Craig Peterson's Tech Talk

Craig opens on a health care breach from his newsletter, and the detail that bothers him is not the size of it — it is the year. HIPAA requires continuous monitoring of that data, specifically so somebody notices when it walks out the door. This organisation took a year to notice. Had it been a small doctor's office, Craig points out, the doctors themselves would be looking at fines and potentially jail. This was a huge corporation, so his expectation is that nothing happens at all. Millions of records, lost through negligence, against regulations written precisely to prevent it. He sets a second story directly against it. A client of his runs a pizza shop. Some card information appeared to have been stolen, the payment card industry audited them, and the business simply lost the ability to take credit cards until Craig's team came in and cleaned up the mess. A small operation gets its livelihood switched off in days; the large one is still explaining itself a year late. Craig's conclusion is unsentimental —