For another informed perspective on the impact of the initial decision in FTC v. LabMD, I’d strongly encourage this site’s readers to read Gus Hurwitz’s thought-provoking analysis and commentary on TechPolicyDaily.com. Here’s a snippet: … Judge Chappell had none of the FTC’s argument. “The term ‘likely’,” he tells us, “does not mean that something is merely…
Category: Health Data
Ca: Hospital clerk fined $36,000 for selling patient records
Jacques Gallant has a follow-up to a case that I’ve been covering on this site since it was first disclosed: A former Rouge Valley hospital records clerk was fined $36,000 and given two years of probation on Monday for selling thousands of maternity patient records to RESP firms. Shaida Bandali, 62, pleaded guilty earlier this…
Wait, what??
In January 2015, Ronald D. Garrett-Roe, MD, a physician in Texas, notified HHS that 1,600 patients were affected by a hacking/IT incident involving a desktop computer. At the time, I could find no additional details on the incident, but now we have this somewhat puzzling summary of OCR’s investigation: Alleged hackers gained unauthorized access to one or…
Follow-up: Boston Baskin Cancer improved data security safeguards following breach
Remember the Boston Baskin Cancer Foundation breach involving the theft of a hard drive from an employee’s home? The breach affected almost 57,000 patients and employees. Here’s the summary of OCR’s investigation into the incident: On December 2, 2014, a Boston Baskin Cancer Foundation employee’s laptop computer and external hard drive were stolen. The external hard…
Oh, so THAT’s what happened to 160,000 Walgreens customers
Back in December, 2014, I noted that HHS had added an incident involving Walgreens: Walgreen Co. reported that 160,000 patients had PHI involved in an August 1st – November 6th breach involving paper records. I was unable to find any coverage of this, but this could be big, as Walgreen has had problems before with paper records, and…
Follow-up to Boyd Hospital breach
Remember the case in Illinois where Boyd Hospital had stored patient records in a building that was later sold as surplus? The hospital claimed it didn’t know the new owner was taking possession of the building, which is why the patient records were still in there when the new owner took possession of the premises….