Category Archives: health care data

Anatomy ot the Saguaro Cactus State & Local Cybersecurity Team. Membership + 3 Goals. Build Your Own State Team via Executive Order.

Arizona Governor Ducey by Executive Order created the Arizona Cybersecurity Team (ACT).

ACT team membership: experts from state, local, and federal government, the private sector, and higher education

ACT Goals:

  • enhancing cybersecurity workforce development and education
  • increasing public awareness on cybersecurity best practices
  •  advise and provide recommendations to the governor

The ACT primer cites 4 data breaches to support its mission:

  • Texas Comptroller Data Breach
  • Utah Health Care…

3 Points. U S Supreme Court. Health Care. Data Breach. What you Need to Know to be Informed.

The U.S. Supreme Court refused to grant review of CAREFIRST, INC., ET AL. V. ATTIAS, CHANTAL, ET AL which concerns:

  • whether to bring a data security lawsuit, is actual harm or the possibility of harm required?
  • the U.S. Supreme Court refusal left in place a standard  set by the U.S. Court of Appeals in the District of Columbiath that the possibility of harm is enough
  • the burning question- is it up to the courts to hold entities responsible for safe keeping data?

Fierce Healthcare | Supreme…

Equifax Fix TREND. The different route a Plains State Takes. 3 Key Points from the Bill.

Nebraska Legislature is considering LB 757  that will:

  • Applies data security requires people and businesses that owns, licenses or maintains data of Nebraska residents
  • Requires a data security standard of “reasonable security procedures and practices:
  • Ties the state legislation to  Gramm-Leach-Bliley Act or the Health Insurance Portability and Accountability Act of 1996 

How does this differ from other state approaches?

  • Other states have focused on free credit freezes and free credit report…

Red State Bill. Protecting Health Care Data in its Data Security Laws. Read the bill Text. Be informed.

Iowa’s Attorney General is supporting House Study Bill 526 (2018)  which adds the following health care information to the state’s data breach statute:

  • medical records, physical and mental health
    • including treatment & diagnosis
  • health insurance information

Any other requirements in House Study Bill 526 (2018) ?

  • 45 day notification requirement
  • 128-bit data encryption requirement
  • Notification to the state if written notification to more than 500 consumers in the state is required by a…

Lege TREND. 6 Standard Data Protocol For all State Data. Is the South leading the way in protecting personal information?

Mississippi is considering statewide standards for data that will:

  • how to long to store personal data
  • how to dispose of personal data
  • what personal data can be disposed of
  • how to store personal data
  • apply to all state entities that have personal data in their possession
  • what a state agency, Department of Archives and History, needs to store data in perpetuity

What prompted this legislative action by Mississippi?

  • A 2013 breach of health care data at the Univeristy of Mississippi
  • A…

Lege TREND. Bills Protecting Health Care Data in 2 States.

​Maryland HB 974 (2017)

  • Includes all HIPPA information in the defintion of personal information for state data breach law purposes
  • The bill also protects Biometric data, such as fingerprints, voice prints, and genetic prints

Delaware HB 180 (2017)

  • Includes medical history in the defintion of personal information
  • Requires “any person who conducts business in Delaware and maintains personal information must safeguard that information.”
  • Requires health insurance information to be protected
  • Es…

6 Data Security Policy Trends in 2018

  • Policies to improve data security workforce
  • Liability policy for businesses that utilize 3rd parties to manage and mitigate security incidents and challenges
  • Policies to encourage more women in data security workforce
  • Liability and notification requirements when comapnies utilize automated security security tools
  • Policies that Support Awareness and Training of existing workforce
  • Policies that ecourage businesses to maintain a base level of data security and notification requirements

Hea…

Business TREND. Health Care & Cybersecurity. By the Numbers.

A new report by the Center for Connected Medicine found that data security leads th eminds of health care businesses:

  • 9 of 10 health care companies will spend more on data security in 2018
  • 54% want to better identify threats
  • 50% want to better detect threats
  • 50% want to better protect against cyber threats
  • Less than 20% are focused on recover and respond technologies

Would health care providers pay cybercriminals?

  • 17% said yes
  • 17% were undecided
  • 22% didn’t know
  • 44% said no

Healt…

Regulatory Trend. Data Security in Medical Devices. Policymakers Requiring Disclosures. Coming to an health agency near you.

Who is making a request that medical device makers disclose component parts? House Committee on Energy and Commerce

On what agency are these policymakers making a request? Department of Health and Human Services

What is Department of Health and Human Services​ being asked to do?

  • Require medical device manfuacturers to dislcose:
    • bill of materials (BOM) for each piece of medical technology
    • describe the device’s components
    • describe software utilized
    • disclose any known risks…