{"id":316,"date":"2015-11-15T21:41:00","date_gmt":"2015-11-15T21:41:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2015\/11\/15\/regulatory-trend-agency-gives-3rd-party-contractor-data-oops-3rd-party-health-contractors-beware-3rd-parties-pay-costs-of-data-exposure\/"},"modified":"2015-11-15T21:41:00","modified_gmt":"2015-11-15T21:41:00","slug":"regulatory-trend-agency-gives-3rd-party-contractor-data-oops-3rd-party-health-contractors-beware-3rd-parties-pay-costs-of-data-exposure","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/regulatory-trend-agency-gives-3rd-party-contractor-data-oops-3rd-party-health-contractors-beware-3rd-parties-pay-costs-of-data-exposure\/","title":{"rendered":"Regulatory Trend: Agency Gives 3rd Party Contractor Data. Oops. 3rd Party Health Contractors Beware. 3rd parties Pay Costs of Data Exposure."},"content":{"rendered":"<p>The Illinois Department of Insurance accidentally led to the posting of\u00a0Social Secrity Numbers of health records online.\u00a0<\/p>\n<p><strong>How did a 3rd party get caught in a date release of health records?<\/strong>\u00a0The agency sent records, including social security numbers, to Blue Cross Blue Shield which Blue Cross Blue Shield posted online.\u00a0<\/p>\n<p><strong>What happened to the 3rd party?<\/strong>\u00a0The Department of Insurance took immediate corrective measures against Blue\u00a0Cross Blue Shield<\/p>\n<p><strong>What is the 3rd party&#8217;s responsibility?<\/strong>\u00a0Providing notice to affected persons, whose health records were identifiable by social security number. Potentially also required data protection services paid for by the 3rd party for all affected individuals.<\/p>\n<p><strong>lesson:\u00a0<\/strong>\u00a03rd party contracts should verify the information received from a state agency complies with all data security laws or the 3rd party maybear the cost of repairing the data breach.<\/p>\n<p>\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Illinois Department of Insurance accidentally led to the posting of\u00a0Social Secrity Numbers of health records online.\u00a0<\/p>\n<p><strong>How did a 3rd party get caught in a date release of health records?<\/strong>\u00a0The agency sent records, including social security numbers, to Blue Cross Blue Shield which Blue Cross Blue Shield posted online.\u00a0<\/p>\n<p><strong>What happened to the 3rd party?<\/strong>\u00a0The Department of Insurance took immediate corrective measures against Blue\u00a0Cross Blue Shield<\/p>\n<p><strong>What is the 3rd party&#8217;s&#8230;<\/strong><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,15,2,13,3,18,28],"tags":[],"class_list":["post-316","post","type-post","status-publish","format-standard","hentry","category-contracting-procurement","category-data-breach-contract","category-data-privacy","category-health-care-data","category-legislative-trend","category-regulatory-enforcement","category-regulatory-trend","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/316","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=316"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/316\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=316"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=316"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=316"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}