US Secure Site Wasn't
from the oops dept
The Commerce Department in the US kept a database of US companies that kept “adequate” privacy protection. The idea was that they would keep a list of such companies, and European companies could feel safe doing business with them. However, while the Commerce Department was working so hard on getting these companies to keep adequate privacy protections in place, they ignored their own privacy policies. Despite a policy that said all info submitted to the database was private, it’s been entirely accessible and changeable since it went online. Anyone could go there and change whatever (sometimes confidential) info they wanted. Brilliant. Of all the sites the government runs, you’d figure this would be one that someone would have taken some time to make sure was secure.