Please Note: You are viewing the non-styled version of Ohio.gov. Either your browser does not support Cascading Style Sheets (CSS) or it is disabled. We suggest upgrading your browser to the latest version of your favorite Internet browser.

Privacy & Security - Business

Privacy & Security Basics

Privacy Manager's Resource Center (Better Business Bureau)
Protecting Personal Information: A Guide for Business (FTC)
Fair Information Practice Principles (FTC)
Privacy Statement Generator (OECD)
Privacy & Personal Information Basics (Proctor & Gamble)
Privacy Impact Assessment Handbook (Information Commission Office - UK)
Data Protection Technical Guidance: Determining what is personal data (ICO - UK)
Key Components of Information Security (secureflorida.org)

Data Breach Notification & Response

Data Breach Notification Laws
DHS Privacy Incident Handling Guidance
Model IT/Data Security Incident Management Guide (.doc) (State of Ohio)
Office of Management and Budget Recommendations for Identity Theft Related Data Breach Notification (.pdf)
Recommended Practices on Notice of Security Breach Involving Personal Information (California Office of Privacy Protection) (.pdf)

Medical Privacy

Health Insurance Portability and Accountability Act of 1996 (HIPAA), - Standards for Privacy of Individually Identifiable Health Information (45 CFR Parts 160 and 164), Office for Civil Rights, U.S. Department of Health and Human Services
Health Privacy Project (Georgetown University)
HIPAA Basics: Medical Privacy (Privacy Rights Clearinghouse)

Financial Privacy

Financial Privacy Report Card (Consumer Federation of California) - January 2004
Financial Privacy Resources (Privacy Rights Clearinghouse)
Gramm-Leach-Bliley Act Privacy Rule
Paying by Credit Card or Check: What Can Merchants Ask?

Marketing ("Unwanted Communications")

Information Sharing and Analysis Centers (ISACs)

Information Sharing and Analysis Centers (ISACs) were established to allow critical sectors to share information and work together in an effort to protect our critical infrastructures and minimize vulnerabilities.