DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

NM: Legislature to take another look at digital medical records

Posted on December 31, 2008October 24, 2024 by Dissent

Trip Jennings reports about legislation dealing with EMRs:

[…]

But with changes in how medicine is practiced, there are also unresolved questions, in particular as they relate to privacy, says Bob Mayer, the chief information officer at the New Mexico Department of Health.

And Mayer and others hope that state lawmakers will pass a law during the upcoming legislative session to plug what he says are gaps in privacy protection. It’s not an easy sell, as supporters found out in 2008 when they twice pushed for the bill but were denied.

“What we were trying to do is fill those gaps to protect the consumer,” says Sen.-elect Peter Wirth, D-Santa Fe, who sponsored a bill in the regular and special 2008 legislative sessions when he was in the House.

Most medical records fall under the federal Health Insurance Portability and Accountability Act, a Clinton-era law outlining a consumer’s privacy rights in regard to medical information. It establishes who does and does not have access to your medical records.

But as more and more records are digitized in New Mexico and across the country, there is a debate among professionals and policy makers whether HIPAA covers all the newly digitized information. For example, Mayer says, Microsoft is storing protected medical information, and Microsoft is not a covered entity under HIPPA.

“Right now we have electronic medical records in the state. We have nothing on the books to lay out how those things should be managed,” says Mayer. “What we and many other states have begun to do is look at building privacy protections into state laws.”

The 2008 versions of the bill would have extended to electronic records the privacy protections in the federal law that already apply to paper medical records. The bills also would have created an audit log to ensure that authorities could track how an inadvertent disclosure of a consumer’s medical records occurred, Wirth says.

[…]

Read more in the New Mexico Independent


Related:

  • Two U.K. teenagers appear in court over Transport of London cyber attack
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
  • Massachusetts hospitals Heywood, Athol say outage was a cybersecurity incident
  • Heritage Provider Network $49.99M Class Action Settlement
  • Integris Health Agrees to $30 Million Settlement Over 2023 Data Breach
Category: Health Data

Post navigation

← FL: Private Medical Records 'Found In Garbage'
Company faces privacy probe into health records found on Ottawa street →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Checkout.com Discloses Data Breach After Extortion Attempt
  • Washington Post hack exposes personal data of John Bolton, almost 10,000 others
  • Draft UK Cyber Security and Resilience Bill Enters UK Parliament
  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Once a Patient’s in Custody, ICE Can Be at Hospital Bedsides — But Detainees Have Rights
  • OpenAI fights order to turn over millions of ChatGPT conversations
  • Maryland Privacy Crackdown Raises Bar for Disclosure Compliance
  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.