Security - CIOInsight
Home arrow Security arrow Electronic Medical Records: No Vaccine Against Breaches

Security Slideshow:
Electronic Medical Records: No Vaccine Against Breaches

By Bob Violino on 2010-11-15


In case you need another reason to avoid the hospital, here it is: Data about you and your treatment might not be adequately protected, and your privacy could be at risk. According to a research report conducted by Ponemon Institute (a privacy and information management research firm) and sponsored by ID Experts (a security products provider), many healthcare facilities are not adequately protecting patient data. In addition, the healthcare industry is lagging in implementing the standards set by the HITECH Act of 2009, which widen the scope of privacy and security protections under HIPAA to provide strong safeguards for patient data. And the insufficient security is proving costly to the healthcare industry, as hospitals are collectively losing an estimated $6 billion a year due to data breaches, according to the study. Because many breaches go undetected, the losses might be considerably higher than that, according to Ponemon. The research shows that protecting patient data is a low priority for hospitals, and many healthcare organizations have little confidence in their ability to secure patient records. This puts individuals at great risk for medical identity theft, financial theft and embarrassment of exposure of private information, the report says.

LATEST STORIES

BLOGS
 
  • of
Multiple breaches29% of respondents say their organizations have had more than five data breaches in the past two years.

2.4The average number of data breach incidents per healthcare facility over the past two years? 2.4

61%61% of data breach incidents involve fewer than 100 records.

Lack of notification38% of respondents say no patients were notified of data breaches.

Cause of Breaches (% respondents)Unintentional employee action (52%)Lost/ stolen computing devices (41%)Third-party problems (34%) Technical system glitches (31%).

47%47% of respondents say employee detection is the primary way data breaches are discovered.

Confidence CrisisRespondents say they have little (35%) or no (23%) confidence that their organization has the ability to detect all patient data loss or theft. Only 11% say they are very confident.

13%Only 13% of respondents say their ability to resolve a data breach incident is immediate or within one week; 37% say it took six months or longer to resolve the incident.

Staff shortfall28% of respondents say they have no staff dedicated to managing data protection activities. Thirty-five percent say they have fewer than two dedicated staff members.

Ad hoc processesThe process for preventing and detecting data breach incidents is “ad hoc,” according to 35 percent of respondents.

Technology and policiesOnly 16% of respondents say their data breach protection process relies on security technologies; 23% say it relies on policies and procedures.

Who’s in charge? (% respondents) Compliance department (34%)IT (12%)IT security team (11%)No single person/department (23%)

Why breaches occur? (% respondents) Inadequate budget for security and privacy (51%)Lack of trained staff and end users (49%).

56 percent56 percent of respondents say they need help to assess their risks and procedures to make sure they are compliant with security standards.

Big losses23% of respondents say data breaches over the past two years cost their organization between $1 million and $10 million.

What's the harm to patients? (% respondents)Personal health facts will be disclosed (61%)Increased risk of financial identity theft (56%)Increased risk of medical identity theft (45%)

  • More slideshows

FEATURED SPONSORED VIDEOS

FEATURED SPONSORED ARTICLES

Erasable E-Paper Saves Trees, Cuts Costs

Why Smart Companies Should Adopt the Lessons of Gaming

Interest in Mobile WiFi Hotspots Fuels New Solutions

A Closer Look at Public Cloud Security

View More Articles

  Brought to You By
Click Here



 

Advertisement

Sponsored Links
  • Try Windows Azure free for 90 days

  • Introducing the world's first family of systems with integrated expertise

  • FREE Securing Smartphones & Tablets for Dummies Book from Sophos
  • 77% of the Fortune 500 Manage Content Securely with Box.
  • Leverage your virtual computing environment with Dell.
  • Build an IT Infrastructure That Delivers the Future
  • 5 New Technologies That Will Change Enterprise ITAdvertisement
  • eWEEK Quick LInks

     
    Close this advertisement