Health Care Data Breaches top 100 Million in 2015 + 3 more health care data breach stats

  1. A study funded by data security firm, ID Experts, found since 2010, health care data breaches up 125%
  2. In 2015,  100 million health care files stolen (Think: Anthem, Premera, Carefirst breaches)
  3. In 2014, the medical/healthcare sector accounted for the highest percentage of breaches at 42.5% according to the data security firm, IDT911
  4. This year’s largest health care data breach so far is the Premera medical data compromise, which may have exposed 11 million medical records

ABC News: The Medical Identity Theft Apocalypse? Fear the Walking Files

Lege Trend: State Data Security Laws Apply to Insurers. 8 states and counting.

8 states have specifically applied thier data breach notificagtion requirements to insurers. 

  • California
  • Connecticut
  • Maine
  • New Hampshire
  • Ohio
  • Rhode Island
  • Vermont
  • Washington
  • Wisconsin

The laws vary on these points, but all specifically apply to insurers:

  • who has to be notified
  • when notification has be given
  • what information triggers a notification
  • what powers an Attorney General has
  • which entities have to provide the notification

JD Supra | Baker Hostetler | State Data Breach Notification Requirements Specifically Applicable to Insurers

Data Security Coming to Presidential Campaigns Near You

A a security and privacy group of tech savvy types reviewed presidential candidate websites, and the results are not good if you like security and privacy.

17 of 23 candidates failed according to the The Online Trust Alliance, a nonprofit backed by businesses in the tech industry.

Why such a poor showing for data security this campaign season?

  • nonexistent or inadequate privacy policy disclosures
  • they reserve the right to liberally share or sell their donors and site visitors’ personally identifiable information

Some positive moves on data security by campaigns:

  • 70 percent using encrypted website

Which candidates fared the best?

  • Jeb Bush
  • Chris Christie
  • Rick Santorum
  • Scott Walker
  • Martin O’Malley
  • Lincoln Chafee

 The Hill  Most 2016 campaign websites receive failing privacy grades

Fortune:  Here’s why Donald Trump and Hillary Clinton’s campaign websites failed a security test

7 Cyber Security Polls

  • 64% of registered U.S. voters believe it is likely that a 2016 presidential campaign will be hacked
  • Who is most qualified to protect the US against a cyber attack?
    • 42%  of registered voters surveyed think Hillary Clinton
    • Donald Trump 24%
    • Scott Walker 18%
    • Jeb Bush 15%
  • Which party is better at protecting personal information? 38% say Democrats. 36% say Republicans. But, Millinials give Deomcrats 56%.
  • 56% of of registered voters would allow government searching their personal information if it meant protecting against terrorism
  • Which country has the best hackers? 51% say China; 30% say the U.S.; 13% Russia; 7% North Korea
  • 34% say Improved defense against hackers is the top cyber security issue
  • 47% of voters say they use encryption
  • 56% worry that their social security number is their personal data they worry most about

CSO Online

3 Recommendations for Health Care Data Security Legislation

The American Society of Clinical Oncology recently told Congress that coordination of care is key to fight cancer.

To support the coordination of care, they recommend the following when considering health care data security legislation:

  • Congress should pass legislation to remove barriers to interoperability, especially information blocking.
  • Policymakers should ensure that cancer patients, oncologists and other oncology providers do not bear the costs of achieving interoperable electronic health records and of companies refraining from information blocking.
  • Federal officials should work with ASCO and other stakeholders to ensure that healthcare providers have the information necessary to be prudent purchasers and users of health information technology systems.

Health IT Security: Will Information Blocking Ban Affect Health Data Security?

 

8 Reasons WHY the Software & Information Industry Association Opposes Student Data Security Reforms

The Software & Information Industry Association writing to U.S. Senators support protecting student data, but oppose proposed reforms. Here’s why:

  • Software & Information Industry Association members are “engaged in a continuous process to enhance student privacy and data security. “
  • They developed the Student Privacy Pledge 
  • We have strong protection framework of federal and state law
  • We have enforceable privacy policies
  • Binding contracts keep us honest
  •  S.1788 would “unnecessarily add requirements and restrictions that create conflicting definitions and obligations”
  • S 1788 would create “a regulatory environment impossible for school service providers to navigate” 
  • There should be parental choice

SIAA Letter to Senators Blumenthal and Daines on S 1788

6 Trends in State Data Breach Laws

  • Greater Enforcement Powers for State Attorneys General
  • Protecting More types of data = more reasons to notify consumers
  • Expanded liability for private companies that store state data
  • Requiring companies that have a data breach to offer, at their cost, mitigation services that protect data- think Life Lock etc…
  • Protecting Student Data
  • Requiring encryption for stored data
    • As an example, see: 
      • “The new Washington law goes even further as it identifies a minimum standard for encryption, and grants safe harbor only when the breach does not also provide access to the encryption key, or other capacity to decrypt the data.”​

State AG Monitor: States Seek Strengthened Data Breach Laws