The law has a long memory Rachel V. Rose, JD, MBA.

← Back to Blog

The law has a long memory Rachel V. Rose, JD, MBA. Demonstrated by a settlement between the department of Health and Human Services (HHS) Office for Civil Rights (OCR) and Montefiore Medical Center. Resulting from a member of hospital staff stealing and selling patient health information in 2013 and a potential failure in HIPAA Security rules.

While in ones opinion the OCR fine sends a message that data breaches will be treated serious within statute of limitations. The further action of the OCR in enforcing corrective actions and monitoring of compliance over the next 2 years, makes clear that the regulator will evaluate and assure compliance. At a time when cyber risks are a significant issue for healthcare providers, cyber risk management regulation is gaining pace and HIPAA compliance is front and center.

“Cyber-attacks that are carried out by insiders are one of the many ways that can lead to a security breach, leaving patients vulnerable,” said HHS Deputy Secretary Andrea Palm.

“Our priority is and always has been improving the quality of health care patients receive. Part of this health care is establishing a trust that medical records will not be exposed. HHS will continue to remind health care systems of their responsibility as providers, which is to have policies and procedures in place to keep patients’ medical information secure.”

Ted Dziekanowski Brian D. McCarthy

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation #hipaa

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7162398421176205312