Healthcare Information Security

PHI

HIMSS14 session preview: Encrypting data at rest

by Nicole Freeman

Healthcare providers often hear about the benefits of encrypting protect health information (PHI), and the data breaches that become more serious when information is unencrypted. Encrypting data at rest is required of HIPAA-covered entities per...

OCR complaint filed against St. Rose Dominican Hospitals

by Patrick Ouellette

Because it allegedly compromised patient records as part of gaining leverage in a contract dispute, Dignity Health, which owns St. Rose Dominican Hospitals, is in the process of dealing with a complaint filed with the Office for Civil Rights...

HIMSS14 session preview: Privacy and compliance practices

by Nicole Freeman

Healthcare organizations are consistently reminded of their need to protect patient privacy and data, and HIPAA compliance is a requirement for all providers and their business associates (BAs). For healthcare systems, however, there is also...

HIMSS14 session preview: Coordinating ACO privacy & security

by Nicole Freeman

Accountable care organizations (ACOs) are being formed in different sizes across the country in an effort to improve patient access to care, the quality of care received, increase affordability, and, in some cases, switch to a value-based reimbursement...

HIMSS14 session preview: Meaningful use risk assessments

by Nicole Freeman

As healthcare data breaches continue to occur, providers are often reminded that staff training and encryption are key to securing patients’ protected health information (PHI). These are not the only processes necessary to safeguard information,...

Post healthcare data breach Dos and Don’ts

by Deena Coffman

No healthcare provider or other HIPAA covered entity expects to experience a data breach. But, if your organization does encounter an exposure, how you handle it could counterbalance the negative impact of the breach and preserve your reputation....

Survey: Healthcare lowest in security, highest in threat risk

by Nicole Freeman

Agari, real-time data-driven security solutions provider, released the findings of its fourth quarter edition of the Agari Email TrustIndex, and found the healthcare industry to be the most at-risk for email attacks and cyber-fraud. The TrustIndex...

What will Google cloud BAA support mean for health developers?

by Patrick Ouellette

Google recently announced that Google cloud services will now include support for HIPAA covered entities. For some organizations that are wary of using cloud applications, this was a ho-hum announcement. But for those who are working toward building...

HIMSS14 session: Identity fraud and data breach management

by Nicole Freeman

As the healthcare industry continues to see a rise in data breaches and identity fraud cases, healthcare providers must ensure that their electronic health records systems (EHR), servers, and electronic devices all have adequate protection in...

Vendors to showcase secure solutions at HIMSS14

by Nicole Freeman

As HIMSS14 in Orlando gets closer, vendors are announcing their participation and product showcases. Patient data security continues to be a focal point in the healthcare industry, and companies are eager to share their HIPAA-compliant offerings....

Google extends HIPAA BAA support to cloud app developers

by Patrick Ouellette

Google will continue to warm up to HIPAA covered entities and business associates (BAs) in 2014, as Matthew O’Connor, Google Product Manager, recently wrote that Google cloud services will now include support for HIPAA covered entities. Google...

University of Miami Health System loses patient records

by Nicole Freeman

The University of Miami Health System (UHealth) has lost patient records containing protected health information (PHI), according to a report by Miami New Times. The Health System, which is one of Southern Florida’s largest health providers,...

HIPAA requires providers using Skype to have BAAs

by Nicole Freeman

As expanding technology gives doctors new ways to contact patients and share their information HIPAA compliance questions continually pop up. Do the products being used protect patient data? Are additional safeguards required to comply with HIPAA?...

Beebe Healthcare suffers breach through contracted employee

by Nicole Freeman

Beebe Healthcare of Delaware is notifying 1,900 patients of a data breach stemming from a temporary contractor, according to a report from WBOC16.com. The employee had worked at three Beebe offices in their network since August 2013. Beebe was...

OIG 2014 Work Plan includes PHI, medical device security

by Patrick Ouellette

The U.S. Department of Health and Human Services (HHS) Office of Inspector General (OIG) released its 2014 Fiscal Year Work Plan and one of its concentrations this year will be information technology security and protected health information...

Network access control an asset to system security

by Nicole Freeman

Network access control (NAC) was rated highest among security technologies defending against cyberthreats, according to the “2014 Cyberthreat Defense Report” from CyberEdge Group, LLC and ForeScout Technologies, Inc. In 2013, over 60 percent...

St. Joseph data breach affects 405,000

by Nicole Freeman

St. Joseph Health System (SJHS) in Texas reported a data breach that occurred between December 16 and 18, according to reports from KWTX.com and Theeagle.com. The breach has affected more than 405,000 patients, employees, and employee beneficiaries....

Health data breach report: 137 percent breached record uptick

by Patrick Ouellette

According to Redspin’s 2013 Breach Report, 804 large breaches of protected health information (PHI) have affected more than 29.2 million patient records and were reported to the Secretary of Health and Human Services (HHS) since the inception...

FDNY privacy notice raises concern for data sale

by Nicole Freeman

The Fire Department City of New York (FDNY) has issued a patient privacy notice that states a patient’s protected health information (PHI) may be used for marketing or fundraising and potentially sold, according to a report from the New York...

Study: Data breaches cost healthcare providers $1.6 billion

by Patrick Ouellette

MeriTalk and EMC announced the results today of a study, Rx: ITaaS + Trust, dedicated to getting a better understanding of costs for healthcare providers associated with security breaches, data loss and unplanned outages. The study claims, according...

X

SIGN UP and gain free access to articles, white papers, webcasts and exclusive interviews on

HIPAA Compliance
BYOD
Cybersecurity
Data Breaches
Ransomware

Our privacy policy

no, thanks