In This Issue:

- High Tech, High Risk: Protecting Health Plan Data: Recent Cyber Attack Reminds Employers to Take Swift Action

- EEOC FY 2014 Statistics Are Here: What Do They Mean for Employers?

- State Round-Up

- Promulgating Employee Conduct at Work: Avoiding Common Policy Land Mines

- Supervisor’s Knowledge of Unreported Overtime May Lead to FLSA Liability: Court Finds Employer May Not Assert Equitable Defense in Such Cases

- It’s Time to Post the OSHA 300A Annual Summary

- Delegation: Ask Permission, Beg Forgiveness, or Practice “Per-Giveness”?

- “15-Month Lapse” Until Adverse Action Does Not Bar Retaliation Suit: Court Finds Employer’s Reason for Refusing to Rehire Worker Was Pretextual

- Excerpt from High Tech, High Risk: Protecting Health Plan Data:

On February 5, 2015, Anthem Blue Cross and Blue Shield, one of the largest health insurers in the country, notified its policyholders, members, and business partners that it was recently the target of an external cyber attack that appears to have comprised the confidentiality of medical and other personal information maintained on its information technology (IT) system. The information at issue included names, birth dates, medical identification numbers, Social Security numbers, addresses, employment information, and other similar information of more than 80 million current and former members. The notices that Anthem delivered to those potentially affected by the attack indicate that this attack did not compromise medical or credit card information.