by Senator Howie C. Morales (D-Silver City) and Senate President Pro Tempore Mary Kay Papen (D-Las Cruces): …. If state law provides greater privacy protection than federal law, state law controls. New Mexico’s Children’s Mental Health and Developmental Disabilities Act places limitations on the disclosure, without consent, of behavioral health information that could be…
Category: Health Data
Patients Worried About Compromised Records At AnMed
Oh my. Here’s an insider breach from earlier this year that I seem to have missed. WSPA had reported: Some patients of AnMed Health are worried their information is in the wrong hands. Hospital officials would not specify how many people received a letter which states someone accessed medical records without a legitimate reason. AnMed…
Patient mistakenly receives another's medical records
HIPAA breaches happen, but what should an entity do when the recipient of accidentally disclosed PHI refuses to return the other patient’s record(s)? Here’s another case in Kansas.
KY: Woman indicted for identity theft, stealing patient information to obtain loans
The Messenger-Inquirer in Kentucky reports that an Owensboro woman employed in a medical office was indicted by a federal grand jury this week on charges of using patient information to obtain loans. It’s one of those all-too-rare criminal HIPAA prosecutions: Ilene W. Bullington of the 200 block of Wilder Drive was indicted Wednesday. Bullington was…
WI: Flash drive with personal information of thousands of City of Milwaukee employees stolen from contractor’s car
Dan Walker reports: A flash drive containing the personal information of thousands of City of Milwaukee workers was stolen along with the car of an employee of a health care firm that contracts with the city. The employee worked for Dynacare Laboratories, a contractor used by Froedtert Health Workforce Health in connection with the city’s…
And yet 9 more breaches added to HHS's breach tool (Update2)
HHS added 9 more breach reports to its public breach tool yesterday. Here’s a recap of the ones we already knew about: The UnityPoint Health breach was added to the list, although the third party company that provided the employee to UnityPoint was not disclosed in their report. In a statement sent to PHIprivacy.net today,…