45 CFR Part 164.500 et seq., Subpart E, Privacy of Individually Identifiable Health Information (As amended) resource National Regulations Member contributionOCEG Reviewed
Federal Regulations as posted by the U.S. Government Printing Office.
Applicability:
(a) Except as otherwise provided, the standards, requirements, and implementation specifications adopted under this part apply to the following entities:
Does your Company’s Internet Policy Comply with Labor Law? (2010) resource Articles OCEG Reviewed
Summary: A recent complaint issued by a Regional Director of the National Labor Relations Board (“NLRB”) poses a new challenge for employers attempting to control their employees’ use of the internet. Facebook, LinkedIn, Twitter, blogs, and other internet postings have grown exponentially in recent years, both at home and at work.
Employment/Labor (U.S.) group
Welcome to the U.S. Employment & Labor community group. This group addresses all GRC issues that arise for companies that must address employment and labor requirements and risks in the United States. In addition, there are several community groups that address specific aspects of employment as they arise both in the U.S. and globally.
France's Measures on Diversity and Data Protection: The Ten Recommendations of the CNIL (Littler, 2007) resource Agency Guidances Member contributionOCEG Reviewed
FTC: Fighting Fraud with the Red Flags Rule: A How-to Guide for Business resource Agency Guidances OCEG Reviewed
The “Red Flags” Rule, in effect since January 1, 2008, requires many businesses and organizations to implement a written Identity Theft Prevention Program designed to detect the warning signs – or “red flags” – of identity theft in their day-to-day operations, take steps to prevent the crime, and mitigate the damage it inflicts. By identifying red flags in advanc
HHS, Office for Civil Rights: Health Information Privacy resource Agency Web Sites Member contributionOCEG Reviewed
The Office for Civil Rights enforces the HIPAA Privacy Rule, which protects the privacy of individually identifiable health information; the HIPAA Security Rule, which sets national standards for the security of electronic protected health information; and the confidentiality provisions of the Patient Safety Rule, which protect identifiable information being used to analyze patient safety event
OCEG Jurisdiction Survey: Privacy - State Laws Regarding Employee Access to Personnel Records resource Guides OCEG Reviewed
OCEG Jurisdiction Survy: Privacy - State Law on Off Duty Conduct resource Jurisdiction Surveys OCEG Reviewed
Preventing Identity Theft group
Welcome to the Preventing Identity Theft community group.This group addresses the issue of identity theft from several angles including protection of personal information and prevention of use of stolen personal information. Requirements such as the U.S. Federal Trade Commission's Red Flags Rule and related resources are the subject of this group's activities.
Regulatory Intelligence by Michael Rasmussen: an Axentis Thought Leadership White Paper resource White Papers Member contributionOCEG Reviewed
"The old paradigm of regulatory change management is clearly a recipe for disaster given the volume, pace of change

