Compliance & Legal
With the new Merit-based Incentive Payment System slated to kick in during meaningful use Stage 3, some industry insiders are forecasting trouble among providers.
2015 thus far has been the year of hackers targeting the healthcare industry. And they don't appear to be slowing down. Just last week, another business associate notified individuals that their protected health information was stolen following yet another "sophisticated cyberattack."
Health system pharmacy managers and contracting & purchasing executives got a reprieve when the Food & Drug Administration moved the deadline for compliance with the Drug Supply Chain Security Act to Nov. 1, 2015.
A two-hospital health system in Indiana is notifying its patients that their protected health information and Social Security numbers have been compromised following a phishing attack. What's more, cyberattackers were able to swipe data unchecked for more than a year.
Massachusetts state officials knew its $1 billion insurance website -- set up under the Affordable Care Act and part of the nationwide push to offer health insurance to the uninsured -- was in trouble. Worse, they said nothing.
When it comes to healthcare data security breaches, law firms can offer firsthand insight into what they see from their clients. A new report sheds light on the No. 1 cause of security incidents for which companies sought legal guidance.
Every 60 seconds, 232 computers are infected with malware; 12 websites are successfully hacked; more than 571 new websites are created, and 204 million emails are sent. Combine this with the fact that on the black market, medical records are worth $60, compared to credit card data, which typically sells for $20. "That makes us a significant targets," said Intermountain Healthcare's CISO Karl West.
There's a right way to manage third-party risks and vendor contracting, and there's the wrong way. And, too often, it's the latter. But it doesn't have to be. Here are some things your organization should keep in mind.
It turns out many healthcare organizations get more than a few things wrong about their information security frameworks.
The threat from hackers affects all business, but healthcare providers face the additional threat of fines for failure to comply with HIPAA regulations. These fines are no mere speeding ticket.