Healthcare infosec news, training, education - HealthcareInfoSecurity
WEBHealthInfoSecurity.com is your source for health industry information security related news, articles, interviews and analysis, focusing on electronic health records, health information exchanges, HIPAA and HITECH compliance, as well as the latest breaches to healthcare organizations and what it means for the industry and those directly affected.
The Essential Guide to HITECH Act - HealthcareInfoSecurity
WEBFeb 8, 2010 · The HITECH Act specifies that covered entities should limit uses and disclosures of personal health information to the "minimum necessary" to conduct a particular function. The U.S. Department of Health and Human Services is expected to issue regulations this year governing the "minimum necessary" provisions.
HIPAA Omnibus and Offshore Vendors - HealthcareInfoSecurity
WEBAug 14, 2013 · Marianne Kolbasuk McGee (HealthInfoSec) • August 14, 2013. Credit Eligible. Get Permission. Under the HIPAA Omnibus Rule, business associates and subcontractors are directly liable for HIPAA compliance, including penalties for data breaches. And enforcement actions by federal regulators can range up to $1.5 million per HIPAA violation.
Why Did a Clinic Notify All Patients, Employees of Attack?
WEBAug 12, 2021 · Houston-based practice Gastroenterology Consultants notified all 162,000 of its patients and employees that their sensitive information had potentially been compromised in a January ransomware attack, saying it would have been too time-consuming and costly to pinpoint exactly which individuals had data exposed.. See Also: Gartner Guide for Digital Forensics and Incident Response
2006 VA Breach: Assessing the Impact - HealthcareInfoSecurity
WEBMay 25, 2012 · In May 2006, the Department of Veterans Affairs reported a breach stemming from a stolen unencrypted laptop that contained information on more than 26 million individuals. Although the device was eventually recovered and the FBI determined that no personal information was inappropriately accessed, the VA agreed to pay $20 million to settle a ...
Patient Portals: Privacy for Minors - HealthcareInfoSecurity
WEBFeb 11, 2014 · Healthcare providers are turning to patient portals to provide remote access to electronic health records.But privacy attorney Adam Greene says there are challenges when it comes to parents or guardians accessing the records of minors of a certain age.
EHR Vendor Dispute: Lessons Learned - HealthcareInfoSecurity
WEBSep 30, 2014 · A recent business dispute between a small clinic and a electronic health record system vendor over access to patient data illustrates why healthcare organizations need to carefully vet their vendors and scrutinize the HIPAA-related fine print in their business associate contracts.. See Also: The Promise (and Peril) of AI in Healthcare The dispute, first reported by the Boston Globe, involves ...
Latest breaking news articles on healthcare information security
WEBRashmi Ramesh • September 29, 2024. California Gov. Gavin Newsom on Sunday vetoed a hotly debated AI safety bill that would have pushed developers to implement measures to prevent "critical harms." The bill "falls short of providing a flexible, comprehensive solution to curbing the potential catastrophic risks," Newsom said.
Creating a User Authentication Strategy - HealthcareInfoSecurity
WEBApr 23, 2013 · Information Security Media Group (ISMG) is the world's largest media company devoted to information security and risk management. Each of its 37 media sites provides relevant education, research and news that is specifically tailored to key vertical sectors including banking, healthcare and the public sector; geographies from North America to Southeast Asia; and topics such as data breach ...
Malware: The Threat to Medical Devices - HealthcareInfoSecurity
WEBMay 31, 2013 · Get Permission. Malware affecting medical devices is one of the most serious emerging threats in healthcare, says security researcher Kevin Fu. See Also: 2024 Threat Landscape: Data Loss is a People Problem. "If a medical device, let's say a bedside monitor, gets infected with a computer virus, then that device can do …