Data Security

Tuesday, May 21, 2013

Data Security

With increasing federal scrutiny of health care data breaches, maintaining a secure network and clinical infrastructure is crucial for both payers and providers. Topics here include: data breaches, data encryption and other security techniques, access and authentication issues, and regulatory requirements.

Quick Turnaround on Breach Notification

Joseph Goedert | May 17

The Dent Neurologic Institute in Amherst, N.Y., experienced a breach of protected health information on May 13 and issued a public notice on May 14.

Consumer Health

Group Practices

Stimulus

Policy & Regulation

California Developing Guidance for Patient Consent of HIE

Joseph Goedert | May 17

The California Health and Human Services Agency has released a guidance tool on requirements for obtaining patient authorization and consent for providers to electronically exchange information for treatment purposes.

Consumer Health

EHR

Health Info Exchange

Hospitals

Group Practices

Payers

Policy & Regulation

Hacker Gets Patient Credit Cards from North Carolina Providers

Joseph Goedert | May 16

A hacker accessed personal and credit card information for patients of at least two health care organizations in North Carolina, coming in through the facilities’ Web sites built by the same vendor, E-dreamz Inc. in Charlotte.

Consumer Health

Group Practices

Policy & Regulation

Stimulus

OCR Seminars to Walk through Omnibus HIPAA Rule

Joseph Goedert | May 16

The HHS Office for Civil Rights has scheduled four Web seminars to explain the omnibus final HIPAA rule to modify the privacy, security, breach notification and enforcement rules.

Consumer Health

Health Info Exchange

EHR

Group Practices

Hospitals

Payers

Stimulus

Policy & Regulation

PHI Breach #3 for Indiana University

Joseph Goedert | May 15

Indiana University Health Arnett Hospital is notifying about 10,300 patients after an employee’s password-protected but unencrypted laptop was stolen from a car on April 9. It is the third major breach for a university facility since August 2011.

Consumer Health

Hospitals

Policy & Regulation

Stimulus

Breach Pattern: Thieves Seek X-rays for their Silver Content

Joseph Goedert | May 14

An orthopedic clinic in North Carolina recently reported a major data breach when X-ray films were stolen for their silver content, and El Centro Regional Medical Center in California has just reported a similar breach.

Medical Imaging

Hospitals

Consumer Health

Policy & Regulation

Stimulus

Breach at The MED in Memphis Hits 1,200

Joseph Goedert | May 13

Regional Medical Center at Memphis, known as The MED, is notifying nearly 1,200 patients of a breach of protected health information that includes Social Security numbers, reports WREG, the local CBS affiliate.

Group Practices

Hospitals

Policy & Regulation

Stimulus

Consumer Health

Insurers to Business Associates: Standardize Security Best Practices

Joseph Goedert | May 13

HITRUST, a health industry consortium best known for developing the Common Security Framework of best practices, now has several of its members that will require business associates to follow the framework and document compliance with it.

Group Practices

Payers

Hospitals

Vendor News

Policy & Regulation

Vendor Scam Results in Data Breach for Clinic

Joseph Goedert | May 09

Raleigh Orthopaedic Clinic in North Carolina is notifying approximately 17,300 patients of a breach of their protected health information after the clinic apparently was the victim of a scam.

Consumer Health

Group Practices

Policy & Regulation

Stimulus

Medical Imaging

U-Rochester Reports Breach after Flash Drive Lost

Joseph Goedert | May 07

The University of Rochester Medical Center in recent days has notified 537 former patients of a breach of their protected health information after a physician’s flash drive went missing.

Policy & Regulation

Consumer Health

Group Practices

Hospitals

Mobile Technology

Deploying a Mobile Device Management Strategy

Marcus LaFountain | May 06

A recent Ovum study showed that almost 60% of employees bring some type of mobile device into the workplace. There are a few names for this, Bring Your Own Device (BYOD), Bring Your Own PC (BYOPC), Bring Your Own Phone (BYOP), User Introduces Unsecure Device onto My Network and Then Loses My Secure Data (UIUDOMNTLMSD).

Mobile Technology

Group Practices

Hospitals

Policy & Regulation

ONC Offers Guidance on HIE Governance

Joseph Goedert | May 06

The Office of the National Coordinator for Health Information Technology has issued guidance on a governance framework to assess the competency, credibility and trustworthiness of health information exchange entities.

Health Info Exchange

Group Practices

Hospitals

Consumer Health

Payers

Policy & Regulation

Ready or Not, Here Come HIPAA Audits

Joseph Goedert | May 01

As the feds ramp up enforcement of privacy and security rules, providers look to fill protection gaps.

EHR

Health Info Exchange

Group Practices

Hospitals

Payers

Policy & Regulation

Stimulus

Want to Impress OCR During a HIPAA Audit? Write a Book

Joseph Goedert | May 01

Here is a tutorial from the Cleveland Clinic on maximizing proof of HIPAA privacy/security rule compliance through organized documentation by making a Book of Evidence.

Consumer Health

EHR

Health Info Exchange

Group Practices

Hospitals

Payers

Vendor News

Policy & Regulation

Stimulus

NIST Updates Commonly Used I.T. Security Guidelines

Joseph Goedert | May 01

The federal government’s foundational computer security guide, also applicable to and used in the private sector, has been revised and now is available.

Group Practices

EHR

Hospitals

Payers

Policy & Regulation

«12 3 4 »

Most Emailed

Slide Shows

Most Wasteful States for Prescription Meds

Twitter

Facebook

LinkedIn

Current Issue

Ready or Not, Here Come HIPAA Audits

As the feds ramp up enforcement of privacy and security rules, providers look to fill protection gaps.

Videos

Health I.T. Keeps NY Islanders On the Ice

Login | My Account | White Papers | Web Seminars | Events | Newsletters | eBooks