Content by Howard Anderson

$400,000 Penalty in HIPAA Case

Howard Anderson  •  May 22, 2013

A $400,000 federal penalty stemming from the investigation of a breach at a clinic owned by Idaho State University is the latest example of how even relatively small security incidents can trigger hefty sanctions.

Health Breach Tally: Cause for Optimism?

Howard Anderson  •  May 21, 2013

The latest statistics on major healthcare data breaches for 2013 are encouraging. But could we see a surge in breach reports after organizations begin using updated federal guidance about how to assess whether to report a breach?

Post-Breach Credit Monitoring Strategies

Howard Anderson  •  April 17, 2013

To retain their customers after a breach of sensitive information, organizations should take the extra step of calling those affected to offer free credit protection services, says security expert Brian Dean.

Medical Devices: New Security Help

Howard Anderson  •  March 6, 2013

The HIPAA Omnibus Rule could play an important role in improving the security of medical devices that store patient data, says an official with the agency that enforces HIPAA. Find out what part the rule could play.

Assessing Whether to Report a Breach

Howard Anderson  •  March 4, 2013

Consumer advocate Deven McGraw describes how a new federal rule spells out four factors that must be weighed in a risk assessment to determine if a health data breach must be reported.

The Security Highlight of HIPAA Omnibus

Howard Anderson  •  March 1, 2013

The HIPAA Omnibus Rule stresses the need for business associates to adequately safeguard patient information. What are the implications? Here's what a federal privacy officer and a consumer advocate have to say.

HIPAA Omnibus: A Compliance Plan

Howard Anderson  •  February 27, 2013

How is the six-hospital Barnabas Health delivery system tackling the challenge of complying with the new HIPAA Omnibus rule? Hussein Syed, director of IT security, explains.

CISOs: Building Credibility

Howard Anderson  •  February 26, 2013

CISOs looking for a way to build credibility with senior executives - and win funding for important projects - need to drop the "just say no" approach and build a reputation as a team player, says security professor Ray Davidson.

NASA Encrypting Laptops After Breach

Howard Anderson  •  November 15, 2012

NASA is ramping up efforts to encrypt all laptops following the recent theft of one containing sensitive personal information. Find out more about the U.S. space agency's encryption plans.

Participate in Our Annual Survey

Howard Anderson  •  October 5, 2012

By participating in our annual Healthcare Information Security Today survey, you'll help us to track breach prevention trends and information security priorities at healthcare organizations of all sizes.

HITECH Stage 2 Rules Unveiled

Howard Anderson  •  August 23, 2012

The two final rules for Stage 2 of the HITECH Act's electronic health record incentive program were unveiled Aug. 23. Find out what the rules have to say about encryption.

Third-Party Breaches on the Rise

Howard Anderson  •  August 14, 2012

U.S. information breaches involving third-party business associates doubled in the first half of the year, says Karen Barney of the Identity Theft Resource Center. Find out the other results of the group's breach study.

Accretive Health Settles Minn. Lawsuit

Howard Anderson  •  July 31, 2012

Accretive Health, a Chicago-based billing and collections company, has agreed to pay $2.5 million to settle a Minnesota lawsuit filed following a data breach. Find out all the details.

HITRUST Offers Cyber Threat Updates

Howard Anderson  •  July 25, 2012

The Health Information Trust Alliance has unveiled a Cyber Threat Analysis Service, offering updates on the latest healthcare security threats and a variety of research reports.

Breached Organizations Are Tight-Lipped

Howard Anderson  •  July 17, 2012

Too many organizations that experience a data breach fail to reveal information on the cause of the incident so that consumers can take appropriate action, one consumer advocacy group contends.