Category Archives: health care data

Regulatory TREND. Medical Office Data Breach Settlement. State Attorney General Bans Business Ownership.

Where: New Jersey

Who: New Jersey Attorney General Gurbir Grewal

What: In a settlement of a data breach  of medical records, New Jersey Office of Attorney General banned those responsoible for the breech from owning or operating a business in New Jersey. 

Gov Info Security | Breach Settlement Has Unusual Penalty 

Texas State Agency. 2nd Largest Health Care Data Breach in US for 2018. What you need to know:

What agency is involved? Employee Retirement System of Texas

What was the data breach? Personal health information data for other individuals was accessible when a person was logged into the agency portal

When did ERS receive notification? August 17 2018

How many people were impacted? nearly 1.25 million individuals

When did ERS report the incident?  reported to the U.S. Department of Health and Human Services as a “unauthorized access/disclosure” health data breach on October 15th

Gov…

5 Points. Apple Desired Information Privacy Law.

 

  • tech companies should de-identify customer data or not collect customer data
  • comprehensive federal law is necessary
    • why? tech companies that collect a lot of data are basically spies
  • people should have a right in their data, and a right to have that data minimized
  • consumers must be told what data is being collected & why
  • the data belongs to the users and users (consumers) should always have access to it

The gold standard law: GDPR in the EU

Ars Technica | Tim Cook Calls for Strong US…

Local TREND, Cities & Cybersecurity Insurance

Cities with mentioned cybersecurity insurance coverage:

  • Houston, 3  policies covering $10 Million with a $471,400 premium
  • Dallas
  • San Antonio via existing property policy
  • Ft. Worth,  $5 million cyberpolicy with a $99,570 premium
  • Atlanta 
  • Charlotte, N.C
  •  San Francisco has $50 million cyberpolicy for its public-health department

Cities actively looking at acquiring policies:

  • Boston
  • Nashville
  • Washington, D.C.
  • San Jose, CA

Self insured cities:

  • Seattle 

Wall Street Journal | More U.S.…

Local Procurement TREND. Local WiFi Brings Telehealth Opportunity

What steps did Chattanooga TN take to expand health care accessibility?

  • Chattanooga’s utilities provider,invested heavily in fiber-optic network infrastructure, delivering 1-gigabit-per-second connections
  • The city actively explored  delivering telehealth services to residents who subscribe to EPB broadband services
  • Docity, as Hypepotamus reports, is “a HIPAA-compliant telehealth platform that works by partnering with communities and internet service providers to add telehealth access to…

Health Care Data TREND. Governors Association Plan. 5 Steps.

  • 8 States collaborating with the Governors Association
    • Arkansas, Colorado, Delaware, Indiana, Iowa, Minnesota, Vermont and Washington
  • Establish best practices for health care data
  • Really long name:  “Harnessing the Power of Data to Achieve State Policy Goals: The Foundation for State Success in Improving Quality and Reducing Costs,”
  • 16 months 
  • Goals:
    • enable a fuller and better use of the countless health-care data streams they collect and maintain
    • legislative fixes
    • regulatory fixes

      • …

Lege Trend. An internet bill of rights? Hello all tech & telecom: this one is for you. Marketing and data limits.

Activists are promoting an Internet bIll of Rights, the kind of bill state legislatures love. What would it do?

  • Keeping your “browsing history” private
    • ​Except: fraud or potential crimes  
  • Full disclosure when being monitored, and the right to opt out
  • Preserving the privacy of your social media accounts.
  • Ownership of your personal, digital content
  • Notification of injurious data breaches
  • Fair play on social media platforms and/or internet providers
  • Protecting children on social media

    • …

4th Largest Data Breach Fine Lands in Texas Healthcare Community

The data breaches: Data Breaches in 2012 and 2013 at M.D. Anderson in Houston

The regulatory agency issuing the fine: U.S. Department of Health and Human Services via the Office of Civil Rights

The Fine: $4.3 million

Houston Chronicle  | MD Anderson to pay $4.3 million penalty for data breach

“MD Anderson hit with $4.3M privacy fine.” POLITICO 

 

Data Security Issues at the Conference of Western Attorneys General. 5 Topics. 2 Enacted Laws

Conference of Western Attorneys General will be discussing the following data security issues this year:

  • data privacy, cybersecurity, and digital piracy
  • breach notification
  • the European Union’s data protection regulations
  • national security & cybersecurity intersection
  • FinTech

Enacted Laws to be highlighted:

  • Arizona’s Regulatory Sandbox Program, signed into law by Governor Doug Ducey on March 22, 2018
  • Arizona House Bill 2154 into law on April 11, 2018 that prioritize data privacy in…

9 Proposed Health Care Cyber Security Policies from a Health Trade Association. Medical Supplier Liability is the Key.

Healthcare Supply Chain Association recommends these contract provisions for health care contracts:

  • Suppliers should warrant their compliance with FDA premarket and post market guidance relative to cybersecurity risks throughout their product’s lifecycle.
  • Products should be assessed and warranted to be free of known malicious code or other vulnerabilities at the time of delivery and/or implementation.
  • Suppliers should comply with all reasonable security practices required by the provider…