Tuesday, February 7, 2017

Seafarer Personality Assessment PII Risk


Seafarer personality assessments can be valuable in preventing accidents at sea caused by human error. Often these assessments are conducted by organizations that are not covered by the U.S. Health Insurance Portability and Accountability Act (HIPAA)’s scope, which means they do not need to be stored or protected in compliance with HIPAA standards. Should a data breach occur, not only are the seafarers at risk of fraud but insights into the seafarer’s personality could be leveraged by criminals, competitors, or hostile intelligence agencies. The 2014 Office of Personnel Management (OPM) breach is the textbook example of the perils of this type of breach. 

Wapack Labs has reported on data breach liabilities in the past. An archive of related reporting can be found in the Red Sky Alliance portal. 

TLP: GREEN
ACTOR TYPE: (N/A)
SERIAL: TR-026-2017
COUNTRIES: ALL
INDUSTRIES: Maritime
REPORT DATE: 20170207