Healthcare Information Security

Patient Data Security

Patient Privacy Addressed in Recent HHS Confidentiality Rule

January 19, 2017 - The Confidentiality of Alcohol and Drug Abuse Patient Records regulations were recently updated and modernized, specifically addressing patient privacy concerns for individuals seeking treatment for a substance abuse disorder. The changes were issued under a finalized rule from the Department of Health and Human Services (HHS). Concerns had previously been raised over privacy of records for...


More Articles

Patient Privacy Addressed in Recent HHS Confidentiality Rule

by Elizabeth Snell

The Confidentiality of Alcohol and Drug Abuse Patient Records regulations were recently updated and modernized, specifically addressing patient privacy concerns for individuals seeking treatment for a substance abuse disorder. The changes were...

Utilizing Healthcare Authentication for Stronger Data Security

by Elizabeth Snell

Finding the right balance between security and convenience is often tricky for healthcare providers, especially as technology continues to quickly evolve. Implementing stronger access controls and healthcare authentication options can help ensure...

Health Data Privacy Concerns Not Hindrance for PHI Sharing

by Elizabeth Snell

With more providers implementing EHRs and working toward interoperability, it is not uncommon for individuals to have health data privacy concerns with their personal information in how it is used and potentially shared. However, recent research...

LabMD Files Review Petition Against Data Breach Allegations

by Elizabeth Snell

LabMD filed a petition for review on December 27, 2016, following a U.S. federal appeals court granting a stay of an FTC order in the continuing battle between the two parties over data breach allegations. The U.S. Court of Appeals for the 11th...

Easing HIPAA Violation Concerns with Patient Data Access

by Elizabeth Snell

While the healthcare sector continues to work toward achieving nationwide interoperability, concerns over potential HIPAA violations with regard to patient data access is also on the rise. Covered entities need to allow individuals access to...

New Hampshire Hospital Data Breach Affects 15K Patients

by Elizabeth Snell

A patient at New Hampshire Hospital reportedly hacked into the New Hampshire Department Of Health And Human Services (DHHS), posting information online and creating a potential data breach for 15,000 individuals. DHHS said in an online statement...

ONC Explains Patient Data Access, HIPAA in Latest Report

by Elizabeth Snell

While health IT has made progress on standards and economic incentives, concerns over HIPAA rules and patient data access can be a hindrance on the continued push toward nationwide interoperability, according to a recent report from the Office...

Data Encryption Workgroup Report Discusses Privacy Concerns

by Elizabeth Snell

It is important to remember that there is not a “one-size-fits-all” answer or a “solution” to the debate over whether or not data encryption should be utilized by organizations or the government, the bipartisan Encryption...

What Are Data Security Concerns with Healthcare APIs?

by Elizabeth Snell

Potential health data security concerns and security risks have previously been touted as barriers for the use of application programming interfaces (APIs) in healthcare. However, if covered entities understand the basis of the technology, it...

Tampa General Hospital Data Breach Settlement Reached

by Elizabeth Snell

A settlement was recently reached for Tampa General Hospital, following allegations of a health data breach where employees inappropriately accessed patient information. The hospital will pay $10,000 into a Settlement Fund, where payments to...

HIPAA Privacy Changes Not in Recent 21st Century Cures Act

by Elizabeth Snell

The House of Representatives passed the 21st Century Cures Act yesterday with a vote of 392 to 26. This latest version of the legislation did not include wording that could have made it possible to change the HIPAA Privacy Rule and potentially...

PHI Data Breach Stems from Computer Hacking at GA Entity

by Elizabeth Snell

Georgia-based Vascular Surgical Associates recently announced on its website that it had experienced a PHI data breach after one of its computer servers was accessed by an outside party. The incident happened around the time of a software update,...

Physical Therapy Facility Reports Data Security Incident

by Elizabeth Snell

A physical therapy provider recently announced it experienced a possible data security incident that may have exposed certain personal information for some patients. Best Health Physical Therapy, LLC (Best Health) explained on its website that...

Potential Horizon BCBS Data Breach for 170K from Printing Error

by Elizabeth Snell

Horizon Blue Cross Blue Shield of New Jersey (Horizon BCBSNJ) announced earlier this month that one of its vendors potentially exposed the information of up to 170,000 members in a potential data breach. Command Marketing Innovations (CMI) did...

Stolen Laptop Leads to Possible Health Data Breach in CO

by Elizabeth Snell

MGA Home Healthcare Colorado, Inc. is notifying 3,119 patients and some employees that their information may have been compromised after a laptop was stolen from an employee’s locked vehicle. The incident reportedly took place sometime...

Addressing FTC Jurisdiction Over HIPAA Covered Entities

by Elizabeth Snell

With the FTC recently releasing guidance on how HIPAA covered entities must adhere to the FTC Act in addition to HIPAA regulations, it is essential for healthcare organizations to be aware of the potential consequences for not doing so. When...

Improving Health Data Security with Payment Security Controls

by Elizabeth Snell

Healthcare data encryption options are often touted as key ways for covered entities and business associates to strengthen their health data security. That includes payment security controls, which should be considered as part of a provider’s...

Why Businesses Must Adhere to FTC Act and HIPAA Privacy Rule

by Elizabeth Snell

Businesses that collect and share consumer health information need to not only be mindful of the HIPAA Privacy Rule, but must also adhere to the FTC Act. The Federal Trade Commission (FTC) released new guidance on key privacy and security considerations...

Potential CalOptima PHI Data Breach Affects 56K Members

by Elizabeth Snell

The California health system CalOptima is reporting a potential PHI data breach stemming from an August 17, 2016 incident. This is the second data security incident CalOptima has reported in the last month. The most recent incident when “a...

OIG Report Finds CO Medicaid Data Security Controls Lacking

by Elizabeth Snell

Colorado’s Medicaid data security may have increased risk due to vulnerabilities found in the Colorado Department of Health Care Policy and Financing (HCPF) information systems according to a recent investigation by the Office for Inspector...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks