Compliance & Legal
Plaintiffs who slapped Sony Pictures with a class action lawsuit after their detailed medical records were swiped in a cyberattack have finally reached an agreement on a proposed settlement.
Healthcare security folks, listen up: Failing to encrypt portable devices and laptops containing patient data could result in a serious HIPAA fine, as one Indiana-based health group can now attest.
Data security isn't what it used to be. With today's threat landscape, the stereotypically introverted, more-into-computers-than-people techie isn't going to cut it as CISO. And there are plenty of people who will tell you why.
Jigar Kadakia knows a little something about data security. As CISO of Partners HealthCare in Boston, he leads a security team of more than 40 people responsible for keeping the health system well buttoned up. We talked with Kadakia about his approach to glean some ideas that might be useful to other health systems and hospitals big and small.
A 12-hospital health system is notifying hundreds of its current and former patients that their protected health information has been compromised after discovering an employee was involved in identity theft.
With e-prescribing of controlled substances legal nationwide, providers and pharmacies are empowered with a new technological tool in the fight against prescription painkillers. Now more need to use it.
Turns out the Department of Veterans Affairs uses a Web-based communication platform that isn't exactly secure. In fact, a new report suggests VA practices in this case might have put protected health information at serious risk.
What happens when a healthcare organization's employees are found to have been inappropriately accessing patient medical records? The actions of one health system might serve as an example.
A state health agency is mailing out HIPAA breach notification letters after a technical glitch sent out letters containing protected health information to the wrong recipients.
An appellate court has cleared Advocate Medical Group of wrongdoing in a class action lawsuit alleging the organization failed to protect patient data following a massive HIPAA data breach.