Trend: State Adds Data Security Requirements for State Contractors

Connecticut’s enacted Senate Bill 949 contains significant data security requirements for entities contracting with state agencies and entities in the health insurance and administration business. 

Contracting entities must provide:

  • Comprehensive data-security program, including:
    • the use of security policies,
    • annual reviews of such policies,
    • access restrictions, and
    • mandatory security awareness training for employees beginning July 1, 2015.
  • Restrict access to Confidential…

Trend: States Strengthening Health Data Privacy

Connecticut and Oregon both strengthened laws protecting health care data this year. Specifically the states , strengthened protections of personally identifiable information (“PII”).

  • Connecticut did this:
    • Effective October 1, 2015, S.B. 941 
      • Requires notice of a breach of personal information within 90 days of discovery
      • If a breach involves social security numbers, must offer a year of complimentary identity theft prevention and mitigation services, and the notifications must…

Legal Trend: Stand Alone Cybersecurity Insurance Coverage Denied for Breach Claim. First Legal Case on the issue.

Say you’re a health care provider. You buy data breach insurance policy to cover any potential hacks or breaches. you think you’re doing the right thing to protect your business.

Then, your data gets hacked. You file a claim with your insurance company. You’re denied. You go to court.

The insurance company says the health care provider failed to provide the required minimum security standards. 

Its a case of first impression. It’ll make history and make legislation far and wide as the…

National Association of Professional (Insurance) Agents Ramps Up Data Breach Insurance

NAPA has new data breach compliance and certification. Data breaches are big business, people.  

Data breaches and protecting against data breaches generate:

  • Big legislative pushes
  • New regulations
  • Procurement Opportunities (hello, $21M emergency contract that the federal data breach sparked)

Data breaches impact:

  • bankers, credit unions, financial institutions
  • retailers
  • corporations
  • new lawsuit filings
  • health data
  • student data
  • +more

NAPA

67% of Healthcare Companies Had Data Security Issues Last Year

Healthcare Management Information Systems Society released a new survey about data security and healthcare, the results:

  • 2/3 of healthcare companies repsonsing experienced a data security issue within the last year
  • 87% say data security is a increasingly higher business concern for healthcare
  • 69% say their concern about data security is motivated by phishing
  • 46% say the highest data security concern is internal negligence
  • 57% have at least 1 full time staff person dedicated to data…

Status Check: National Data Security Bill Likelihood of Passage

Will Congress pass a national data security bill after the massive federal employee data breach. Odds are not high. There is a higher liklihood that next week there will be a new food trailer opening in Austin. 

What does this mean? States will pass stronger data security bills from everything from retailers to public education contractors to health care data.

Health Data Management

Health Care Data Security Legislation from the North. Canada Comes Calling.

“Sweeping changes to provincial health privacy laws will soon cut down the red tape preventing authorities from prosecuting snoopers and force hospitals to declare all breaches of patient records to the privacy watchdog.” 

  • the six month deadline to lay charges would be wiped out
  • potential fine for snoopers would be doubled from $50,000 to $100,000
  • Hospitals would also be forced to report all breaches to regulatory colleges and the provincial privacy commiss…