Healthcare Information Security

Patient Privacy

Clinical Trial Subjects Unworried about Health Data Sharing Risks

June 14, 2018 - Fewer than 8 percent of clinical trial participants felt that security and privacy risks of health data sharing outweighed the benefits, according to a study by Stanford researchers recently published in the New England Journal of Medicine. Around 93 percent of respondents said they were very or somewhat likely to share their data with university scientists, and 82 percent were very or somewhat...


More Articles

Some Healthcare Firms Struggle To Comply with EU Data Privacy Rule

by Fred Donovan

Around one-third of healthcare organizations are still “on the journey” to comply with the EU's General Data Protection Regulation (GDPR), even though the GDPR took effect May 25, according to a cross-industry global survey of...

New York Suspends Nurse for HIPAA Violation Affecting 3K Patients

by Fred Donovan

The state of New York has suspended Martha Smith-Lightfoot, a former nurse at the University of Rochester Medical Center (URMC), for a HIPAA violation. Smith-Lightfoot admitted to disclosing PHI when she took a list of more than 3,000 patients...

Washington Bolsters Patient Privacy Rights with New Law

by Fred Donovan

A Washington state law (SB 6027) set to take effect June 7 limits the use of medical and mental health records in discrimination lawsuits, strengthening patient privacy rights, the Seattle Times reported.  The state House passed SB 6027...

Why Email Failed To Replace Fax For Secure Document Exchange

by J2 Global

Sharing PHI in a HIPAA-compliant fashion using current health IT infrastructure continues to prove a pain point for covered entities.                                                                                                    ...

Personal Injury Attorney Ads Could Raise Patient Privacy Issues

by Fred Donovan

In a new trend that could raise patient privacy concerns, personal injury attorneys and marketers are using geofencing technology to deliver targeted advertisements to patients’ mobile phones when they visit emergency rooms or clinics,...

Healthcare Data Security Programs Get Short Shrift in IT Budgets

by Fred Donovan

Healthcare data security programs continue to be underfunded and understaffed, a Black Book Market Research cybersecurity survey of close to 2,500 healthcare security professionals found. Almost all of the respondents agreed that cyberattackers...

Best Practices for Keeping Patient Data Confidential

by JotForm

There’s nothing easy about being a healthcare provider in the United States, especially when it comes to health data privacy. From working long hours and dealing with insurance, to abiding by a myriad of government laws — healthcare...

Senate Bill Has Version of Jessie’s Law, Not Aligned with HIPAA Privacy Rule

by Fred Donovan

The Senate Health, Education, Labor and Pensions Committee this week passed the Opioid Crisis Response Act of 2018 (S 2680) with a broad range of measures to combat the opioid epidemic, including a version of Jessie’s Law that allows for...

Health Data Privacy Rears Its Head at Facebook Hearing

by Fred Donovan

During Congressional hearings last week, Rep. Marsha Blackburn (R-Tenn.) called on Facebook Chairman and CEO Mark Zuckerberg to support her bill, Balancing the Rights of Web Surfers Equally and Responsibly (BROWSER) Act, which would require companies...

Patient Privacy Protections Extended to EOB in Massachusetts

by Fred Donovan

Patient privacy protections have been extended to cover explanation of benefits (EOB) summaries sent out by health insurers, under a Massachusetts bill signed in to law by Governor Charlie Baker (R) earlier this month. Sensitive health information...

How EU Data Privacy Rule Could Impact US Healthcare Providers

by Fred Donovan

US healthcare organizations that handle personal information of EU individuals will face stricter regulatory requirements and possibly hefty fines under the EU’s new data privacy rule set to take effect May 25, 2018. The General Data Protection...

25% of Patients Did Not Access Data Over Patient Privacy Concerns

by Fred Donovan

The HIPAA Privacy Rule guarantees patient data access as well as patient privacy.   While both guarantees are important, they can sometimes be at odds. The goal of HHS under the HIPAA Privacy Rule is to ensure patient privacy is protected,...

CareFirst BlueCross BlueShield Fesses Up to Phishing Attack

by Fred Donovan

Baltimore-based CareFirst BlueCross BlueShield admitted March 30, 2018 that the personal data of 6,800 CareFirst members may have been exposed by a phishing attack that compromised an employee’s email account. Information that could have...

OCR Reiterates HIPAA Guidance for Opioid Crisis Response

by Elizabeth Snell

OCR recently discussed its current tools and initiatives in place to help organizations face the opioid crisis, touching on HIPAA guidance and how the agency is implementing the 21st Century Cures Act. OCR launched two new webpages focused on...

Patient Privacy Included in Recent Opioid Records Senate Bill

by Elizabeth Snell

Recently passed legislation states that HHS will establish guidelines for when healthcare providers should prominently display a patient’s history of opioid use on his or her medical record. The bill also underlines the importance of maintaining...

CA Supreme Court Rejects Physician Patient Privacy Claim

by Elizabeth Snell

A California physician’s claim that the state medical board committed patient privacy violations when it obtained an individual’s prescription records without a warrant was recently rejected by the California Supreme Court. The medical...

Updated Google Policy May Affect Patient Data Security

by Elizabeth Snell

Google recently updated its privacy policy, which could have a positive effect on patient data security. As of last week, Google began removing private medical records from its search results. The Google “Removal Policies” page now...

ONC Privacy Policy Snapshot Challenge Winners Selected

by Elizabeth Snell

The ONC announced the winners of its Privacy Policy Snapshot Challenge, showing how Model Privacy Notice (MPN) generators can help consumers better understand a specific product’s privacy and security policies. Principal Deputy National...

MDLive Lawsuit Claims Patient Data Privacy Violations

by Elizabeth Snell

Allegations were recently filed against a telehealth provider, claiming that the company committed patient privacy violations and disclosed customer information to a third-party organization. MDLive, Inc. is facing a class-action lawsuit filed...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks