The other day, I reported a horrific privacy breach that involved a veterans’ very sensitive mental health information being provided to a minister. The breach seemed politically motivated as the veteran had been critical of the government. Such breaches can have a very chilling effect. Michael Staples reports: Revelations that confidential medical and financial information…
Category: Health Data
Groups urge Congress to exempt them from data breach bill
Eric Chabrow reports: Witnesses testifying Wednesday on a data breach bill called on senators to exempt industries from notifying individuals whose personal information is exposed if other laws require such alerts. Melissa Bianchi, a lawyer representing the American Hospital Association, told the Senate Commerce, Science and Technology Consumer Protection, Product Safety and Insurance Subcommittee, that…
Stolen Ault Chiropractic Center computers contained patient info
Ault Chiropractic Center in Indiana has notified HHS that computer theft on September 15th affected the PHI of 2,000 patients. There is no notice on their web site as of the time of this posting so I don’t know precisely what types of information were on the stolen and whether there was any encryption or…
Data Breach Investigation | Constitutionality | Arbitrary, Capricious?
Benjamin Wright is an attorney who teaches e-discovery, data security and cyber investigations law at the SANS Institute. In commenting on the recent matter of Lucile Salter Packard Hospital being fined for not notifying patients within 5 days of confirming that PHI were on a stolen computer, Wright states: Yet I will say that it…
UK: IT manager at Hull PCT pleads guilty in snooping charges
As a follow-up to a case reported on this blog previously: Dale Trever, 22, a data quality manager at Hull Primary Care Trust, has pleaded guilty to snooping through patients’ medical records over 400 times. Most of them were the records of family members, friends, and colleagues. Anh Nguyen reports in Computerworld (UK): At Hull…
Update/Pointer: East and North Hertfordshire NHS Trust hospital identified
Lister Hospital was the hospital involved in the recent East and North Hertfordshire NHS Trust incident where a junior doctor left a flash drive with unencrypted patient information on a train. More here.