AT&T Pre-Order Glitch Exposes iPhone Customer Data – CRN

AT&T (NYSE:T) yet again managed another privacy snafu, this time in the pre-ordering process for the newly launched iPhone 4 after a server exposed sensitive customer account information when users tried to upgrade to the latest Apple (NSDQ:AAPL) mobile device.

The security breach occurred when some existing iPhone owners placed advanced orders for the iPhone 4 into a faulty AT&T Web application. AT&T customers opened the application to submit their personal account information for an iPhone upgrade only to find that they were logged into the accounts of other users. The breach potentially exposed names, addresses, and phone numbers and other billing information of unknown iPhone users, Gizmodo reported.

via AT&T Pre-Order Glitch Exposes iPhone Customer Data – Security – IT Channel News by CRN.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Demystifying AT&T’s iPhone upgrade policies (FAQ) | CNET News

Getting your hands on the latest iPhone 4 may not be as easy as it sounds, especially if you’re already an AT&T customer looking to upgrade your phone.

On Monday, Apple’s CEO Steve Jobs announced the new device at the company’s Worldwide Developers Conference in San Francisco. He said that AT&T will offer the new iPhone to new AT&T subscribers and current AT&T customers eligible for upgrades at a subsidized price. The 16GB version will be $199 and the 32GB version will be $299.

For AT&T customers whose contracts have already expired or for current iPhone users, they are able to get reduced pricing on the new iPhone. But for AT&T subscribers using phones other than an iPhone, the scenario is different. It seems that AT&T has created upgrade policies for some of its subscribers and exceptions to those policies for others. And for many customers, figuring out if they can get a new iPhone on June 24 when it hits store shelves is confusing

CNET published a Q&A with AT&T spokesman Mark Siegel on Monday that answered some basic questions about upgrading to the new iPhone 4. But many readers still had more questions. CNET reached out to AT&T once again to answer some of these reader questions, but Siegel referred all questions to AT&T’s customer service representatives.

“I think the best advice you can give your readers is to go online or speak with us about their individual situations,” he wrote in an e-mail asking him to answer some reader questions. “Our customer care folks would be more than happy to speak with them.”

via Demystifying AT&T’s iPhone upgrade policies (FAQ) | Signal Strength – CNET News.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

How the New EU Rules on Data Export Affect Companies in and Outside the EU | Dr. Thomas Helbing – Kanzlei für Datenschutz-, Online- und IT-Recht

On 5 February 2010 the Commission of the European Union (EU) has updated the set of standard contractual clauses for the transfer of personal data to processors in non-EU countries. The old clauses are repealed with effect from 15 May 2010.

Standard contractual clauses are an important instrument for companies in the EU to comply with national data protection laws if information on individuals is transferred to or accessed by organizations outside the EU.

The EU Commission decision is relevant for all organization receiving personal data – for example customer or employee data – from subsidiaries, customers or vendors in the EU.

In addition, the new standard contractual clauses will also affect companies who indirectly receive personal data that originally comes from the EU, e.g. by providing services to companies which process EU data. This is because the new standard contractual clauses require from companies importing personal data from the EU to contractually impose the terms of the clauses on any subcontractor to which they transfer personal data or grant access.

In particular, agreements on outsourcing, cloud computing, software as a service (SaaS) or application service providing (ASP) and software like Human Resources Information Systems (HRIS) Customer Relationship Management (CRM) tools and Enterprise Resource Planning (ERP) software are affected.

via How the New EU Rules on Data Export Affect Companies in and Outside the EU | Dr. Thomas Helbing – Kanzlei für Datenschutz-, Online- und IT-Recht.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Are foreign laws restricting the production of customer data being ignored by US courts? « eDiscovery101

In a recent case; Accessdata Corp. v. ALSTE Tech. GMBH, 2010 WL 3184777 (D. Utah Jan. 21, 2010), the Plaintiff, an American company, sought to compel defendant’s production of documents, including information related to customer complaints and defendant’s technical support of non-customers. Defendant objected to the interrogatories and requests for production on the grounds that they were overly broad, unduly burdensome, and seeking irrelevant information and because “disclosure of information relating to third parties’ identities would violate German law.”

The defendant’s main argument was that German law prohibits the production of third-party personal information and that, if it complied with the discovery requests at issue, it would “subject itself to civil and criminal penalties for violating the German Data Protection Law … and the German Constitution.”

In this case the court found that ESI asked for from a German company should be turned over in discovery even though the defendant stated that German privacy laws prohibit customer data being turned over without the customer’s approval.

via Are foreign laws restricting the production of customer data being ignored by US courts? « eDiscovery101.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare