When a Business Doesn’t Protect Your Information

Say someone searched your name online. What do you think they’d find? What if some clicking brought them to things like your medical history, notes from psychiatric sessions or kids’ medical exams, or your Social Security and driver’s license number?

If you don’t like the sound of that, you might be interested to know that the FTC has announced a settlement with GMR Transcription Services, a company that promised “Security Measures to Protect Your Confidentiality,” for failing to protect personal information.

GMR is a digital audio transcription service that allows customers — including health care providers — to upload audio files and get them transcribed. The business runs almost entirely online with a typist downloading a file, typing up a transcript, then uploading the transcript for the customer to pick up or get in an email. According to the FTC, the service GMR used for medical files — Fedtrans — stored and sent files in clear, readable text, and allowed files to be accessed online without any authentication. What’s more, the FTC says, GMR didn’t make typists take basic steps like installing anti-virus software or requiring Fedtrans to use tools like encryption to protect the files. 

Going forward GMR has agreed to put a comprehensive information security program in place.

Blog Topic: Be Smart Online

Comments

Hi I have problems getting in my account of yahoo. I know my username and I know my password. But the problem is that I have different phone number in my account and they are sending my code to the phone number that have my account and with out the code I cannt get in my account. Who can helps me with this problem please.

You'll want to contact Yahoo directly for help with this. Try the "Help" link at the top of the Yahoo sign in page and then "Contact Customer Care."

The damage is done! It's doneeee!!!

We need more protection to privacy

Thanks. Good info

Leave a Comment

Commenting Policy

Read Our Privacy Act Statement

It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.