INTERIM. How 1 State Protects Health Care Data. 3 Key Points.

In 2015, ​New Jersey expanded its data breach laws to apply to include these health care information holders that service New Jersey patients:

  •  health insurance companies
  • health service corporations
  • hospital service corporations
  • medical service corporations
  • health maintenance organizations 

New Jersey also adopted new encryption standards that:

  • Encrypt confidential patient information or secure personal information
  • Utilize any method of technology rendering the information unreadable, undecipherable, or otherwise unusable by an unauthorized person

What personal information must be protected by encryption?

A first name, or first initial and last name linked with at least one of the following:

(1) Social Security number

(2) driver’s license number or other state identification card number

(3) address, or

(4) identifiable health information

 

New Jersey law Examiner | Consumer protection for healthcare data breaches in New Jersey

FBI Advice. Ransomeware Data Breach Attack.

The FBI advice for ransomeware attacks, which hold a businesses data hostage for a ransom:

DO NOT PAY THE RANSOM.

Refresh my memory, what are some of these ransomeware attacks? Several hospitals in California have had their systems frozen by ransomeware, forcing a move to manual paper hospital administration. The ransoms have been as small as $8,000.

WallStreet Journal | CIO Journal | FBI Cyber Division Chief Advises Companies Not to Pay Ransom for Release of Data

Lege TREND. Health Care Data Breach Law Moving in West. 5 Keys for your Healthcare Clients. Give them the bill before it comes to Texas.

Which state is considering new health care data breach laws? California

What health companies are the targets of new data security laws? wearable devices and consumer-facing apps  that track health data like steps taken, heart rate, etc…

Read the bill: California Assembly Bill 2688

The bill’s highlights:

  • require customers’ permission—via an “opt-in” request
  • Without an opt-in,  personally identifiable information cannot be shared with advertisers, health plans, data resellers
  • Prohibit an employer from discriminating against a worker based on findings from that employee’s health-tracker

Business’ concerns: Support privacy, concerned about overreach by government

Privacy Advocate concerns: Seek to require the devices to comply with California’s Confidentiality of Medical Information Act.

The Recorder | Lawmakers Sweat Details of Consumer Health Privacy

 

TREND. State Attorney General Announces Increase in Data Breach Notifications. Get your Business Clients Up to Speed Fast

Which Attorney General announced a 40% increase in data breach notifications? New York Attorney General Eric T. Schneiderman

Why does the state A.G. track data breach notifications? In NY, businesses must notify the A.G. of a data breach and the A.G. assists in reaching consumers

Has the state improved efficiency for businesses reporting data breaches? Yes, the state moved to an electronic, web-based reporting system

Hudson Valley News Network | A.G. Announces Record Data Breach Notifications

Wall Street Journal | Data Breaches Rise While Companies Struggle With Detection

INTERIM. LegeTrend: State Moves to Cloud Computing. Data Security. New Procurement Opportunities.

Your informed intel:

Which state is making a move to cloud computing that is triggering data security issues and new procurement opportunities? Arizona

What procurement opportunities does the move trigger? 

  • Opportunities for cloud based computing storage
  • Opportunities for data security firms

Which data security standards will be required? All new procurement contracts and state data centers will have to meet standards contained in:

  •  Health Insurance Portability and Accountability Act standards

  • the Family Educational Rights and Privacy Act guidelines

  • the FBI’s Criminal Justice Information Services strictures

State Scoop: Arizona lawmakers advance bill to spur statewide cloud migration

 

3rd Party Tax Collectors. 2 Data Security Issues.

Why is there a data security issue with 3rd party tax collectors? 3rd party tax collectors receive taxpayer information from taxing jurisdictions

Why is does this raise data security risks? data theft is on the rise & businesses aren’t keeping up with data security protocols to protect taxpayer information

Accounting Today | Saying No to Outside Agencies in Tax Collections

Government Reviews Health Care Contractors Data Security. Intel to Inform you.

An Office of Inspector General, Security Concerns, and health care contractors– Sound like a familiar mix?

Which health care contractors is the HHS OIG looking into? Medicare administrative contractors

What is the data security concern that is raised? the number of health care data gaps is INCREASING

Healthcare Dive | OIG report: More data security gaps at Medicare administrative contractors