Josh Cross reports: Files containing personal information for up to 8,000 individuals who visited a local health care center since 2005 were on a laptop that was stolen from a Hendersonville home in August. The computer, which was issued to a member of Hope Family Health’s finance department, was taken during a burglary Aug. 4…
Category: Uncategorized
HHS's Breach Tool: Test your knowledge, Part 2
If you haven’t taken my informal survey on the usefulness of HHS’s breach tool, please share your opinion here. And here’s another question about HHS’s breach tool. See if you know the answer. [yop_poll id=”2″]
The Hillingdon Hospitals NHS Foundation Trust signs undertaking after sensitive information lost in internal mail.
The Hillingdon Hospitals NHS Foundation Trust in Middlesex has signed an undertaking with the Information Commissioner’s Office following a data protection breach. According to the documentation, the ICO was provided with a report on July 5, 2012 which stated that the trust had been informed that a local newspaper was in possession of 4 two…
Does HIPAA Apply to Employers?
Ruth T. Griggs writes: The Health Insurance Portability and Accountability Act, better known as HIPAA, protects the privacy and security of patient health information. A common question from human resource managers has been what is the impact of HIPAA on an employer’s ability to collect employee health information for purposes of workers compensation, Family and…
UK: Cardiff & Vale University Health Board sign undertaking with ICO after loss of consulting psychiatrist's rucksack with sensitive documents
The Cardiff & Vale University Health Board have signed an undertaking with the Information Commissioner’s Office (ICO) following the loss of documents containing sensitive personal data by a consultant. The ICO was informed of the loss of the consulting psychiatrist’s bag on November 26, 2012. The bag, which was attached to a child seat on the…
A Business Associate Agreement Dilemma: To Indemnify or Not to Indemnify – Ten Considerations
Michael Kline writes: A party (Party) to a HIPAA Business Associate Agreement (BAA) or Subcontractor Agreement (SCA), whether a covered entity (CE), business associate (BA) or subcontractor (SC), may struggle with the question as to whether to agree to, demand, request, submit to, negotiate or permit, an indemnification provision (Provision) respecting the counterparty (Counterparty) under…