3 Points. Government Incentives for Healthcare to Protect Its Data.

1/2 of health care organizations say they are prepared for a data breach.

The American Medical Association proposes these data security incentives:

  • CMS to include among its improvement activities in the Quality Payment Program (QPP), a credit for practices who engage in good cybersecurity hygiene and protect sensitive information;
  • best practices and tools must be scalable & able to accommodate the needs of physicians of all sizes and practic areas; and
  • larger practices should share their…

2,000 TX HHSC Clients Data Exposed.

Data Breach at HHSC? No, a box of client records was left in a box unattended by a dumpster in Houston.

The personal information exposed included:

  • names
  • client numbers
  • birth dates
  • case numbers
  • phone numbers

The HHSC response:

  • 1 year of free credit monitoring to anyone affected
  • A review. of HHSC’s document destruction procedures

SC Media | 2,000 Texas HHSC clients health data compromised

HHSC | HIPAA Notice: Houston-area Accidental Loss of Client Information

Health Care Data Breach Loophole. Some breaches need not be reported. What you need to know.

Some say hospitals that get hit by a ransomware attack need not disclose the ransomware data breach.

The question- If data is held hostage/accessed but is not taken must that be disclosed?

The supporters for disclosure say: More mandatory reporting.This regulatory gap limits the health-care system’s ability to fight cybercriminals.

Who is counted among supporters of disclosure? Congressman Ted Lieu, a California Democrat who along with Congressmen Will Hurd, a Texas Republican

What do…

Cyber Security Factoring into Debt Rating for Cities, Counties & States.

Cyber security is becoming an element in analysis for bond markets.

Is this shift a result of a catalyst? Yes, the use of malware toward local governmental entities

Does this follow inthe footsteps of other entities disclosing cyber protections to investors? Yes, utilities and hospitals are starting to disclose any information to potential investors in bond documents about cyber risks or defenses

Reuters | U.S. muni market slowly starts paying heed to cyber risks

4 Future Data Security regulatory issues for Health Care.

The federal HEALTH CARE INDUSTRY CYBERSECURITY TASK FORCE released 27 recommendations in its June 2017 report, and set forth these 5 future regulatory issues for health care cybersecurity:

 

  • Develop a cohesive plan for implementing this report’s recommendations and develop appropriate metrics to measure data security implementation progress.

  • Conduct a risk analysis, similar to the National Infrastructure Protection Plan, with an overlay for health care cybersecurity and privacy.…

27 Recommendations. Health Care industry & Cybersecurity. New Federal Task Force Report. Precursor to State Laws. See the Future.

Create a cybersecurity leader role within HHS to align industry- facing efforts for health care cybersecurity. 

Establish a consistent, consensus-based health care-specific Cybersecurity Framework 

Require federal regulatory agencies to harmonize existing and future laws and regulations that affect health care industry cybersecurity. 

Identify scalable best practices for governance of cybersecurity across the health care industry. 

Explore potential impacts to the…

Government Trend. Business Trend. Economic Impacts of Data Breaches Controls in Health Care.

The GAO has issued a warning about the economic impact of data breaches & the economic boon of the Internet of Things, inter conencted devices. 

The economic impact as a result of a data breach is tempered by the economic benefits of health care adopting connected devices (IoT technology). The numbers:

  •  60% of healthcare organizations worldwide expect to adopt IoT technology by 2019
  • 73% of organizations that adopt IoT point to cost savings

 

Health Care Dive | GAO warns about IoT security,…

Which hospital type is at greatest risk to a data breach?

Teaching Hospitals. 

Johns Hopkins Carey Business School looked at data for data breeches at hospitals:

  •  1,798 data breaches hit hospitals from Oct. 21, 2009, to Dec. 31, 2016
  • 33 hospitals reported more than one breach — many of them teaching hospitals. 
  • Of the 141 acute care hospitals that reported breaches to HHS, 52 were major academic medical centers
  • In 2016, the overall number of electronic records that were compromised grew by 566% to more than 4 billion

Health Care Dive | Teaching…