Data Security in beyond traditional HIPPA medical information.

What medical information isn’t covered by HIPAA?genomic, lifestyle, financial, environmental and other information that wearbale devices and meters store

Is all the genomic and lifestyle data HIPAA worthy? Some of it probably should be covered

What do we need to know about geonomic and lifestyle data? We have to think about medical information outside the traditional format. 

Security Privacy & the Law | Cybersecurity 2017 – The Year In Preview: HIPAA Compliance

Business Trend. Health care and Tech. By 2018, 70% of health care will be tech driven. 7 Upcoming trends to be regulated

Apple is poised to enter health care in these 7 ways:

  • clinical trial partnership with Beth Israel Deaconess Hospital
  • precision medicine initiative with Scripps Translational Science Institute
  • partnered with IBM, Johnson & Johnson and Medtronic on cognitive computing platform called Watson Health Cloud
    • offering  tailored data analytics services to clinicians
  • bought a health care tech firm to advance interoperability by aggregating health data into a single digital patient…

4 Data Privacy Issues with Personal Fitness Tech. Ripe for Legislative Disclosures.

  • None of the companies will give users proper notice about changes in their terms
  • All of the wristbands collect more data than what is necessary to provide the service
  • None of the companies fully explain who they may share user data with
  • None of the companies state how long they will retain user data

Tech Crunch | Fitbit, Jawbone, Garmin and Mio fitness bands criticized for privacy failings

9 out of 10 Attorneys Agree. Not Good News for Health Care Business.

Health care attorneys agree that health care industry is at a higher risk for cyber crime. Here’s the data to support it:

  • 88% of ransomeware targets are health care entities
  • 84% of health care attorneys have been involved with clients who must dtermine issues like notification after a breach and adopting internal cyber security controls.

It must be bad if attorneys are agreeing with each other. 

Health Care Dive | Healthcare attorneys: Industry is at higher risk of cybercrime than others

SECURITY TREND. 2 Legislatures Changed When Data Breach Notifications are Required.

What change did the Nevada & Rhode Island Legislatures make? Changed the definition of personal information for data breaches

What was added to the definition of personal information?

  • medical identification number
  • a health insurance identification number
  • a user name, unique identifier or electronic mail address in combination with a password, access code or security question and answer that permits access to an online account

The difference between the 2 states? Rhode Island clarified…

New State Database. New Data Security. Read an Example of an Opioid Database.

The state creating an opioid database: California

What will be required of physicians before writing an opioid prescription?  Physicians will have to check a database of patient prescription histories before recommending addictive drug.

The legislation: Senate Bill 482 by Lara

Bryan College Station Eagle | The Latest: Senate backs health plan pricing bill

3 Reasons Hackers Target Health Care Data.

What type of healthcare data? Medical records and wearable data from heart monitors to implanted devices to fitbits

What is crucial about protecting health care data? It must be protected as the information moves from device to cloud storage to medical records end point at a physician or hospital

What makes health records more valuable? 

  • Unlike financial information, health data or changes to social security numbers are not quickly identifiable
  • The release of health records includes…

Largest Data Breach Settlement Against Health Care Provider.

The enforcing regulatory authority: U.S. Department of Health and Human Services

The data breach: 4 million patients personal data, financial information and electronic health information was exposed in 3 different incidents within 1 year. 

The Settlement amount: almost $6 million fine

Society for Human Resource Management | Health Care System to Pay Largest Data Breach Settlement Ever