HHS cracks down: provider to pay $100,000 in HIPAA penalties over lost laptops

Something to think about when using confidential data with patient records, better make sure it is encrypted for sure. Also, many network administrators have also disallowed the use of portable USB drives on company computers as well. If there are certain individuals that need this access, it can be done through group policy on Windows and thus tracking software can also keep track of such actions taking place as well.

With today’s situation with data breaches, you can’t be too careful. I am still somewhat surprised when I do see healthcare facilities still allowing free use of USB drives from PCs. BD

WASHINGTON - The Department of Health and Human Services has levied a $100,000 fine on Seattle-based Providence Health and Services for alleged violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules. The violation, involving unprotected backup tapes, optical disks and laptops three years ago, compromised the protected health information of more than 386,000 patients, HHS officials said.