From HHS, a press release concerning a settlement arising from a breach previously covered on this blog: Two health care organizations have agreed to settle charges that they potentially violated the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules by failing to secure thousands of patients’ electronic protected health information…
Category: Health Data
ID: Larsen Dental Care notifies patients of stolen hard drive
From their website: Notice of Stolen External Hard Drive Larsen Dental Care is notifying the public of a recent incident which could result in possible exposure of certain types of information. On March 4, 2014, an external hard drive was stolen from an employee’s vehicle. We immediately reported the theft to the police, filed a police report, and…
Attorney: Flower Hospital files not adequately protected, lawsuit filed
More on the insider breach at Flowers Hospital previously noted on this blog: An attorney claims files containing personal information of patients were stolen from a place inside Flowers Hospital that had limited security and may have been accessible to many people including the public. “I don’t know how many were taken but we have…
Ca: Breach of privacy leaves patient's family distraught
Darren Taylor reports: A Sault Ste. Marie woman is angry, emotionally distraught and considering legal action over the fact her mother’s medical records were inappropriately accessed by an employee of Sault Area Hospital (SAH). The woman, who prefers to remain anonymous, has told SooToday.com a letter she received from Sonia Tassone, freedom of information and…
FTC told to disclose the data security standards it uses for data security enforcement actions
Jaikumar Vijayan reports: The Federal Trade Commission (FTC) can be compelled to disclose details of the data security standards it uses to pursue enforcement action against companies that suffer data breaches, the agency’s chief administrative law judge ruled Thursday. The decision came in response to a motion filed by LabMD, a now-defunct medical laboratory that…
FTC told to disclose the data security standards it uses for data security enforcement actions (updated)
Jaikumar Vijayan reports: The Federal Trade Commission (FTC) can be compelled to disclose details of the data security standards it uses to pursue enforcement action against companies that suffer data breaches, the agency’s chief administrative law judge ruled Thursday. The decision came in response to a motion filed by LabMD, a now-defunct medical laboratory that…