Patient Privacy

1M Inova Health Individuals Added to Blackbaud Breach Victim Tally

by Jessica Davis

The Blackbaud breach victim tally has climbed to nearly 3 million healthcare-connected entities and other nonprofits. In the last week, Inova Health System reported more than 1 million...

COVID-19 Sites Plagued with Third-Party Tracking, Posing Privacy Risk

by Jessica Davis

Nearly all webpages tied to the COVID-19 pandemic and designed to help individuals find information about the coronavirus contain code that transfers data to third parties, which can pose serious...

Patient Data Privacy Lawsuit Against Google, UChicago Dismissed

by Jessica Davis

The patient data privacy lawsuit brought against Google and the University of Chicago Medical Center was dismissed by a federal judge in Illinois on September 4, ruling that patient who filed the...

Patients Vastly Unaware of Insurers’ Access to Online Health Data

by Jessica Davis

Just one in 10 American patients believe health insurance companies have access to their personal spending and streaming habits, although reports have shown insurers routinely search private and public...

OCR Updates HIPAA Resource for mHealth Apps, Cloud Computing

by Jessica Davis

The Department of Health and Human Services Office for Civil Rights updated and renamed its former Health App Developer Portal as a HIPAA resource page for mobile health apps, APIs, and...

CDT, eHI Unveil Draft Consumer Health Data Privacy Framework

by Jessica Davis

The Center for Democracy and Technology (CDT) and eHealth Initiative and Foundation (eHI) released its draft consumer health data privacy framework designed to define data in need...

Search Engines May Expose Patient Health Information, ACR warns

by Jessica Davis

New search engine capabilities may inadvertently expose patient identifiers and other protected health information, according to a warning from the American College of Radiology...

COVID-19 Home Monitoring Tools Pose Patient Privacy, Safety Risks

by Jessica Davis

The COVID-19 pandemic spurred the rapid adoption of remote patient monitoring tools to support patient care in light of social distancing needs. But the accelerated development...

House Votes to Lift HHS Funding Ban on National Patient Identifier

by Jessica Davis

In its Fiscal Year 2021 minibus package passed this week, the House of Representatives once again voted to remove a provision that effectively bans providing federal funds to the...

Proposed COVID-19 Relief Bills Include Privacy, Security Funding

by Jessica Davis

The Senate Committee on Appropriations unveiled COVID-19 relief legislation this week, which would allocate $53 million in funds to the Department of Homeland Security...

Lifespan to Pay OCR $1.04M HIPAA Penalty For Unencrypted Laptop Theft

by Jessica Davis

The Office for Civil Rights reached a settlement with Lifespan Health System Affiliated Covered Entity over the theft of an unencrypted laptop in 2017. The Rhode...

SAMHSA Revises Privacy Rule 42 CFR Part 2 for Substance Use Patients

by Jessica Davis

The Department of Health and Human Services’ Substance Abuse and Mental Health Services (SAMHSA) announced the agency has revised the Confidentiality of...

RWJF, Manatt Share Consumer Health Data Privacy Framework

by Jessica Davis

The Robert Wood Johnson Foundation and Manatt Health recently released a consumer Health Data Privacy Framework designed to address some of the gaps in existing health data privacy...

$185K Proposed Settlement Reached in Grays Harbor Data Breach Lawsuit

by Jessica Davis

Grays Harbor Community Hospital and Harbor Medical Group has reached a proposed $185,000 settlement with the 88,000 patients impacted by a June 2019 ransomware attack, which drove...

Inadequate Security, Policies Led to LifeLabs Data Breach of 15M Patients

by Jessica Davis

Ontario and British Columbia Information and Privacy Commissioners have concluded LifeLabs failed to protect the personal health information of the 15 million patients impacted by its...

UnityPoint Health Reaches $2.8M Settlement Over 2018 Data Breach

by Jessica Davis

Iowa Health System, doing business as UnityPoint Health, has reached a proposed $2.8 million settlement with the millions of patients impacted by two phishing-related data breaches in 2017 and...

Judge Sends Episcopal Health Data Breach Lawsuit Back to State Court

by Jessica Davis

A federal judge of the U.S. District Court for the Eastern District of New York has sent a data breach lawsuit against Episcopal Health Services back to state level courts, saying it lacked the grounds...

AGS Urge Apple, Google to Ensure Privacy of COVID-19 Contact Tracing

by Jessica Davis

Following reports that showed the majority of consumers would not opt into using COVID-19 contact tracing apps, 39 bipartisan members of the National Association of Attorneys General (NAAG) are urging...

Cano Health Reports 2-Year Email Hack Impacting Patient Data

by Jessica Davis

Florida-based Cano Health, a population health management vendor, recently began notifying patients that their data was potentially compromised, after hackers breached three employee email accounts...

OCR Shares COVID-19 Guide on Contacting Patients for Blood Donations

by Jessica Davis

The Office for Civil Rights released guidance for healthcare covered entities on the HIPAA-permitted ways providers can contact patients recovering from COVID-19 to inform them of blood and plasma...