Three government agencies have proposed a rule that would require an appropriate level of privacy training for government contractors, GovInfoSecurity reports, "in order to ensure consistency across the government." Issued by the Department of Defense, the General Services Administration and the National Aeronautics and Space Administration in the wake of the TRICARE breach, the proposed rule would cover handling personally identifiable information (PII), authorizing use of a government system of records, restricting use of personal equipment to process or store PII, preventing access by unauthorized users and establishing breach notification procedures and training requirements for specific agencies.
Full Story