Lege Trend: Expand Definition of Personal Information to Trigger Notification

Nevada is the most recent state to expand the definition of personal information that trigger data security laws. 

The expanded definition includes:

  • individual’s medical identification number or health insurance identification number and
  • a user name, unique identifier or email address with its associated password, access code or security question and answer that would permit access to an online account

This reflects a growing trend to include ema…

States Lose (Again) with Federal Data Breach Law

The federal data breach bill moving through Congress will preempt all state laws. Most states have stronger data breach laws than the federal bill.

Some say the federal bill is being pushed by the business lobby. It makes sense. Businesses are being sued after data breaches and it is costing millions and millions. Hundreds of millions. 

California, has stronger data security statutes and the California Consumer Federation says the federal bill will:

•Eliminate notif…

Another State Passes Data Security Protections

Alabama is the 48th state to enact data security laws, and one of a few that have revamped data security statutes post major retail data breaches. The Alabama legislation will triger notification within 30 days when any of the following information is hacked:

  •  medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional;
  • health insurance policy number or subscriber identification number and any unique identifier used …

Data Security and the Health Care Industry : A Collision Course

Since New Year’s Day, 90 Million individual health care records have been exposed by data hackers.  

Why is health care data targeted?  The data is highly valuable on the black market.

How are hackers gaining access to health care data? Via portals in electronics such as sonogram machines, conference call machines, fax machines… MD Anderson tests all its electronic equipment for security protcols.

adminPosted inhealth care data, legislative trend