Can Federal Data Privacy Live On in the Cloud? – www.esecurityplanet.com

It seems clear enough that the appropriate question concerning government IT is no longer if the agencies will move their computing operations to the cloud, but when, and what bumps they will encounter — or steer around — on their way there.

For government, as in industry, privacy and data security are paramount.

The transition to the cloud is already well underway in federal IT circles and with it, folks like John Kropf, the deputy chief privacy officer at the Department of Homeland Security, are spending long hours developing policies and safeguards to keep sensitive data secure as the traditional silos of federal IT infrastructure are torn down.

“With government moving to the cloud, what are the privacy implications going to be for that move?” Kropf said Wednesday at a panel discussion at Digital Capital Week, a 10-day series of event focused on technology, policy and innovation. “The government privacy community supports this move to the cloud if you can do it in a privacy-sensitive manner.”

Kropf explained that government privacy officials are applying the basic principles embedded in the decades-old Privacy Act to the transition to the cloud.

Those precepts entail firm security standards, as well as policies to keep data collection to the bare minimum, and to ensure that the information that is collected is only used for the intended purpose, preventing what Kropf called “mission creep.”

The cloud computing directive comes from the White House. Since his earliest days in a newly created office, Federal CIO Vivek Kundra has been talking about modernizing government IT, from the applications in use to the infrastructure, to bring it more in step with the private sector.

via Can Federal Data Privacy Live On in the Cloud? – www.esecurityplanet.com.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Data Privacy and Protection – U.S. Mission to The European Union

U.S., EU Carry Out Passenger Name Record (PNR) Review – Representatives from the U.S. Department of Homeland Security (DHS) and the European Union (EU) held a joint review of the 2007 U.S.-EU Passenger Name Record (PNR) agreement on February 8-9, 2010, in Washington, D.C., says a joint statement issued on February 10. The U.S.-EU PNR agreement sets forth commitments for the processing and transfer of PNR for flights between EU Member States and the United States. During the course of the comprehensive, two-day review, an EU expert delegation led by the European Commission observed first hand how PNR contributes to DHS’s layered approach to border management and aviation security and how DHS handles PNR data. The EU expert delegation will issue a report reflecting its analysis resulting from the two days of site visits and discussions.

via Data Privacy and Protection – U.S. Mission to The European Union.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

FBI wants records kept of Web sites visited | Politics and Law – CNET News

The FBI is pressing Internet service providers to record which Web sites customers visit and retain those logs for two years, a requirement that law enforcement believes could help it in investigations of child pornography and other serious crimes.

FBI Director Robert Mueller supports storing Internet users' “origin and destination information,” a bureau attorney said at a federal task force meeting on Thursday.

As far back as a 2006 speech, Mueller had called for data retention on the part of Internet providers, and emphasized the point two years later when explicitly asking Congress to enact a law making it mandatory. But it had not been clear before that the FBI was asking companies to begin to keep logs of what Web sites are visited, which few if any currently do.

The FBI is not alone in renewing its push for data retention. As CNET reported earlier this week, a survey of state computer crime investigators found them to be nearly unanimous in supporting the idea. Matt Dunn, an Immigration and Customs Enforcement agent in the Department of Homeland Security, also expressed support for the idea during the task force meeting.

via FBI wants records kept of Web sites visited | Politics and Law – CNET News.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

TSA drops subpoena for blogger’s information

31/12/2009 – SD-1544-09-06 : This Comes To An End

Shortly before 7:00pm this evening I received a phone call that would end this year and allow me to have a Happy New Year. My call this evening came from John Drennan, the Transportation Security Administration’s Deputy Chief Counsel for Enforcement informing me that the TSA would no longer be pursing me for information regarding the identity of the person who sent me Security Directive SD-1544-09-06.

The subpoena that Chris Elliot was fighting was also dropped in its entirety by the TSA.

Hopefully this is the end of this situation, the agency will replace the MacBook they damaged, and we can all move forward.

I hope 2010 is the year the TSA can find a permanent Administrator the agency can find its defined focus to become a shining star within the Department of Homeland Security.

Happy Flying!

via Flying With Fish » SD-1544-09-06 : This Comes To An End.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare