Disclosures where they're not required by law
It’s the new normal in the English speaking world. See:
- “Hard drive stolen from Concordia” hospital in Winnipeg.
- The Bank of Scotland lost a DVD or DC in the mail, “Bank loses details on 62,000 customers in post.”
- “Personal banking info goes missing” regarding 120,000 Coastal Community Credit Union in Nanaimo, British Columbia.
- “Personal information of Georgia Tech students, alums exposed,” but included no SSNs or CC#s. I don’t think Georgia law is so broad.
All via the Dataloss list.