Healthcare infosec news, training, education - HealthcareInfoSecurity
WEBHealthInfoSecurity.com is your source for health industry information security related news, articles, interviews and analysis, focusing on electronic health records, health information exchanges, HIPAA and HITECH compliance, as well as the latest breaches to healthcare organizations and what it means for the industry and those directly affected.
Latest interviews and insights on healthcare information security
WEBMarianne Kolbasuk McGee • July 17, 2024 18 Minutes. Healthcare groups should consider several key points about a recent Texas federal court ruling and its impact on the use of online tracker technology on the healthcare websites of HIPAA-regulated organizations, said privacy attorney Iliana Peters of the law firm Polsinelli. Endpoint Security.
UF Health Central Florida: Cyberattack Leads to PHI Breach
WEBAug 4, 2021 · UF Health Leesburg Hospital is among facilities that were affected by a recent cyberattack on UF Health Central Florida. In the wake of a recent cyberattack that reportedly disrupted access to patients' electronic health records and other systems for about a month during recovery, UF Health Central Florida has now reported that the incident exposed patient information.
HIPAA Omnibus and Offshore Vendors - HealthcareInfoSecurity
WEBAug 14, 2013 · Marianne Kolbasuk McGee (HealthInfoSec) • August 14, 2013. Credit Eligible. Get Permission. Under the HIPAA Omnibus Rule, business associates and subcontractors are directly liable for HIPAA compliance, including penalties for data breaches. And enforcement actions by federal regulators can range up to $1.5 million per HIPAA violation.
Ponemon Report: The Impact of Ransomware on Patient Safety …
WEBJan 25, 2023 · A new Ponemon Research report shows ransomware continues to significantly impact patient safety, according to survey of hospital IT/Security leaders.
HITRUST Adds Privacy Controls to Framework
WEBMcGee is executive editor of Information Security Media Group's HealthcareInfoSecurity.com media site. She has about 30 years of IT journalism experience, with a focus on healthcare information technology issues for …
The Essential Guide to HITECH Act - HealthcareInfoSecurity
WEBFeb 8, 2010 · The HITECH Act specifies that covered entities should limit uses and disclosures of personal health information to the "minimum necessary" to conduct a particular function. The U.S. Department of Health and Human Services is expected to issue regulations this year governing the "minimum necessary" provisions.
Wearable Devices: Security Risks - HealthcareInfoSecurity
WEBJun 24, 2015 · Before healthcare entities consider accepting data from consumers' wearable devices, they need to take appropriate security measures, says Verizon security expert Suzanne Widup. These devices, such as Fitbit and AppleWatch, and related apps, raise potential data privacy concerns for the users. But they also potentially pose the risk of serving as a launching pad for attacks directed at ...
Apple Watch: The HIPAA Privacy Issues - HealthcareInfoSecurity
WEBSep 25, 2014 · Apple Watch, which is due out next year, is tied to HealthKit, middleware which stores a user's encrypted health and fitness data. Apple announced recently that the release of HealthKit was delayed until the end of this month due to the discovery of a software bug. In the interview, Ganow also discusses: Why …
2006 VA Breach: Assessing the Impact - HealthcareInfoSecurity
WEBMay 25, 2012 · In May 2006, the Department of Veterans Affairs reported a breach stemming from a stolen unencrypted laptop that contained information on more than 26 million individuals. Although the device was eventually recovered and the FBI determined that no personal information was inappropriately accessed, the VA agreed to pay $20 million to settle a ...