on our panel, we have the epsilon data management l.l.c. also testifying is the president of sony network entertainment international. good afternoon and thank you both very much for coming. you will each be recognized for five minutes. to help you keep track of time, there's a clever little device in front of you, red, yellow, green, and when the light turns yellow, please summarize, as ulleds a traffic light. so ms. fitzgerald, you're recognized for five minutes. and please remember, the microphone, pull it close to your mouth, if you would. excuse me, would you pull the microphone up? >> better? >> thank you. >> good morning. chairman bono mack, ranking member butterfield, and distinguished members of the subcommittee, my name is jeanette fitzgerald, and i'm the general counsel for epsilon data management. thank you for inviting me to present epsilon's testimony on data security. i hope that i can provide information today and going forward that will act as a helpful resource as you consider data security legislation that is in the best i

the chamber recently got this safety data act. the united states and the national economy -- almost every state has a breach provision. many differ from one or another in mature ways. it's a not only makes compliance difficult for businesses, but can also create confusion for customers who receive notices from many sources. the chamber supports the laws to create a uniform standard that will create regulatory certainty and minimize compliance costs for businesses who participate in multiple states. the chamber worries that needlessly alarmed customers who are flooded by these notices may be lulled into inactivity. therefore, the chamber is pleased that the draft bill recognizes that it should be based on harm, not just the mere fact that a data breach occurred. the chamber agrees that notification of breach not necessarily where the data is found unreadable or unusable by different encryption redaction or access control. the chamber also recognizes the inclusion of a threshold number of individuals that would trigger notification t

regarding the data presented, i think about the usefulness of this data in other aspects. how many people use these buses? that is also how many jobs are leaving san francisco on a daily basis. the question i have is, regarding the data, the lag time of a few years, is that just perpetual in the collection of data in annual report? is there any other way to have more real time numbers? >> commissioner farrell, it is an easy question but it had different layers. i will be very brief with you on this. the lag for the data in this report is just a result of the sar process. we need to consult with all the parties. it takes time. at some point, you have to stop collecting data to do the report. one of the goals in the process is precisely to set up a data collection mechanism that is not expensive and can generate more up-to-date data, at any given point, and be of use for other persons as well. we have a good track record in terms of designing systems that can do that. you may or may not be familiar with our cycle track application system. we develop an application for iphone

it is helpful to know what the data is. if we know one of the reasons for officers being put on modification is because of car accidents -- do you know what i am saying? if we have the data, we can prioritize and find those measures. we can prevent those kind of injuries. it will reduce costs in the long run. for talking with director daughter -- director dodd, she is trying to institute as many provisions as possible. >> this goes back to the academy issue. younger people don't break as easily as older people. we would probably experienced last officers going off on disability or recovering faster from injury. >> it will be helpful to have the data. >> thank you for the questions. one of the things to follow up on the conversation that supervised wiener had, it is something i know that supervisor kim had talked about, the issue of civilianization. the folks that are on leave modification or permanently accommodated that somewhere in that grouping, we have people that could be returned somehow to the streets. i am hoping tha

one final way to look at the data, here moving on to the final chart. we look at the number of employers who reimburse very little money, between 0% and 10%. 57% of all employers in 2010 that offered some form of a reimbursement plan only reimbursed between 0% and 10% of the money. that is a slight increase over prior years, when we saw that figure at 52% and 53%. that is an overview of what the data looks like, how money is allocated, how reimbursement plans are used. of a transition briefly to show you what our day-to-day experience has been. on this ordinance, my colleagues and i currently have talked to thousands, literally, of workers, and hundreds of employers. and lots of third-party administrators -- brokers and insurance agencies offering some of these reimbursement plans. i want to share a few things we have taken away from this. one is the insurance industry is affirmatively and proactively selling and marketing these reimbursement plans as product to employers, by way of saying they are dramatically less expensive, that this is the least exp

where the police officers enter the data, we're working on editing the front and so that we are forcing them to enter seven digits as opposed to just any number of digits. i am happy to answer any specifics that we might have. it is a lot of basic technology that we are putting in place for the next year. >> the implementation really depends on resources and whether or not you are able to get them? is it part of their plan and general strategic vision? >> i don't really know at the point at which it is a go. i am trying to get from you this funding for the top projects, it appears that i am going to be successful in doing that. so the funding we are getting and a headcount we are getting, a lot of this work can be done through headcount @ help desk people. a lot of it is password resets and network infrastructure, the internet based applications that we need are things that we are going to need on an ongoing basis. headcount is the hardest thing to get. >> you mean you want to hire more people? >> yes. we had something like 98 projects going on because we had vendors coming to the polic

one final way to look at the data, here moving on to the final chart. we look at the number of employers who reimburse very little money, between 0% and 10%. 57% of all employers in 2010 that offered some form of a reimbursement plan only reimbursed between 0% and 10% of the money. that is a slight increase over prior years, when we saw that figure at 52% and 53%. that is an overview of what the data looks like, how money is allocated, how reimbuem

what is graham-leach-bliley is that the f.t.c. data rule or is that market something >> again, that activity-based exemption, it's a little bit unclear exactly how broadly it might be interpreted but i think the key point is it does create disparity between the obligations of certain financial institutions so that it is the concern about the authority provided. >> thank you. madam chair, i just want to point this out as an area we need to work together it -- to make sure there's no ambiguity or poor drafting that would undermine what we're trying to accomplish. >> i thank the gentleman very much. i agree with his questioning and agree with his assessment about where we can fortify the bill and i look forward to working with you on that. the chair is happy to recognize mr. olson for five minutes. >> i thank the chair. commissioner ramirez, welcome. thank you for your time today. as you know, safe data act would require to begin to notify as promptly as possible -- and that's a quote -- individuals whose personal information was acquired

san francisco is the host agency for 40 other agencies for law- enforcement data. we spend a tremendous amount of time doing basic password resets for other department of justice agencies. and we have a very small team of people. the top item that you see is the big strategic project for the year. it is a data warehouse. today, if you want to know something very simple such as if there was a robbery in your apartment building, you would think that we could just look on a system that. we cannot do that today. we have the information, somebody entered the information, but it has been printed and put in a large room with other paper documents. what we hope to do is to simply automate that so that we can create searchable data for crime reports. from that, it will be san francisco data that will be community crime reports, so back to what the commissioner was asking, there is committed the crime reports that are available in 20 languages. that will be searchable as well. we will add the bay area crime reports. if i wanted to know the person walked with a limp, had a lon

the simulations. understanding that you have no other data. understand that perfectly, but that means that we have to try to take, you know, analyze something and make some presumptions, lots of presumptions about what may happen in the future, so i just want to suggest that if there is no difference, and then i do not see why we should not " -- " put ctip above feeder. to change the choice patterns into change in attendance patterns. but since we do not know yet, having no data that takes into account feeders, it seems to me that a more important message is how we put what we value into the order in which we place these things, so i am with the let's put the equity issue above the feeder issue, because, actually, i have been kind of nervous about -- i think we have made a lot of presumptions about people wanting these proposed so-called things, but i am not sure. we made a judgment about what we thought people would value without actually having any data on which to do that, so i still think since there is absolutely no data with which to mak

the program. we have very little data on when people exit drop. just over 50 people actually exited drop during that time. looking at the impact on the behavior compared to the time just before, we estimated a cost if the drop program more permanent at .25%. that is an initial estimate based on the data we have to date. if it was made permanent, that would have to go through the retirement board and would be updated periodically as we got further experience. the report gives ranges of cost to date. three years or four d two and half years or for people who actually entered drop -- the ranges are shown in the report. with that, i will take any questions you have. supervisor mirkarimi: thank you. i appreciate the information. i'm still trying to understand of the baseline comparisons based on the data that has been handed to us. on the city analysis cost for detail, it itemizes everything from the beginning paid to trainers to help savings arrive acosta $55,100. are you with me on that? >> yes. but we did not have anything to do with that calculation

thank the generally. that your data i was going to give christmas presents to people, like christmas gifts would be value for the time to give back to the chairs happy to recognize mr. harper for five minutes. >> thank you, madam chair. and thank you, commissioner, for being here and giving us your insight. into this. if i could just talk a little bit more about reasonable risk or significant risk, and you've indicated you support the reasonable risk standard. how do you define that reasonable risk? what do you see that being? >> i think the information that is at issue is potentially going to be, can be misused to harm consumers. i think there ought to be a presumption that there ought to be notification. again, i do want to highlight that the agency has done significant work in this arena, and enforcement actions and consent orders that we've entered into i think can't elaborate more fully on the situations that we have found where action was necessary. but again i think there needs to be flexibility. i think reasonab

i'm just trying to understand how the data -- >> it is an issue of labeling. it is rolled together to come to these averages. supervisor mirkarimi: that we can have the department and retirement health department can try to speak to this. the other question is on the actuaries. the scenario where i heard the term in determinable at times or inconclusive, were there any scenarios requested that if the factor of age or length of service had been modified were there any service modifications to determine the cost of age or service modified in how drop is structured now? >> there were no questions about changes to the drop structure and how that would affect the cost. supervisor mirkarimi: so the three scenarios ask that you by the city, go through what those scenarios are, please. >> the first two scenarios assume drop is not renewed. the first scenario assumes nobody knew enters drop after january 1st, 2011. so we have actual date of who entered drop. the second scenario assumes anyone who is interested for dropped by june 30th, 2011 angers drop. the third scenar

the transfer of data equipment and physicians from city departments at the airport. fiscal year 11-12 reductions in budget for treatment positions and other costs related to data consolidation. if the city department has not achieved its budgetary savings from the consolidation project, the department of technology should provide the reasons for not achieving the savings. that is our recommendation. supervisor chu: thank you. supervisor mirkarimi? supervisor mirkarimi: thank you. i wanted to close the loop on something that i have yelped about a few times and i know that your department responded in favorable and positive ways. let's have you provide the update, i do not want you -- i do not want to steal your thunder, about the unresolved issues that i thought you had close the loop on that are not currently covered by a 50 tpg and whatever other monitoring public access so that, as i brought to your attention, concerns about our dealing with larger issues, until a certain point, not taking care of sort of an outdated or unresolved business. it feels like this is one

, that being the only data we have, i presume, so it shows about 100 students, ctip tie-breaker schools will apply to presidio and another, and they did not get in. can you explain that? >> the total requests, or all requests, and whether they are rated number one or -- commissioner: this is the only data i have. but this is what you have given me. this is how many requests that were admitted under the current tiebreakers and would be under the two proposed tiebreakers. >> yes, so in the data from the last meeting, it shows all requests, so the reason that the numbers are so much smaller on the simulations is because there were only 600 -- exactly. it commissioner: can you give us on duplicated -- what i want to know, and this seems to tell mate that it does not matter in what order we put the c y-- ctip tie-breaker, but this is not enough data to tell me how effective this has been for the students that we want to give preference to, so, you know, in other words, if all of these students who have the ctip students actually got their first or second choice, then the question is,

we do not include the data. the data is only for the fully completed surveys. the rate at which phone service participants terminated in the middle of the interview is no different from what we have seen in surveys in the past. it falls right in the middle of the range. >> that is good. i think others covered my other questions. >> if i may follow up on the survey itself, how did you decide how many people to include in the survey? was that based on what is typical for this kind of a survey? >> typically most surveys we do in the city of san francisco, we do about 600 interviews. that is enough to get to a 4% overall margin of error. it is fairly standard for a citywide survey. here we did additional interviews beyond that because we wanted to capture more interviews in tiers 4 and 5. iran and sampling would have those making up a small portion. -- regular sampling would have madhave those making of a small portion. we wanted to make sure we had a solid sample and each one. that is the reason why we had a larger sample size. >> can you say anything about the di

on data security, the commission supports the enactment of a federal data security and breach notification legislation. i am pleased the legislation proposed in this committee aims to accomplish all of these goals. thank you for your leadership on consumer privacy and data security. we look forward to continuing to work closely with you on these critical issues. >> thank you, ms. brill. welcome, mr. ckerry. >> thank you, chairman rockefeller, senator thune, members of the committee. i bought them the opportunity to be here today and discuss with the -- i welcome the opportunity to be here today and discuss with you how we can best protect data privacy and the digital age. this is an issue that affects everyone. at this committee's hearing on march 16, the obama administration urged legislation to establish basic commercial data privacy protection for all u.s. consumers. what we recommended an had three elements. the first is baseline privacy protection in the form of a consumer privacy bill of rights, adapted from widely accepted fair information practices principles. the second is for gov

it is helpful to know what the data is. if we know one of the reasons for officers being put on modification is because of car accidents -- do you know what i am saying? if we have the data, we can prioritize and find those measures. we can prevent those kind of injuries. it will reduce costs in the long run. for talking with director daughter -- director dodd, she is trying to institute as many provisions as possible. >> this goes back to the academy issue. younger people don't break as easily as older people. we would probably experienced last officers going off on disability or recovering faster from injury. >> it will be helpful to have >> it will be helpful to have the data.

the last quarter we have come through was extremely weak and the data has been dripping and drabbing for the last large number of weeks. and this is certainly a slow patch. and probably a significant slow patch in the economic recovery story. and so that's what i think you are seeing in the data over the last large number of weeks. >> tom: so overlay that over the market reaction this week. was what we saw this week part of a normal correction or something else? >> i think so. now our forecasts for the equity markets in the u.s., anyway, is plus nine percent by the end of the year. and you are still about half of that, even given the sell-off concluding today's activities. so you saw a lot of run-up early in the year and a pullback after the japanese quake. then you saw a run-up and you are seeing a pullback now. you are kind of marking time, you know, given all the data of that you've seen this is not terribly surprising reaction by the market. >> tom: let's use history as a guide because the last time we saw the economy add so few jobs was last summer. last summer you remember was a

response to my request was we are unable to provide the data requested. the cost is based on the post- drop experience compared to the prior assumptions about prior experience directly. our problem is the valuation assumptions do not have a special retirement rate after 30 years of service when the cap is reached. anyone should have difficulty believing that officer age 55 with a 90% pension as a way 12% chance of retiring during the year. imagine your 55 it can retire 90% of pay. is there a chance yuli that year -- [tone] supervisor chu: thank you very much. supervisor wiener: if you would please finish. >> if you think this assumption is right, drop has a cost. if you think is wrong, you should not eliminate drop. one should find the end on the funding method used by the plan. the cost of drop determined under a funding method does not meet the county rules that tied the -- that is not how the drop cost was determined. we have three questions about the funding method. the first two were not answered. we're not clear on the third question, but i don't fig

those are the 4000, approximately, that are subject to this law. we have data from about 3000. so we think it is relatively good-quality sampling of the employer community. i will note that there is a different health care expenditure rate that applies to businesses between 20 and 99 employees, medium-sized employees -- medium-sized businesses. this ordinance declines those as medium-sized businesses. large businesses are those with 100 or more employees, and different expenditure rates replied -- apply to those. approximately half the reporters to us are medium-sized. have are the large size. the first way to broadly understand how these employers were making health care expenditures was the total dollars spent. supervisor campos alluded to this. 90% of all the health care data -- health care dollars are allocated to group health insurance plans. 3% son was allocated to the city option, the health the san francisco program, and at 7% was allocated to reimbursement plans. we can answer follow up questions. andres powers -- president o'brien: sorry to interrupt you. 90% were spen

now, the major indexes including the s&p 500 and the nasdaq all fell after data in the u.s. pointed to a slower economic recovery than many had expected 37. stop jobs data also showed a smaller number of jobs having been created in may than expected. those numbers coupled with the manufacturing ism numbers also places a greater significance on the main jobs numbers that are due out this friday in the u.s. a lot of focus on those numbers as well. this meant a shift over to safer assets like the yen on the premise that the data showing that the original bet earlier this year of a faster u.s. recovery is proving to be a little bit hasty. so we're seeing some shifts out of those original bets. exporters may likely feel the direct effect of the currency moves and adding to the negative sentiment may also be the number of auto sales registered yesterday across the board. many japanese auto makers also showing declines. in fact, toyota showed a drop 060 of 33% in may as well as the fallout of the march 11 earthquake. last month, toyota reported its fourth quarter profits falling aro

furthermore, from those models, and the data you can actually predict the future. if you tell me what's happening in this instant i can tell you 20 manslaughter from now where there will be a traffic jam where none exists at this moment. if you have that information, imagine being able to link back into the control system of traffic flow and manipulate them so the traffic jams never happen. >> looking at the next generation of innovation and technology. again, 100 years of ibm and big blue. our guest, bernie myerson, vice president of innovation at ibm. >> susie: interesting stuff to think about. >> susie: that's "nightly business report" for thursday, june 16. i'm susie gharib. good night, everyone, and good night to you, too, tom. >> tom: good night, susie. i'm tom hudson. good night, everyone. we hope to see all of you again tomorrow night. "nightly business report" is made possible by: this program was made possible by contributions to your pbs station from viewers like you. thank you. captioning sponsored by wpbt captioned by media access group at wgbh access.

the ofr is divided into two parts, a data center focused on the standardization of data, the production of reference data bases, and the collection of data in the warehousing of the data and distribution of them. there's a second smaller part which is devoted to research and analysis which is devoted to risk assessment, forensics, looking at crisis and why they occurred, what went wrong, financial innovation and how it's affecting the quality and character of our data, and the evolution of the financial system, and so on. the ofr will have a director and deputy directors who support each of those two sides of the organization so our goal in terms of research is to produce, promote, and sponsor financial research to publish non-confidential financial data, reference data, and i'll tell you exactly what that means in a moment, analytical tools, to establish fellowship and visiting scholar programs for people who want to work on financial research and collaborate with and provide data services for all the financial regulators and statistical agencies and finally to promote best practices i

the idea is to put government data on the web, make it accessible to the public. it has been very successful. i know the general services administration department and 311 has now taken the lead on this and is getting departments more data on the web, but out of this initiative, we had over 60 applications created at no cost to the city that the public, simply by having access to the data on their own time, whether it is companies, whether it is just interested citizens with technical abilities, have created applications that citizens can use in san francisco to access services to utilize the city data to get the services they want without going toward traditional us coming to you asking for money, going through a long process to create these applications. the next one, enterprise applications, is a generic term we use to talk about rather than doing things on a department by department basis, really looking for commonalities across departments where we have shared applications where we are doing similar things. there is a number of examples i think we could use t

without the kind of data, this is not cost neutral or is cost neutral. the fact that it is not be reasonable policy of justice that either help support it or doesn't, i think it only speaks to the need, and gives us a better opportunity, the way it was scripted almost does a disservice onto itself because of how tightly wrapped that language was. itit was evident that when i wod ask questions, they could not extend the study because that was the interpretation of what was in the charter. in other cities like los angeles and san diego and houston, when we talk with them, they measure the efficacy much differently than we are today. so when i take a look at the numbers of what the l.a. cost is -- what the outlay cost is for us to not put a recruit through the academy, not be able to subsidize somebody on probation once they leave the academy to the field training program, there is really no other mechanism to bring in new offices unless it is lateral hiring, which they will have to commit a significant amount of resources for background investigations, and

the data security and the identification of protecting service by requiring data security fax as well as notification in cases of breach. the bill incentivize companies to practice data immunization on the front-end before breach occurs and provide at least two years of free credit reports. we are particularly pleased with traditions that instruct information brokers to maximize accuracy and accessibility of records and provide consumers with a process to dispute information. consumers union prefer consumers be notified in any event to the breach similar to the strongest notice of loss is currently in place. however, we can expect getting an exception when a company demonstrates a reasonable risk of identity theft is ever. we urge this committee not to further weaken notification requirements. thank you for your time and i'd be happy to answer any questions you may have. >> thank you. mr. schaff and i want to apologize to everyone about this travesty of scheduling. it is not for e.u., not for u.s., not or to the people all the way down to the basement to get into this hearing and worl

they can be used to collect the detailed data throughout the city. radiation levels measured one meter above ground remained lower than the maximum allowable level. however, levels in a rain water pipe showed more than 7.3 micro receive eithers, which is twice the government standard. if radiation levels in the atmosphere exceeded 3.8 micro sieverts in the hour, residents would normally need to evacuate. the municipality plans to remove surface soil where the docimeter readings are high. >> translator: the city is asking residents to measure radiation levels in and around their homes. together with the residents, we hope to lower the levels in the atmosphere. >>> researchers have found that the sea bed off japan's northeastern coast had been gradually sinking days before the march 11th earthquake. a team from tohoku university analyzed data taken at two monitoring sites 80 kilometers off the peninsula in miyagi prefecture. in late may the team recovered measuring devices from the sea floor at a depth of 1200 meters. the data shows that the sea bottom

crowdsourcing exercise please email me adam at adam vs the man dot com we're still going through the data dump called negro that is half the border patrol in spanish and going through some of that but there were some important observations of before we got to some of these activities in fact it was it was because of that data dump we had the f.b.i. report that we interviewed gary cooper about yesterday and how they're monitoring his activities and caught busters but i want to share in the e-mail that i got from anonymous ken will just call him that for now who really has some some powerful conclusions from his analysis of the thing to let me go data down here we go each of these files demonstrates a failure by the admins of the site's services in question to follow even the most basic principles of and future security practices for example the file it's silly rumors dot text as a list of the ip addresses of a large number of accessible routers that use the use user's live password combinations that are utterly and secure route so michael in route is not. hard guess and most armies groups

we have collected the data. the primary allocations have stayed consistent at 7%. we have seen applications to health insurance dropped a little bit, from 84% down to 80%, and an increase in using reimbursement plans. that is laid out in table 8 in your chart. forgive me. there are a lot of numbers here. looking specifically at the money allocated to reimbursement plans, as supervisor campos indicated, $62 million was allocated to these plans. in this context, the allocation to a plan constitutes an expenditure. this is what is being addressed in the legislation. only top% -- only $12 million, 20% of that, was reimbursed to those employees over the course of that year. it is 29% of employers who use these reimbursement plans in some way, shape or form. 13% of them have it as the primary method of meeting the employer spending requirements. it is a higher number that used them at all. many employers will primarily provide health insurance and may allocate a small amount of money to a small subset of workers into these reimbursement plans. in addition to that 20% fig

atf simply put the serial numbers in its data base. still, atf did nothing to stop avila and petino. 11 months later, two of those three rifles were recovered at the scene of agent terry's murder. during those 11 months, avila purchased another 34 arms, but petino purchased 539. again, cooperating gun dealers notified atf of each and every purchase. it usually took about five days to enter the serial numbers into the atf data base. but atf often had realtime or even advance notice of the purchases from the dealers. atf even specifically approved of particular transactions. i'll give you an example. in august 2010, a gun dealer cooperating with the atf asked for guidance. petino wanted 20 more weapons, but the dealer only had four in stock. the dealer told atf that if he were to sell the guns, he would have to "obtain the additional 16 specifically for this purpose." an atf supervisor wrote back, "our guidance is that we would like you to go through with mr. petino's request and order additional firearms." at this point, atf already knew

a couple of kind of immediate issues related to the data center consolidation, we have, as approved in the plan that was adopted by coit, budgeted some savings in the budget to reflect the projected savings associated with the data center consolidation. the estimated savings were due to staffing efficiencies and to a boy did equipment purchase, as we were able to back off of purchasing equipment in each department in a decentralized manner as we ship them on to the consolidated data center. we also have savings associated with the data center and other consolidation initiatives in our contracts and in the past through costs going through as a function of trying to do a better job of coordinating and have dt work with departments to consolidate purchases, contracts, and then lastly, as recommended in the ict plan, what we are doing in this budget is we are shifting and reallocating funds within the base budget to pay for projects that would otherwise have been funded with general fund. within the city wide coit/i.t. budget, there are a number of projects in the plan. about $5.5 million

metz on the data. i am trying to understand slide two versus slide 5. it looks like there were split on the idea of paying more for renewable energy. half wanted to and half did not. and guess it is because you are drilling down now and going by teaier that there seems to be ls interest at the higher tiers. >> that is correct. the first side is a purely conceptual question asking if they would pay more in general principle. in five, we're giving them very specific information about what the rate increase would be. their reaction is to that specific context instead of the general. that is where you see this papee steeper creation. >> as we talk about program design, there will be a strategy for the targeted group, which tier it is, which groups will be more inclined to pay more for renewable. i was struck by slide four. it shows that once they heard more about the program, they were more inclined to stay with the program. that is kind of a marketing question. is that right? if they are educated about it, they might stay with it. >> this slide is showing w