SCHIP DeLoach & Williamson Data Theft

Chris Meller filed this request with the Department of Insurance of South Carolina.
Tracking #

FOIA-2014-00401

Est. Completion None
Status
Withdrawn

Communications

From: Chris Meller

To Whom It May Concern:

Pursuant to the South Carolina Freedom of Information Act, I hereby request the following records:

All documents relating to the SCHIP / DeLoach & Williamson data theft on October 16, 2013. This should, at a minimum, include:

- Number of subscriber records that were involved
- Copies of all policies and procedures relating to the protection of patient privacy and confidentiality, both internal to DOI / SCHIP and by third party contractors
- Documentation relating to the "enhanced controls, policies, and employee training" implemented by DeLoach & Williamson
- The estimated cost of providing Experian ProtectMyID service
- Which budget will provide the funds for Experian service
- All communications (whether physical or electronic) between DOI / SCHIP and DeLoach & Williamson related to this data theft
- Information regarding the storage of records on the DeLoach & Williamson employee's laptop. Specifically 1) Why was a there a local copy?, 2) In what format was it stored?, 3) Was the computer password protected?, and 4) Why was the information not encrypted?

Please include any relevant documents, including but not limited to memos, reports, emails, investigation notes, and meeting minutes.

I also request that, if appropriate, fees be waived as I believe this request is in the public interest. The requested documents will be made available to the general public free of charge as part of the public information service at MuckRock.com, processed by a representative of the news media/press and is made in the process of news gathering and not for commercial usage.

In the event that fees cannot be waived, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

Thank you in advance for your anticipated cooperation in this matter. I look forward to receiving your response to this request within 15 business days, as the statute requires.

Sincerely,

Chris Meller

From: Ann Roberson

Mr. Meller:

I have checked with staff and we do not have this information. You will
need to contact the PIO listed in the media release to request this
information.

Ann Roberson
Executive Assistant to the Director
PIO
SC Department of Insurance
1201 Main Street, Suite 1000
Columbia, SC 29201
803-737-6207 (phone)
803-737-6159 (fax)
Aroberson@doi.sc.gov

Sent from my iPhone

>
On Dec 22, 2013, at 6:05 PM, "Chris Meller
<requests@muckrock.com>"
<requests@muckrock.com> wrote:
>
>
> December 22, 2013
> Department of Insurance
> PO Box 100105
> Columbia, SC 29202
>
>
>
>
> To Whom It May Concern:
>
> Pursuant to the South Carolina Freedom of Information Act, I hereby
request the following records:
>
> All documents relating to the SCHIP / DeLoach & Williamson data theft
on October 16, 2013. This should, at a minimum, include:
>
> - Number of subscriber records that were involved
> - Copies of all policies and procedures relating to the protection of
patient privacy and confidentiality, both internal to DOI / SCHIP and by
third party contractors
> - Documentation relating to the "enhanced controls, policies, and
employee training" implemented by DeLoach & Williamson
> - The estimated cost of providing Experian ProtectMyID service
> - Which budget will provide the funds for Experian service
> - All communications (whether physical or electronic) between DOI /
SCHIP and DeLoach & Williamson related to this data theft
> - Information regarding the storage of records on the DeLoach &
Williamson employee's laptop. Specifically 1) Why was a there a local
copy?, 2) In what format was it stored?, 3) Was the computer password
protected?, and 4) Why was the information not encrypted?
>
> Please include any relevant documents, including but not limited to
memos, reports, emails, investigation notes, and meeting minutes.
>
> I also request that, if appropriate, fees be waived as I believe this
request is in the public interest. The requested documents will be made
available to the general public free of charge as part of the public
information service at MuckRock.com, processed by a representative of
the news media/press and is made in the process of news gathering and
not for commercial usage.
>
> In the event that fees cannot be waived, I would be grateful if you
would inform me of the total charges in advance of fulfilling my
request. I would prefer the request filled electronically, by e-mail
attachment if available or CD-ROM if not.
>
> Thank you in advance for your anticipated cooperation in this matter.
I look forward to receiving your response to this request within 15
business days, as the statute requires.
>
> Sincerely,
>
> Chris Meller
>
> Filed via MuckRock.com
> E-mail (Preferred): requests@muckrock.com
>
> For mailed responses, please address (see note):
> MuckRock News
> DEPT MR 9682
> PO Box 55819
> Boston, MA 02205-5819
>
> PLEASE NOTE the new address as well as the fact that improperly
addressed (i.e., with the requester's name rather than MuckRock News)
requests might be returned by the USPS as undeliverable.
>
>
>
>
>
>
> Email secured by Check Point Total Security

From: Chris Meller

I've been unable to find any media releases or news reports about this issue. The only contact information I can find directs you to Blue Cross as the administrator of the plan. Could you point me to the correct contact?

Files

There are no files associated with this request.