Elizabeth Litten of Fox Rothschild writes: …. As described in prior posts on this blog, the Federal Trade Commission (FTC) has brought numerous enforcement actions against businesses based on its decision that the businesses’ data security practices were “deceptive” or “unfair” under Section 5 of the FTC Act. When I last checked the FTC’s website, there were 54…
Category: Health Data
Internet exposure breach results in $4.8 million HIPAA settlements
From HHS, a press release concerning a settlement arising from a breach previously covered on this blog: Two health care organizations have agreed to settle charges that they potentially violated the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules by failing to secure thousands of patients’ electronic protected health information…
ID: Larsen Dental Care notifies patients of stolen hard drive
From their website: Notice of Stolen External Hard Drive Larsen Dental Care is notifying the public of a recent incident which could result in possible exposure of certain types of information. On March 4, 2014, an external hard drive was stolen from an employee’s vehicle. We immediately reported the theft to the police, filed a police report, and…
Attorney: Flower Hospital files not adequately protected, lawsuit filed
More on the insider breach at Flowers Hospital previously noted on this blog: An attorney claims files containing personal information of patients were stolen from a place inside Flowers Hospital that had limited security and may have been accessible to many people including the public. “I don’t know how many were taken but we have…
Ca: Breach of privacy leaves patient's family distraught
Darren Taylor reports: A Sault Ste. Marie woman is angry, emotionally distraught and considering legal action over the fact her mother’s medical records were inappropriately accessed by an employee of Sault Area Hospital (SAH). The woman, who prefers to remain anonymous, has told SooToday.com a letter she received from Sonia Tassone, freedom of information and…
FTC told to disclose the data security standards it uses for data security enforcement actions
Jaikumar Vijayan reports: The Federal Trade Commission (FTC) can be compelled to disclose details of the data security standards it uses to pursue enforcement action against companies that suffer data breaches, the agency’s chief administrative law judge ruled Thursday. The decision came in response to a motion filed by LabMD, a now-defunct medical laboratory that…