The Payment Card Industry (PCI) Security Standards Council recently posted Version 1.2 of the PCI Data Security Standards (PCI DSS) that apply to many merchants and vendors that accept credit cards and other types of payment cards. A few of the changes will likely have a significant impact on many companies still struggling to comply with Version 1.1. The changes include, among others, heightened requirements for wireless networks and expanded requirements to implement anti-virus software beyond Windows-based platforms, including UNIX. Other changes are simply clarifications or in a few instances relaxation of requirements. Click read more for a more detailed analysis.

The Federal Trade Commission is holding a half-day public workshop November 13th at Southern Methodist University (SMU) Dedman School of Law in Dallas.  The workshop will feature government officials, industry experts, attorneys and privacy officers presenting on ways businesses can better secure personal information and protect the privacy of consumers and employees.

Information about the workshop including registration can be found here:  http://www.ftc.gov/bcp/workshops/infosecurity/index.shtml

On August 19, 2008, the Federal Trade Commission announced two significant amendments to the telemarketing sales rule affecting prerecorded outbound telemarketing calls.  The first amendment prohibiting prerecorded telemarketing calls without express written agreement and other limitations goes into effect September 1, 2009.  The second amendment requiring that prerecorded telemarketing calls provide an automated interactive opt-out mechanism meeting certain requirements goes into effect December 1, 2008.

More states are regulating required data security standards. A Nevada law requiring businesses to encrypt electronic transmission containing personal information goes into effect October 1, 2008. The Massachusetts' Office of Consumer Affairs and Business Regulation has also issued new regulations, the Standards for The Protection of Personal Information of Residents of the Commonwealth, that require the implementation of a comprehensive information security program, including e