophiles." Peter Sayer, IDG News Service.

    March 21, 2008
    * White House Discloses Destruction of Computer Hard Drives

    Follow up to previous postings on litigation and hearings on missing White House email and violations of the Presidential Records Act, news today from AP: "Older White House computer hard drives have been destroyed, the White House disclosed to a federal court Friday in a controversy over millions of possibly missing e-mails from 2003 to 2005. The White House revealed new information about how it handles its computers in an effort to persuade a federal magistrate it would be fruitless to undertake an e-mail recovery plan that the court proposed."

    February 27, 2008
    * A Legal and Policy Analysis - Personal Health Records: Why Many PHRs Threaten Privacy

    The World Privacy Forum - A Legal and Policy Analysis - Personal Health Records: Why Many PHRs Threaten Privacy, Prepared by Robert Gellman for the World Privacy Forum, February 20, 2008

  • "This document offers a legal and policy analysis of the privacy consequences for consumer health information stored on or by Personal Health Records systems that are not subject to the HIPAA health privacy rule. This document does not analyze the potential of PHRs for affecting the cost of health care in general. Unless specifically noted in the text, the term PHR in this document refers to PHR records and systems that are not subject to HIPAA."
  • February 10, 2008
    * Move to Paperless Homes May Also Increase Energy Use

    New York Times: Pushing Paper Out the Door, by Hannah Fairfield

  • "A paperless world isn’t automatically a boon for the environment, though. While these digital toys reduce dependence on one resource, they increase it on another: energy. Some devices are always plugged in, eating electricity even when not in use, and gobbling huge amounts of power when they are. Others, like digital cameras and laptop computers, use electricity while they are recharging."

  • Graphic of global trail of paper use
  • * Health Care Reform: CED Releases Harnessing Openness to Transform American Health Care

    "The Committee for Economic Development (CED)...released a new report – Harnessing Openness to Transform American Health Care (94 pages, PDF) – that focuses on how to improve health care by giving people more access to information and making the information more responsive to their contributions. The report touches on the entire production system for health care from biomedical research to clinical trials to electronic health care records and patient/doc interactions. It also addresses open access publishing of research results and access to clinical trial data, openness in public health, the impact of greater openness on approval of medical devices, and open models of innovation. The report was prepared by CED's Digital Connections Council (DCC). The DCC is a group of information technology experts from CED-affiliated companies established to advise CED on the policy issues associated with the digital economy and emerging technologies. This report follows the late 2007 release of CED’s report, Quality, Affordable Health Care For All: Beyond The Employer-based Health-insurance System, which includes findings and recommendations on health care reform from CED."

    February 04, 2008
    * GPO Authenticates Federal Budget by Digital Signature

  • Press release: "The U.S. Government Printing Office (GPO) authenticates the first-ever online Federal Budget by digital signature. The visible digital signature on an online PDF document serves the same purpose as handwritten signatures or traditional wax seals on printed documents. This signature assures the public that the document has not been changed or altered. A digital signature, viewed through the GPO Seal of Authenticity, verifies the document’s integrity and authenticity."
  • January 29, 2008
    * Opportunity for public comment on the accuracy of credit reports

    World Privacy Forum: "Consumers and organizations have an opportunity to submit public comments about the accuracy and integrity of credit reports. Until February 11, the Federal Reserve Board, the Federal Trade Commission and other banking agencies will be accepting comments on their draft rulemaking regarding how creditors and other furnishers provide information to consumer reporting agencies, and which types of direct disputes they must handle. This proposed rulemaking is a key one; it defines what accuracy and integrity of information provided to consumer reporting agencies means, how disputes may be handled directly with the furnishers, and which types of direct disputes furnishers may ignore. The NCLC, Consumer's Union, and the World Privacy Forum have written a sample letter that may be downloaded and used or modified for the comments. To file your letter, submit your comments to the Board of Governors of the Federal Reserve System by mailing the comments to regs.comments@federalreserve.gov with the subject line "Docket No. R–1300."

  • See the Sample Letter

  • See the FTC's Notice of Proposed Rulemaking
  • January 24, 2008
    * Sensitive Data Retrieved From Used Government Tapes

    Press release: "Congresswoman Betty McCollum (MN-04), has sent a letter to the Government Accountability Office asking that it reopen its investigation of the privacy and national security risks posed by government agencies reselling used magnetic data tapes that may once have contained large amounts of sensitive personal and government information. Researchers working for Imation, an Oakdale, MN-based corporation that produces magnetic data tapes, were able to recover a wide range of sensitive information from used data tapes that were supposedly wiped clean before being re-sold. Using readily available equipment and information, Imation investigators found out where the tapes originated and recovered bank account numbers, expense reports, employee tax and benefit information, and other sensitive data."

    * Coalition for Patient Privacy: Resources for Consumers

    Coalition for Patient Privacy: "Our mission is to ensure that Americans control all access to their health records."

  • "National Committee on Vital and Health Statistics report, Enhanced Protections for Uses of Health Data: A Stewardship Framework for 'Secondary Uses' of Electronically Collected and Transmitted Health Data. The report recommends that Americans have NO control over access to their electronic health information."

  • Patient Privacy Toolkit: Privacy Instructions: Give to all Providers; How to Talk to Your Doctor; Your Health Privacy Rights; Health Privacy Complaint Form to HHS
  • January 18, 2008
    * Chairman Waxman Schedules Hearing to Examine Preservation of White House E-mails

    Follow up to previous postings on missing White House emails, from the House Oversight Committee: "On February 15, the Committee will hold a hearing to investigate White House compliance with the Presidential Records Act. Statements made at the January 17 White House press briefing contradict information provided to the Committee, which revealed that a 2005 White House analysis found no archived mail for hundreds of days between 2003 and 2005. The following officials have been invited to testify: Fred Fielding, Counsel to the President; Alan Swendiman, Director, Office of Administration; Allen Weinstein, Archivist of the United States."

  • Letter to Fred Fielding

  • Letter to Allen Weinstein

  • White House Press Briefing by Tony Fratto for January 17, 2008: "...I'm saying we have no evidence that shows that anything at all is missing. And you're saying, well, have you found the missing emails -- and we say we have no evidence that anything is missing..."
  • January 14, 2008
    * Growing Concerns About Preservation of Presidential Records

    New Questions Raised About White House Records Preservation: "In letters to the White House and the National Archives, House Oversight Chairman Waxman asks whether the White House has preserved its records according to the obligations of the Presidential Records Act, and what the White House has done to prepare for the transition of presidential records to the Archives in January 2009."

    Documents and Links

  • Letter to Allen Weinstein, Archivist of the United States
  • Letter to Fred Fielding, White House Counsel

  • Government Executive: "By Feb. 1, the National Archives and Records Administration and the White House must provide congressional watchdogs with an update on preparations for the transition of all presidential records to the National Archives by January 2009. Concerns over progress might be well-founded: Proper handling of electronic documents, the need to identify and centralize pertinent records, and the sheer volume of information all leave the White House with a mammoth project on its hands."

  • January 12, 2008
    * British Educational Communications and Technology Agency Report on Windows Vista and Microsoft Office 2007

    Press release: "Becta [British Educational Communications and Technology Agency], the education technology agency, has published a key report on Microsoft Vista and Office 2007 and on document interoperability which analyses the suitability of both software packages for adoption by schools and colleges."

  • Microsoft Vista and Office 2007: full report, Published: 9 January 2008, Publication ID: BEC1-15529, 40 pages, PDF
  • December 31, 2007
    December 28, 2007
    * Proofpoint Reports Spam Email Trends for November 2007

    Press release: "Proofpoint, Inc., the leading provider of unified email security and data loss prevention solutions, today reported spam trends for data collected during the month of November 2007, finding that, on average, spam continues to represent nearly 90% of the total email volume received by large enterprises. Attachment-based spam made a comeback with the prevalence of image-based spam, PDF spam and Microsoft Word document spam all increasing over October levels."

    December 12, 2007
    * Privacy, Public Access and Policymaking in State Redaction Practices

    Government Technology: "A new white paper designed to help public officials develop policies for removing Social Security numbers and other sensitive information from public documents is now available online. The National Association of Secretaries of State (NASS), in collaboration with the National Electronic Commerce Coordinating Council (eC3), today released a joint white paper on redaction entitled Privacy, Public Access & Policymaking in State Redaction Practices. Developed with input from leading experts in government, academia and the private sector, the paper is the first national report specifically written for state and local leaders coping with data security issues in public records."

    December 03, 2007
    November 28, 2007
    * Report - The Search is On: State CIO Starting Points for E-Discovery

    National Association of State Chief Information Officers - The Search Is On: State CIO Starting Points for E-Discovery
    November 2007
    : "In its September 2007 Issue Brief entitled Seek and Ye Shall Find? State CIOs Must Prepare Now for E-Discovery!, NASCIO raised the importance of State CIO involvement in e-discovery and the need for collaborative state electronic records management activities to properly address e-discovery requests. In this follow-up Research Brief, NASCIO provides starting points for State CIOs to improve the state’s ability to successfully address legal requests for electronic information.

    Topics include:

  • Getting Started on Electronic Records Management

  • Managing an Electronic Records Management Initiative

  • The Role of Records Retention Schedules · The Challenge of Retrieving Electronic Information

  • Electronic Records Management Training and Awareness for State Employees

  • November 21, 2007
    * UK Government Loses Personal Data on 25 Million Citizens

    20 November 2007, Statement to the House of Commons by Chancellor of the Exchequer, Alistair Darling, MP, on HMRC

  • "With your permission Mr Speaker I should like to make a statement on the breach of procedures which led to missing personal data relating to child benefit from Her Majesty's Revenue and Customs...The National Audit Office - which is independent of Government, but answerable to Parliament - has a right to ask for and access data from HMRC in discharging its compliance responsibilities. In March of this year it appears that a junior official within HMRC provided the National Audit Office with a full copy of HMRC's data in relation to the payment of child benefit [The missing information contains details of all child benefit recipients: records for 25 million individuals and 7.25 million families. These records include the recipient and their children's names, addresses and dates of birth, it includes Child Benefit numbers, National Insurance Numbers, and, where relevant, bank or building society account details]. In doing so it is clear that the strict rules governing HMRC standing procedures were not followed. These procedures relate to the security and access to data as well as its transit to ensure that data is properly protected. This information should not have been handed over by HMRC in the way that it was. However, I understand that in this case the NAO subsequently returned all the information it received in March to HMRC after auditing it. It now appears that following a further request from the NAO in October for information from the Child Benefit database, and again at a junior level and again contrary to all HMRC standing procedures, two password protected discs containing a full copy of HMRC's entire data in relation to the payment of child benefit was sent to the NAO, by HMRC's post system operated by the courier TNT. The package was not recorded or registered. Mr Speaker, it appears the data has failed to reach the addressee in the NAO. Mr Speaker, I also have to tell the House that on finding that the package had not arrived at the NAO, a further copy of this data was sent, this time by registered post, and which did arrive at the NAO. However, again HMRC should never have let this happen. Although it is believed the data was sent from HMRC to the NAO on 18 October, the fact it did not arrive it was not reported to HMRC's senior management until 8 November, nearly 3 weeks later. I was informed on Saturday 10 November and immediately instructed that comprehensive searches be carried out of all premises where the missing data might be found. These searches are continuing...On Monday 12 November HMRC informed me that evidence might have had been found of the route taken by the data and that the data was likely to be found. However, by Wednesday 14 November it was clear to me that the HMRC searches had failed to find them. I therefore instructed the Chairman of HMRC to call in the Metropolitan Police to conduct a full investigation in order to find the missing package."
  • October 28, 2007
    * Archive Seeks to Discover Full Extent of Missing E-Mails at White House

    Follow up to previous postings on litigation and hearings on missing White House email and violations of the Presidential Records Act: "The National Security Archive filed a motion on Friday, October 26, seeking expedited discovery against the Executive Office of the President to find out what e-mails are missing from the White House e-mail system or backup tapes. Archive General Counsel Meredith Fuchs explained, “The pressing need for the information arises out of troubling representations by the EOP and its components about its document preservation obligations and the location of its backup tapes. We need information so we can take steps to preserve all possible sources of e-mails deleted from the White House servers.” Also on Friday, a similar motion was filed in a virtually identical lawsuit brought by Citizens for Responsibility and Ethics in Washington (CREW) on September 25, 2007.

    The Archive filed this case on September 5, 2007, against the Executive Office of the President (EOP) and its components seeking to recover at least 5 million federal e-mail records improperly deleted by the EOP. After the government failed to provide adequate assurances that backups and copies of the missing e-mail would be preserved throughout this litigation, on October 11, 2007, CREW filed a motion for a temporary restraining order against the White House defendants in its case. A hearing in CREW’s case was held before Magistrate Judge Facciola on October 17, 2007. Magistrate Judge Facciola issued a Report and Recommendation on October 19, 2007, advising the Court to grant a temporary restraining order. The government has filed objections to Magistrate Judge Facciola’s Report and Recommendation, and CREW has responded to the government’s objections."

    September 06, 2007
    * Seek and Ye Shall Find? State CIOs Must Prepare Now for E-Discovery

    NASCIO - Seek and Ye Shall Find? State CIOs Must Prepare Now for E-Discovery, September 2007: "In increasingly consolidated state technology environments, State CIOs may have heightened responsibility for the storage, preservation and retrieval of electronic information in response to e-discovery requests. Since government information is a knowledge asset, State CIOs must ensure the proper management of state information assets in addition to the technological infrastructure for locating and retrieving that information. This issue brief explains the impact for State CIOs of e-discovery requests and encourages State CIOs to pursue a holistic approach to enterprise records management as part of a team of state government stakeholders, including state legal counsel, archivists, records managers, and agency business leaders."

    August 18, 2007
    * The Challenge of Electronic Discovery: How Reference Service, Records Management and Litigation Support Interact

    Materials from PLL Programs at AALL 2007 - The Challenge of Electronic Discovery: How Reference Service, Records Management and Litigation Support Interact, Speakers: John Montaña, Esq., PelliGroup, Inc. and Rachelle L. DeGregory, Esq., LexisNexis [PowerPoint document]

    July 26, 2007
    * Public Comments On National Disaster Medical System and Privacy Issues

    "The World Privacy Forum has filed public comments with the Department of Health and Human Services requesting that its new National Disaster Medical System protect all patient information to at least the baseline protections that HIPAA affords, including the HIPAA security and privacy protections. Currently, the new system does not do this, even though the system is housed at HHS, the agency which promulgated the HIPAA standards. The National Disaster Medical System currently contains overbroad routine uses which could potentially result in significant privacy and even public health issues. For example, public health information will not be able to be disclosed under the National Disaster Medical System as the system is currently organized. Additionally, some of the current routine uses in the system would authorize disclosures that would be illegal under HIPAA. For example, Congressional disclosure of a HIPAA record requires a written authorization, something the new system does not require. Read the comments (PDF)."

    July 25, 2007
    * Electronic Records Management and Digital Preservation: Protecting the Knowledge Assets of the State Government Enterprise

    Electronic Records Management and Digital Preservation: Protecting the Knowledge Assets of the State Government Enterprise, PART II: Economic, Legal, and Organizational Issues, July 2007

  • "NASCIO continues its series on electronic records management and digital preservation with Part II which focuses on economic, legal, and organizational issues and recommended actions for State CIOs. Part II builds on the theme that the state CIO and the state enterprise architect will need to view electronic records management and digital preservation as disciplines that comprise an enterprise architecture domain. Partnering with the state’s archivists, librarians, and records managers to fully leverage their expertise will help ensure the state’s knowledge assets are managed for value with a long term view. eDiscovery and offshoring present significant challenges to the state enterprise. CIOs will need to build their awareness of these subject areas and author necessary compliance and risk management strategies."

  • Electronic Records Management and Digital Preservation: Protecting the Knowledge Assets of the State Government Enterprise, PART I: Background, Principles and Action for State CIOs, May 2007
  • July 21, 2007
    * Personal Health Data Processed by DOD Contractor Compromised By Internet Security Failure

    Press release: "Personal information of certain uniformed service members, family members and others was placed at risk for potential compromise while being processed by SAIC under several health care data contracts for military service customers, the company said today. SAIC remedied the security lapses upon learning of them and began working with the customers to mitigate any potential impact. Forensic analysis has not yielded any evidence that any personal information was actually compromised; however, the possibility cannot be ruled out. SAIC is notifying approximately 580,000 households, some with more than one affected person."

  • Science Applications International Corp. Response to Data Security Failure
  • July 05, 2007
    * Report - Toward a Safer and More Secure Cyberspace

    Toward a Safer and More Secure Cyberspace, Seymour E. Goodman and Herbert S. Lin, Editors, Committee on Improving Cybersecurity Research in the United States, National Research Council, 272 pages, pre-publication copy, 2007.

  • "Toward a Safer and More Secure Cyberspace examines the vulnerabilities of the Internet and offers a strategy for future research aimed at countering cyber attacks. The report also explores the nature of online threats and some of the reasons why past research for improving cybersecurity has had less impact than anticipated."

  • Table of Contents - links to full text by section

  • PDF Executive Summary, 33 pages, PDF

  • See also the "Cyber Security Research and Development Act (PL 107-305, enacted November 27, 2002) which authorized this study to provide advice regarding the appropriate locus for federal cybersecurity research.
  • June 24, 2007
    * Debate On Public Access to Public Records Online Escalates

    WSJ free feature: When Public Records Are Too Public - Open Records Are an Established Tradition, But Does Internet Access Call for a Change?: "Property deeds, marriage and divorce records, court files, motor-vehicle information and tax documents are increasingly being digitized, and contain a wealth of information that few of us would want online: Social Security numbers, birth dates, maiden names and images of our signatures. Local governments have rushed to put those documents online for a decade or so, often without scrubbing them of such information. And that's made them potentially fertile ground for busybodies, stalkers and identity thieves."

    June 18, 2007
    * Oversight Committee Investigation of Use of RNC E-Mail Accounts by White House Officials

    Administration Oversight, White House Use of Private E-mail Accounts: "The Oversight Committee has been investigating whether White House officials violated the Presidential Records Act by using e-mail accounts maintained by the Republican National Committee and the Bush Cheney ‘04 campaign for official White House communications. This interim staff report provides a summary of the evidence the Committee has received to date, along with recommendations for next steps in the investigation."

    The information the Committee has received in the investigation reveals:

  • "The number of White House officials given RNC e-mail accounts is higher than previously disclosed..."

  • "White House officials made extensive use of their RNC e-mail accounts."

  • "There has been extensive destruction of the e-mails of White House officials by the RNC."

  • "There is evidence that the Office of White House Counsel under Alberto Gonzales may have known that White House officials were using RNC e-mail accounts for official business, but took no action to preserve these presidential records."


  • Documents and Links
  • Investigation of Possible Violations of the Presidential Records Act

  • Deposition of Susan Ralston

  • Errata Sheet for Deposition of Susan Ralston

  • Related postings on U.S. Attorney firings
  • June 17, 2007
    * OMB Issues New Guidelines for Protecting the Confidentiality of Statistical Information

    Press release: OMB Issues New Guidelines for Protecting the Confidentiality of Statistical Information (June 15, 2007)

    Implementation Guidance for Title V of the E-Government Act, Confidential Information Protection and Statistical Efficiency Act of 2002 (CIPSEA). AGENCY: Office of Management and Budget, Executive Office of the President. ACTION: Notice of decision. Federal Register: June 15, 2007 (Volume 72, Number 115) [Page 33361-33377]

  • SUMMARY: "The Confidential Information Protection and Statistical Efficiency Act of 2002 (CIPSEA) can provide strong confidentiality
    protections for statistical information collections, such as surveys and censuses, as well as for other statistical activities, such as data analysis, modeling, and sample design, that are sponsored or conducted by Federal agencies. The Office of Management and Budget (OMB) is issuing Implementation Guidance for Title V of the E-Government Act, the Confidential Information Protection and Statistical Efficiency Act of 2002 (Pub. L. 107-347). The purpose of the CIPSEA implementation guidance is to inform agencies about the requirements for using CIPSEA and to clarify the circumstances under which CIPSEA can be used."

  • Confidential Information Protection and Statistical Efficiency Act of 2002


  • * Office of Special Counsel Directs 18 Agencies to Preserve E-Mail for Investigation

    Daniel Pulliam at Govexec.com reported, "Eighteen agencies have been asked by the Office of Special Counsel to preserve electronic information dating back to January 2001 as part of its governmentwide investigation into alleged violations of the law that limits political activity in federal agencies. The OSC task force investigating the claims has asked agencies, including the General Services Administration, to preserve all e-mail records, calendar information, phone logs and hard drives going back to the beginning of the Bush administration."

    May 08, 2007
    * GAO Examines VA and DOD Medical Info Sharing

    Information Technology: VA and DOD Are Making Progress in Sharing Medical Information, but Are Far from Comprehensive Electronic Medical Records GAO-07-852T, May 8, 2007.

  • "For almost a decade, VA and DOD have been pursuing ways to share health information and create comprehensive electronic medical records. However, they have faced considerable challenges in these efforts, leading to repeated changes in the focus of their initiatives and target dates. Currently, the two departments are pursuing both long- and short-term initiatives to share health information."
  • April 15, 2007
    * Group Issues Report on Missing White House Emails and Violations of the Presidential Records Act

    Follow-up to postings on the escalating interest in the U.S. Attorney firings, this press release: "Citizens for Responsibility and Ethics in Washington (CREW) released a report [April 12, 2007], WITHOUT A TRACE: The Missing White House Emails and the Violations of the Presidential Records Act, detailing the legal issues behind the story of the White House e-mail scandal. WITHOUT A TRACE covers the following areas:

  • "Presidential Records Act (PRA): Enacted in 1978, requires the president to preserve all presidential records, which are defined as those records relating to the "activities, deliberations, decisions, and policies that reflect the performance of [the president’s] constitutional, statutory, or other official or ceremonial duties..."

  • Clinton Administration Policy: In 1993, then-Assistant to the President and Staff Secretary John Podesta sent a memo to all presidential staff explaining that the PRA required all staff members to maintain all records, including emails. Podesta stated that the use of external email networks was prohibited because records would not be saved as required. The 1997 White House Manual and a 2000 memo issued by Mark Lindsay, then Assistant to the President for Management and Administration echoed this policy, requiring staff to use only the White House email system for official communications.

  • Bush Administration Policy: The Bush Administration has refused to make public its record-keeping policy. A confidential source provided CREW with a 2002 document indicating the use of “non-EOP messaging-enabled mechanisms should not be used for official business.”

  • Bush Administration Practice: In the wake of the scandals surrounding Jack Abramoff and the fired U.S. Attorneys, emails were released showing that top White House staffers routinely used Republican National Committee (RNC) email accounts to conduct official business.

  • PRA Violations: 1) The administration failed to implement adequate record-keeping systems to archive presidential email records; 2) two confidential sources independently informed CREW that the administration abandoned a plan to recover more than five million missing emails; 3) White House staff used outside email accounts to conduct presidential business, ensuring that emails were not adequately preserved.

  • Hatch Act...The Hatch Act prohibits White House staff from using official resources for purely “political” purposes. “Political” refers to the president’s role as either a candidate for office or as the leader of his party. Email communications regarding presidential appointments for U.S. Attorney and Interior Department positions clearly fall within the PRA as making appointment is an official presidential function and does not relate to the president’s role as party leader."


  • Related documents and articles on the U.S. Attorney firings and the Presidential Records Act:
  • NARA: "The Presidential Records Act (PRA) of 1978, 44 U.S.C. ß2201-2207, governs the official records of Presidents and Vice Presidents created or received after January 20, 1981. The PRA changed the legal ownership of the official records of the President from private to public, and established a new statutory structure under which Presidents must manage their records."

  • The Presidential Records Act of 1978: A Review of Executive Branch Implementation and Compliance, Subcommittee on Information Policy, Census, and the National Archives, March 1, 2007

  • On Thursday, March 1, 2007 the Subcommittee on Information Policy, Census, and National Archives held a hearing to examine issues relating to implementation of the Presidential Records Act of 1978, including the history of the act, the role of the National Archives and Records Administration in releasing Presidential records to the public, and the likely impact of Executive Order 13233 on research. See also H.R. 1255: The Presidential Records Act Amendments of 2007

  • Albuquerque Journal, April 15, 2007: Domenici Sought Iglesias Ouster

  • WSJ free feature: Gonzales Deputy, in Crossfire, Looks for Quiet Exit - McNulty Seeks Job In Private Sector; Scrutiny Intensifies

  • USNews.com Special Report: U.S. Attorney Firings Investigation
  • April 12, 2007
    * Waxman Asks Government Agencies to Preserve E-mails from RNC Accounts

    Following up on this April 10, 2007 posting, House Judiciary Committee Subpoenas AG Gonzales, and related links on the U.S. Attorney firings, today this press release from Rep. Waxman's House Oversight and Government Reform Committee: "Following briefings from the White House and Republican National Committee that revealed an extensive volume of e-mails regarding official government business may have been destroyed by the RNC, Chairman Waxman directs government agencies to preserve e-mails received from or sent to non-governmental e-mail accounts used by White House staffers. The Committee also requests that government agencies provide an inventory of all e-mails involving these accounts. The briefing received by the Committee raises serious concerns about the White House compliance with the Presidential Records Act, which requires that the President "take all such steps as may be necessary to assure that the activities, deliberations, decisions, and policies that reflect the performance of his constitutional, statutory, or other official or ceremonial duties are adequately documented and that such records are maintained as Presidential records."
    Related documents: This press release includes links to letters from the Chairman to 16 agency heads, which duplicate the text of a letter to Attorney General Gonzales. Each letter is three pages, PDF.

    April 11, 2007
    * Corporate Data Loss Cost Calculator

    Tech//404® Data Loss Cost Calculator: "Data loss resulting from network security breaches and identity theft has become a regular occurrence. While the number of affected records can vary widely in any given data loss scenario, a recent study by the Ponemon Institute found that the average number was roughly 99,000. For recent examples and media reports, visit the data loss archive. Darwin created the Tech//404® data loss cost calculator as a tool to demonstrate the scope of negative financial impact an organization may face as a result of a data breach or identity theft data loss scenario. The calculator will automatically generate an average cost, and a plus/minus 20% range, for expenses associated with internal investigation, notification/crisis management and regulatory/compliance if the incident were to give rise to a class action claim."

    March 29, 2007
    * Appellate Courts Go Live on Case Management/Electronic Case Files

    The Third Branch, March 2007: "Some day in the not-too-distant future, locating and reading a brief filed in a federal appellate case will become as easy as finding an appeals court opinion. And electronic appellate briefs will feature hyperlinks to lower court rulings, statutes, regulations, and other cited materials. “Judges generally are excited about having attorneys file briefs that contain hyperlinks to citations,” said Gary Bowden, chief of the Administrative Office’s Appellate Court and Circuit Administration Division. “And through PACER (the Public Access to Court Electronic Records system) these briefs will be available to everyone.” Until late last year, 10 of the 12 regional appellate courts were using an antiquated system of receiving, storing and tracking their cases, a system that at age 20 was long overdue for retirement." The St. Louis-based U.S. Court of Appeals for the 8th Circuit took a giant step in December when it became the first of those 10 courts to go live with Case Management/Electronic Case Files (CM/ECF). The rest are to follow by the end of 2007."

  • See also: Credit Card Security Code Required in CM/ECF - "Beginning February 1, 2007, all district and bankruptcy court CM/ECF filers who pay fees on-line via a credit card will be required to enter the security code field to complete the transaction. Credit card security codes, the 3-4 digits printed on the back of a credit card, are used to reduce fraud by verifying that the purchaser has the credit card in hand when making a purchase on the Internet."
  • March 26, 2007
    * Oversight Committee Directs RNC to Preserve White House Emails

    "Citing evidence that senior White House officials are using RNC and other political email accounts to avoid leaving a record of official communications, Chairman Waxman directs the Republican National Committee and the Bush-Cheney ’04 Campaign to preserve the emails of White House officials and to meet with Committee staff to explain how the accounts are managed and what steps are being taken to protect the emails from destruction and tampering."

    Documents and Links:

  • Letter to Mike Duncan [Chairman, Republican National Committee]

  • Letter to Marc Racicot [Former Chairman, Bush/Cheney '04]

  • E-mails Showing Use of Non-Governmental Accounts for Official Business

  • February 27, 2007
    * Consumer Survey Shows Growing Importance of E-Health Records

    Press release: "The majority of consumers place some importance on whether a physician has electronic health records when choosing a physician and would be willing to pay for the service, according to research results released today by Accenture. The goal of the research, a survey of 600 U.S. consumers and interviews with more than 100 physicians, was to gauge consumer and physician attitudes toward electronic health records (EHR). An EHR comprises an individual’s medical information including conditions, medication information, test results and treatment plans that exist in electronic form. Among the key findings: Two-thirds (67 percent) of consumers said that electronic health records are at least slightly important in their selection of a physician, and half (51 percent) said they would be willing to pay for the service, if the price were reasonable. At the same time, just one in ten physicians interviewed (11 percent) currently uses electronic records."

  • Press release: "Hospitals continue to accelerate their use of health information technology, with 68% reporting that electronic health records had been fully or partially implemented as of fall 2006, according to the AHA's second annual survey (24 pages, PDF) of hospital health IT use."
  • February 05, 2007
    * Privacy Forum Seeks Controls Over Gov't Use of Patient Genetic Data

    "The World Privacy Forum filed public comments with the Department of Health and Human Services in response to an HHS request for information regarding the use of patients' genetic data for research, health care, and for use in electronic health records. The World Privacy Forum is requesting that HHS use all Fair Information Principles in any personalized health care projects, and is requesting that a formal ELSI (ethical, legal, and social implications) committee be set up to oversee any projects, among other requests."

  • Related: HHS Request for Information (RFI): Improving Health and Accelerating Personalized Health Care Through Health Information Technology and Genomic Information in Population-and Community-based Health Care Delivery Systems, October 30, 2006
  • February 02, 2007
    * GAO Report on Health Information Technology

    Health Information Technology: Early Efforts Initiated but Comprehensive Privacy Approach Needed for National Strategy, Full text GAO-07-400T, and Highlights, February 1, 2007: "GAO identified key challenges associated with protecting electronic personal health information in four areas."

    January 19, 2007
    * New on LLRX.com for January 2007

    Table of Contents for LLRX.com - January 15, 2007 issue:

  • Competitive Intelligence - A Selective Resource Guide, by Sabrina I. Pacifici

  • The Impact of Social Networking Tools and Guidelines to Use Them, by LaJean Humphries

  • The Blog - Another Tool in Your Arsenal, by Janet Peros

  • Faulkner's Practical Web Strategies for Attorneys: How the Web Will Continue to Change How We Do Business in 2007, by Frederick L. Faulkner IV

  • CongressLine, by GalleryWatch.com: Authorization and Appropriation, by Paul Jenks

  • The Government Domain: Testing the THOMAS Beta, by Peggy Garvin

  • Deal or No Deal – Licensing & Acquiring Digital Resources: License Negotiations Reprise, by Kara Phillips

  • The Tao of Law Librarianship: Becoming A Wiki Warrior, by Connie Crosby

  • Burney's Gadgets for Legal Pros: Reviews -- Doing Double Time With Dual Monitors and Video Chatting Via Your Laptop, by Brett Burney

  • E-Discovery Update: E-Discovery New Year's Resolutions for 2007, by Conrad J. Jacoby

  • Commentary: The Iraq Troop Surge by Beth Wellington

  • A Cup of Creativi-tea: Start a Resolution, by Terri Wilson
  • December 21, 2006
    * The Best (and Worst!) of Legal Technology 2006 From FindLaw

    "The world of Legal Technology has...had its share of ups and downs in 2006, with companies spying on their boards, the treasury department spying on money transfers, and the government spying on, well, everyone! With all the spying going on, data security was certainly on everyone's mind in 2006, and several key stories arose out of the inability of companies and government agencies to protect their customer and employee data. The new Federal Rules of Civil Procedure also added to the mix with new requirements for companies and other potential litigants to keep in mind as they generate gigabytes and gigabytes of information every day." [Link]

    December 14, 2006
    * FasterCures Releases Report Calling for Inclusion of Clinical Research in Nationwide Health Information Network

    Press release: "Building clinical research into the Nationwide Health Information Network (NHIN) will enable faster discovery and verification of treatments and cures, according to a report released today by FasterCures. The report, Ensuring the Inclusion of Clinical Research in the Nationwide Health Information Network, details steps to help speed the implementation of Electronic Health Record (EHR) systems and suggests four strategies to include a research component in the NHIN, the federal government's planned "Internet for Healthcare."

    December 12, 2006
    * U.S. Deputy AG Mcnulty Revises Charging Guidelines for Prosecuting Corporate Fraud

    Press release: "U.S. Deputy Attorney General Paul J. McNulty announced today during a speech at a meeting of the Lawyers for Civil Justice in New York that the Department of Justice is revising its corporate charging guidelines for federal prosecutors throughout the country. The new guidance revises the Thompson Memorandum, which was issued in January 2003 by then-Deputy Attorney General Larry D. Thompson and titled the “Principles of Federal Prosecution of Business Organizations.” The memo provides useful guidance to prosecutors in the field through nine factors to use when deciding whether to charge a corporation with criminal offenses. The guidance continues to require consideration of the factors from the Thompson memo but adds new restrictions for prosecutors seeking privileged information from companies. Specifically, it creates new approval requirements that federal prosecutors must comply with before they can request waivers of attorney-client privilege and work product protections from corporations in criminal investigations."

  • Prepared Remarks of Deputy Attorney General Paul J. McNulty at the Lawyers for Civil Justice Membership Conference Regarding
    the Department's Charging Guidelines in Corporate Fraud Prosecutions
    , New York, December 12, 2006

  • John Coffee Says McNulty Memo Went a Bridge Too Far in Tying Hands of Prosecutors in Corporate Crime Investigations, 21 Corporate Crime Reporter 1, December 26, 2006
  • December 08, 2006
    * GAO Audit of Navy Marine Corps Intranet

    Information Technology: DOD Needs to Ensure That Navy Marine Corps Intranet Program Is Meeting Goals and Satisfying Customers, Full-text GAO-07-51, and Highlights, December 8, 2006.

  • "The Navy Marine Corps Intranet (NMCI) is a 10-year, $9.3 billion information technology services program. Through a performance-based contract, the Navy is buying network (intranet), application, and other hardware and software services at a fixed price per unit (or "seat") to support about 550 sites...NMCI has not met its two strategic goals--to provide information superiority and to foster innovation via interoperability and shared services."
  • December 05, 2006
    * White Paper on Framework for Networked Personal Health Information

    Markle Foundation - Connecting Americans to Their Health Care: A Common Framework for Networked Personal Health Information (41 pages, PDF): "A white paper that describes a networked environment in which consumers could establish secure electronic connections with multiple entities that hold personal health information about them. The paper discusses how consumer participation in networked environments has transformed other sectors, such as travel and finance, and concludes that the health care sector would benefit greatly from a properly designed secure network that enables greater consumer engagement."

    December 04, 2006
    * FBI Audit of Sentinel Investigative Case Management System

    Sentinel Audit II: Status of the Federal Bureau of Investigations Case Management System (Redacted), Audit Report 07-03, December 2006 (PDF - Full Report)

  • Comment Of Senator Patrick Leahy, D-Vt., Ranking Member And Incoming Chairman, Senate Judiciary Committee, On DOJ OIG Report On FBI Computer System Project, December 4, 2006: "Today’s finding by the Department of Justice Office of Inspector General that the FBI will need an additional $56.7 million over what the President requested in his budget for next year to continue the Sentinel project, and that these additional costs could have an adverse impact on the FBI's counterterrorism and other programs, are cause for deep concern."
  • * USACM Urges Feds to Adopt Software Independent E-voting Systems

    U.S. Public Policy Committee of the Association for Computing Machinery: "...the National Institute of Standards and Technology (NIST) released a paper recommending that federal standards allow certification only for "software independent" (i.e. ones that create a paper trail) e-voting systems. A key technical panel will consider and vote upon the recommendations this [week]. Calling these recommendations an important step forward for improving e-voting machine security, USACM issued a letter urging the panel to adopt the recommendations..."

  • Related postings on e-voting
  • November 28, 2006
    * Electronically Stored Information Target of New Rules

    The Third Branch: "On December 1, 2006, amendments to Federal Rules of Civil Procedure 16, 26, 33, 34, 45 and revisions to Form 35 will take effect unless Congress enacts legislation to reject, modify or defer them. These amendments and revisions are all aimed at one particular area of discovery—electronically stored information, meaning all information in computers...One study found that the cost of discovery represents approximately 50 percent of the litigation costs in all cases, and as much as 90 percent of the litigation costs in the cases where discovery is actively employed. A "cottage industry" of forensic specialists has emerged with the sole purpose of assisting law firms comply with their electronic discovery obligations...For more on the specific changes in the rules aimed at discovery of electronically stored information, visit http://www.uscourts.gov/rules/Reports/ST09-2006.pdf."

    November 23, 2006
    * Computerworld Survey Finds Companies Unprepared for New E-Discovery Rules

    "Few corporations are prepared for the new federal rules slated to take effect Dec. 1 for electronic discovery of documents in civil cases, according to a survey conducted by Computerworld. About 42% of the 170 IT managers and staffers surveyed said they did not know the status of their company's preparation for the new rules, while 32% said their company was not at all prepared."

  • See the E-Discovery Update column, by Conrad J. Jacoby, on LLRX.com for further background and expert commentary on this issue.
  • November 09, 2006
    * Lawyers Receiving Electronic Documents are Free to Examine 'Hidden' Metadata: ABA Ethics Opinion

    Press release: "Lawyers who receive electronic documents are free to look for and use information hidden in metadata – information embedded in electronically produced documents – even if the documents were provided by an opposing lawyer, according to a new ethics opinion from the American Bar Association."

    October 20, 2006
    * Treasury IG Report on Decline in Use of Free File Program

    Treasury Inspector General for Tax Administration (TIGTA) "audit found that the use of the Free File Program declined after income restrictions were applied." September 29, 2006 (42 pages, PDF)

  • Free File Home - Your Link to Free Online Filing

  • Related postings on the IRS Free File program
  • October 18, 2006
    * New AmLaw Tech Survey

    AmLaw Tech Survey: Law Firms Play Variations on Old Themes - "The 11th annual survey finds firms expanding IT while adopting new versions of old standards."

    October 10, 2006
    * Guidelines for State Trial Courts Regarding Discovery of Electronically-Stored Information

    Guidelines for State Trial Courts Regarding Discovery of Electronically-Stored Information, Conference of Chief Justices, Approved August 2006.

    October 04, 2006
    * CA AG Files Charges Against Former HP Chair and Others For Corporate Spying

    Press release: California "Attorney General Bill Lockyer today filed felony charges against former Hewlett-Packard Chairwoman Patricia C. Dunn and four other defendants, alleging they committed criminal offenses related to the use of false pretenses to access individuals' phone records during the company's probe of boardroom leaks to the media."

  • Felony Complaint (7 pages, PDF)

  • Supporting Declaration and Arrest Warrants (17 pages, PDF)


  • Related documents and links:
  • Hearing - Internet Data Brokers and Pretexting: Who Has Access to Your Private Records?, September 29, 2006

  • From ZDNet, a timeline of articles on the HP Leak Probe

  • September 11, 2006
    * Group Outlines Ramifications of EPA Library Closures

    Follow-up to previous postings on EPA's closure of libraries, this press release: "Prosecution of polluters by the U.S. Environmental Protection Agency "will be compromised" due to the loss of "timely, correct and accessible" information from the agency's closure of its network of technical libraries, according to an internal memo released today by Public Employees for Environmental Responsibility (PEER). EPA enforcement staff currently rely upon the libraries to obtain technical information to support pollution prosecutions and to track the business histories of regulated industries."

    August 22, 2006
    * Presentation on Metadata Pitfalls and Protections

    Metadata and other things that go bump in the night (41 pages, PDF) - "There is data lurking in your data. Some people call it "invisible ink". Microsoft refers to it as "metadata". Either way, the reference is to information in an electronic document that is not always visible. This session will explain the dangers of metadata, how to avoid it, and recent bar association interest in the ethics of exposing or mining metadata." [by Catherine Sanders Reach]

    August 18, 2006
    * DHS Announces Establishment of Records Digitization Facility

    Press release, August 17, 2006, U.S. Citizenship and Immigration Services: "USCIS Announces Establishment of a Records Digitization Facility in Williamsburg, Ky., that will digitize more than one million UCIS Alien-Files (A-Files) during the first phase...[there are approximately 70 million immigration records]."

    August 01, 2006
    * HHS Final Rule on New Safe Harbor for Donation of E-Health Records Technology

    Final Rule: Safe Harbors for Certain Electronic Prescribing and Electronic Health Records Arrangements Under the Anti-Kickback Statute, pre-publication copy - to be published in August 8, 2006 Federal Register. (133 pages, PDF)

    Related references:

  • CMS press release, Physician Self-Referral Exceptions for Electronic Prescribing and Electronic Health Records Technology, August 1, 2006
  • * GAO Report on Financial Accounting Restatements

    Financial Restatements: Update of Public Company Trends, Market Impacts, and Regulatory Enforcement Activities, Full text GAO-06-678, and Highlights, July 24, 2006.

  • "While the number of public companies announcing financial restatements from 2002 through September 2005 rose from 3.7 percent to 6.8 percent, restatement announcements identified grew about 67 percent over this period. Industry observers noted that increased restatements were an expected byproduct of the greater focus on the quality of financial reporting by company management, audit committees, external auditors, and regulators."
  • July 17, 2006
    * New on LLRX.com

  • And you thought gadgets were only for the kitchen: The Return, by
    Brian Neale, Roger Skalbeck, Susan Skyzinski and Barbara Fullerton

  • And you thought gadgets were only for the kitchen: The Future, by
    Brian Neale, Roger Skalbeck, Susan Skyzinski and Barbara Fullerton

  • Writing Justice Blackmun, by Linda Greenhouse

  • Statement of Meredith Fuchs, General Counsel, The National Security Archive, Before the House Permanent Select Committee on Intelligence Hearing on the Media’s Role and Responsibilities in Leaks of Classified Information

  • Refining the Standard: Authenticating Computer-Based Evidence, by M. Sean Fosmire

  • Update to Researching Australian Law, by Nicholas Pengelley

  • Faulkner's Practical Web Strategies for Attorneys: Four Ways to Enhance Your Firm Website, by Frederick L. Faulkner IV

  • E-Discovery Update - by Fios Inc.: How Well Can You Protect Privilege Through Private Contract?, by Conrad J. Jacoby

  • CongressLine, by GalleryWatch.com: Congressional Seedlings, by Paul Jenks

  • Express Yourself on Your PDA, by Brett Burney

  • FOIA Facts: Who or What Constitutes Media under the FOIA?, by Scott A. Hodes

  • The Government Domain: Summer Infosnacks, by Peggy Garvin

  • A Cup of Creativi-tea: Icebreakers, by Terri Wilson

  • After Hours: The Grill Guru / Incense and...Cinnamon?, by Kathy Biehl

  • Commentary: Voters Rights Act, by Beth Wellington

  • LLRX Court Rules, Forms, and Dockets, the unique, free searchable database, maintained and continually updated by Margaret Berkland.

  • LLRX.com Bookstore has new recommendations
  • July 05, 2006
    * Most Large North American Organizations Subjected to Security Breaches

    Press release: "CA today announced a new security survey of 642 large North American organizations which shows that more than 84% experienced a security incident over the past 12 months and that the number of breaches continues to rise. According to the findings, security breaches have increased 17% since 2003. As a result, 54% of organizations reported lost workforce productivity; 25% reported public embarrassment, loss of trust/confidence and damage to reputation; and 20% reported losses in revenue, customers or other tangible assets. Of the organizations which experienced a security breach, 38% suffered an internal breach of security."

  • See also As data breaches pile up, OMB cracks down - Experts call for CIOs to have more authority
  • July 04, 2006
    * British Medical Journal Reports on Electronic Records and Patient Choice

    "The potential benefits of sharing patient electronic records within health systems are broadly agreed, but concerns remain over patient consent and security. Experts in this week's BMJ discuss how patients should consent to use of electronic records in the NHS and how the data can be kept secure."

  • view full paper

  • view commentary

  • view editorial 1

  • view editorial 2
  • June 27, 2006
    * Courts and Agencies Report on Disaster Preparedness Programs

  • Administrative Office of the U.S. Courts: Start of Hurricane Season Finds Courts Learning from Past

  • Agencies make [Continuity of Operations] COOP, disaster recovery even higher priorities
  • June 20, 2006
    * FTC and DOJ Allow Electronic Submission of Premerger Notification Filings

    Press release: "The Federal Trade Commission and the Department of Justice's (DOJ) Antitrust Division today announced that they are implementing an electronic filing system that allows merging parties to submit via the Internet premerger notification filings required by the Hart-Scott-Rodino (HSR) Act. Electronic filings may be submitted quickly and easily, eliminating the time and expense entailed in duplicating and delivering documents."

    Related government documents:

  • 16 C.F.R. Part 803: Premerger Notification: Reporting and Waiting Period Requirements: Final Rules Amending Premerger Notification Rules To Update and Improve the Effectiveness of the Rules By Allowing Submission of Notification and Report Forms Electronically Via the Internet [Text of the Federal Register Notice]

  • Notification and Report Form

  • Instructions

  • June 11, 2006
    * eHealth Vulnerability Reporting Program Launched

    "...the eHealth Vulnerability Reporting Program (eHVRP) is a collaborative of health care industry organizations, technology companies and security professionals. eHVRP’s mandate is to establish approaches and procedures that will help ensure eHealth systems are broadly and rapidly deployed with the highest levels of privacy and security."

    May 24, 2006
    May 15, 2006
    * Reliability and Integrity of Digital Evidence Often in Question

    An interesting article in today's National Law Journal (free) discusses issues associated with the integrity of digital evidence, including email, photos, and metadata.

    May 10, 2006
    * Morgan Stanley Sued for Repeated E-Mail Production Failures

    SEC press release: "The Securities and Exchange Commission today filed a civil injunctive action against Morgan Stanley & Co. Incorporated for failing to produce tens of thousands of e-mails during the Commission's IPO and Research Analyst investigations from Dec. 11, 2000, through at least July 2005. The Commission alleges in its complaint that Morgan Stanley did not diligently search for back-up tapes containing responsive e-mails until 2005. Morgan Stanley also failed to produce responsive e-mails because it over-wrote back-up tapes."

    May 08, 2006
    * GAO Reports on Sarbanes-Oxley Compliance Costs for Small Companies

    Sarbanes-Oxley Act: Consideration of Key Principles Needed in Addressing Implementation for Smaller Public Companies,
    Full Report GAO-06-361, and Highlights, April 13, 2006.

  • "...for smaller public companies (defined in this report as $700 million or less in market capitalization), the cost of compliance has been disproportionately higher (as a percentage of revenues) than for large public companies, particularly with respect to the internal control reporting provisions in section 404 and related audit fees. Smaller public companies noted that resource limitations and questions regarding the application of existing internal control over financial reporting guidance to smaller public companies contributed to challenges they face in implementing section 404."
  • May 02, 2006
    * Collaborative Blog Focuses on Health IT Issues

    HealthNex blog, sponsored by IBM, is a joint effort by industry and consumer groups, focused on sharing resources pertaining to e-health records and other IT related issues (such as RFID technology and patient privacy).

    May 01, 2006
    * Challenges in Digitizing Immigration Files

    Information Technology: Near-Term Effort to Automate Paper-Based Immigration Files Needs Planning Improvements, Full text GAO-06-375, Highlights, March 31, 2006.

  • "The United States Citizenship and Immigration Services (USCIS) relies on about 55 million paper-based files to adjudicate applications for immigration status and other benefits. Ensuring the currency and availability of these manual files, referred to as alien files, or A-Files, is a major challenge."
  • April 30, 2006
    * Methods To Trace Identity of E-Mail Sender Assist Litigation

    Follow the E-Mail Trail - What you can learn from the data embedded in e-mail headers, by Mark A. Berman and Aaron Zerykier, The National Law Journal.

    April 21, 2006
    * NY County First in Nation to Require Business Wireless Security

    ComputerWorld reports that Westchester County in New York is the first county in the nation to require all businesses with wireless networks that collect consumer related data to use "minimun security measures."

    * GAO Reports on Flaw in Governmentwide Financial Report System

    Financial Management Systems: Lack of Disciplined Process Puts Effective Implementation of Treasury's Governmentwide Financial Report System at Risk, Full-text GAO-06-413, Highlights, April 21, 2006.

    April 14, 2006
    * E-Discovery and Compliance Require Command of Search Terms

    ABA Journal: Understanding Search-Term Basics Ensures More Thorough E-Discovery Compliance

    April 10, 2006
    * NARA Final Rule on National Industrial Security Program Directive

    Federal Register: April 10, 2006 (Volume 71, Number 68)][Rules and Regulations][Page 18007-18008], National Archives and Records Administration (NARA), Final Rule: "The Information Security Oversight Office (ISOO), National Archives and Records Administration (NARA), is publishing this Directive pursuant to section 102(b)(1) of Executive Order 12829, as amended, relating to the National Industrial Security Program. This order establishes a National Industrial Security Program (NISP) to safeguard Federal Government classified information that is released to contractors, licensees, and grantees of the United States Government. Redundant, overlapping, or unnecessary requirements impede those interests. Therefore, the NISP serves as the single, integrated, cohesive industrial security program to protect classified information and to preserve our Nation's economic and technological interests. This Directive sets forth guidance to agencies to set uniform standards throughout the NISP that promote these objectives."

    * Inadvertent Release of Sensitive Data Via Use of Ubiquitous Software

    FCW.com: Agencies risk unwitting release of sensitive information using popular office software: "The causes of much of the hidden data problem are users' ignorance of how digital documents work and software companies' tendency to give customers too much of what they want — ease of use and flexibility."

    April 03, 2006
    * DHS Director Does Not Use Email

    New York Times interview with DHS Director Michael Chertoff,by Deborah Solomon, April 2, 2006: Chertoff states, "I don't use e-mail. One reason is when you write an e-mail, you have to be mindful of the fact that nothing ever disappears. It can be deleted, but it is still in the system somewhere...They can get me. They don't need to e-mail me. There's a thing called a telephone."

    March 20, 2006
    * Transformational Technology Areas Critical to US and UK Defense

    Defense Critical Technologies, (151 pages, PDF), March 2006. This report is a product of the Defense Science Board (U.S.) and the Defence Scientific Advisory Council (UK). This report is unclassified.

    * Enterprise Search Makes Inroads in Tackling Corporate Info Overload

    ComputerWorld reports on enterprisewide search applications implemented by large corporations for a range of tasks, including competitive intelligence, e-discovery, and generating intranet content. Solutions such as FAST, Autonomy and Endeca index formats including text, audio and video.

    * GAO Reports on Costs and Failures Associated With FBI IT Upgrade

    Federal Bureau of Investigation: Weak Controls over Trilogy Project Led to Payment of Questionable Contractor Costs and Missing Assets, Full-text, GAO-06-306, and Highlights, February 28, 2006.

  • "The Trilogy project--initiated in 2001--is the Federal Bureau of Investigation's (FBI) largest information technology (IT) upgrade to date. While ultimately successful in providing updated IT infrastructure and systems, Trilogy was not a success with regard to upgrading FBI's investigative applications. Further, the project was plagued with missed milestones and escalating costs, which eventually totaled nearly $537 million."
  • March 15, 2006
    * Redaction of Confidential Info in Documents to be Distributed as PDF

    Adobe whitepaper, Redaction of Confidential Information in a Document: "How to safely remove sensitive information from Microsoft Word documents and convert to PDF"

    February 26, 2006
    * NSA Expands Data Mining Progam With Purchase of New Tech Tools

    Follow-up to National Journal Article Claims Curtailed Gov't Surveillance Program Still Active, from today's New York Times, Taking Spying to Higher Level, Agencies Look for More Ways to Mine Data: "...by fundamentally changing the nature of surveillance, high-tech data mining raises privacy concerns that are only beginning to be debated widely. That is because to find illicit activities it is necessary to turn loose software sentinels to examine all digital behavior whether it is innocent or not."

  • Related postings on data mining

  • Related postings on domestic surveillance
  • February 21, 2006
    * NARA Final Rule on Disposition of Short-Term E-Records

    "Summary: NARA is revising our regulations to provide for the appropriate management and disposition of very short-term temporary e-mail, by allowing agencies to manage these records within the e-mail system." Federal Register, February 21, 2006 (Volume 71, Number 34)] [Rules and Regulations][Page 8806-8808].

    * Security Issues Escalate With Popularity of Handheld Devices

    New York Times: Too Many New Gadgets, Too Much Information at Risk: Loss, theft and viruses are major issues as corporate use of handheld devices and pocket PCs increases. Pre-emptive security options are available however, as this article describes.

    February 19, 2006