Much is being written about “remote work” – is it productive, will demand for it continue or be curtailed in a recession, is cybersecurity compromised, does it inhibit workplace culture, collaboration, etc. Lots of questions, few clear answers. Read more at our Workplace Privacy, Data Management & Security Report.
Data Breach
OCR Reminds Healthcare Providers and Their Business Associates – You Need an Incident Response Plan!
By Joseph J. Lazzarotti on
Posted in Healthcare
October is National Cybersecurity Awareness month, and the HHS Office for Civil Rights (OCR) has provided a timely reminder for HIPAA covered entities and business associates to have a written incident response plan! To learn why another policy is needed, what an incident response plan needs to include, and the reporting obligations, read the…
Healthcare Companies Seek to Manage Risk of Ransomware Attacks, According to Report
By Mary T. Costigan on
Posted in Healthcare
Healthcare companies continue to face increased risks of ransomware attacks on their operations. According to the recently released BD Cybersecurity Annual Report for 2021, such attacks are also increasingly sophisticated. Management can take important steps to minimize the risks of this form of cybercrime.
Ransomware
Ransomware is malware that encrypts files on a device,…
Is your e-PHI Secure? ONC and OCR Update HIPAA Security Risk Assessment Tool
By Valerie K. Jackson & Jason C. Gavejian on
Posted in Healthcare
October 2018 marks the 15th annual National Cyber Security Awareness Month. In honor of this occasion, the Office of the National Coordinator for Health Information Technology (ONC) and the HHS Office for Civil Rights (OCR) have jointly launched an updated HIPAA Security Risk Assessment (SRA) Tool to help covered entities and business associates comply…
“Your Own Cybersecurity Is Not Enough”: NJ Physician Practice Fined Over $400,000 for Data Breach Caused By Vendor
Posted on
New Jersey’s Attorney General Gurbir S. Grewal and the New Jersey Division of Consumer Affairs (“Division”) recently announced that a physician group affiliated with more than 50 South Jersey medical and surgical practices agreed to pay $417,816 and improve data security practices to settle allegations it failed to properly protect the privacy of more than…