<HTML style="FONT-SIZE: x-small; FONT-FAMILY: Arial"><HEAD>
<META content="MSHTML 6.00.6000.16414" name=GENERATOR></HEAD>
<BODY>
<DIV>
<DIV><FONT size=3>The current push to allow Federal employees to work from home or from remote locations clearly needs to be reexamined for its data security implications.</FONT></DIV>
<DIV><FONT size=3>richard</FONT></DIV>
<DIV></DIV></DIV>
<DIV><FONT size=1><STRONG>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</STRONG></FONT></DIV>
<BLOCKQUOTE style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid">
<DIV style="FONT: 10pt Arial">----- Original Message ----- </DIV>
<DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> <A title=macwheel99@sigecom.net href="mailto:macwheel99@sigecom.net">Al Mac</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To: </B><A title=dataloss@attrition.org href="mailto:dataloss@attrition.org">Data Loss Incidents</A></DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> 5/5/2007 11:22:15 PM </DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Dataloss] OT? GAO: Data breach Notification; Lessons Learned</DIV>
<DIV><BR></DIV><FONT size=2>I predict, that in the future, some of these lessons may be learned again.<BR><BR>Privacy: Lessons Learned about Data Breach Notification. GAO-07-657, April 30.<BR><BR>Much of this concerns internal prompt notification, like to law enforcement and within organizational hierarchy, getting correct names & addresses of who to notify and other legal complications.<BR><BR>The GAO report includes a summary of data breach incidents at 6 gov agencies (Depts of Agriculture, Defense, Education, Health+Human services, Transportation and Veteran's Administration) ... any here we did not already know about?<BR>* 2006 Jan Farm Services FOIA contractor oops on 80,000 tobacco producers<BR>* 2006 Mar Navy Marine Corps thumb drive lost 207,570 individuals<BR>* 2006 May VA employee home burglarized affecting 26.5 million <BR>* 2006 June National Student Loan CD lost in transit on <FONT face="Helvetica, Helvetica">13,756 individuals<BR></FONT>* 2006 June HHS contractor employee laptop stolen <FONT face="Helvetica, Helvetica">49,572 Medicare beneficiaries<BR></FONT>* 2006 Dec DoT laptop stolen from car parked in FL <FONT face="Helvetica, Helvetica">133,000 commercial drivers & FAA pilot licensees<BR></FONT><A href="http://www.gao.gov/cgi-bin/getrpt?GAO-07-657" eudora="autourl">http://www.gao.gov/cgi-bin/getrpt?GAO-07-657<BR></A>Highlights - <A href="http://www.gao.gov/highlights/d07657high.pdf" eudora="autourl">http://www.gao.gov/highlights/d07657high.pdf<BR><BR></A>GAO conclusions specifically on VA data breaches.<BR><A href="http://www.gao.gov/highlights/d07532thigh.pdf" eudora="autourl">http://www.gao.gov/highlights/d07532thigh.pdf<BR></A></FONT></BLOCKQUOTE></BODY></HTML>