Content by Howard Anderson

Is HHS a Breach Prevention Role Model?

Howard Anderson  •  August 26, 2013

To build credibility for its HIPAA enforcement efforts, the Department of Health and Human Services needs to ramp up its breach prevention efforts for the health insurance exchanges slated to begin operations Oct. 1.

Breach May Affect 4 Million Patients

Howard Anderson  •  August 26, 2013

The recent theft of four unencrypted computers from the Chicago-area Advocate Medical Group physicians practice may have exposed the personal data of more than 4 million patients.

HHS Seeks Speedy OK of Breach Rule

Howard Anderson  •  August 21, 2013

The Department of Health and Human Services is seeking speedy approval of its controversial proposal to require state health insurance exchanges to report data breaches within one hour of discovery.

$400,000 Penalty in HIPAA Case

Howard Anderson  •  May 22, 2013

A $400,000 federal penalty stemming from the investigation of a breach at a clinic owned by Idaho State University is the latest example of how even relatively small security incidents can trigger hefty sanctions.

Health Breach Tally: Cause for Optimism?

Howard Anderson  •  May 21, 2013

The latest statistics on major healthcare data breaches for 2013 are encouraging. But could we see a surge in breach reports after organizations begin using updated federal guidance about how to assess whether to report a breach?

Encryption: Four Essential Steps

Howard Anderson  •  May 15, 2013

Encryption is an important breach prevention tool. But to make the right decisions about how to apply encryption, healthcare organizations should take four specific steps, says security expert Feisal Nanji.

Pairing HIPAA and HITECH Compliance

Howard Anderson  •  April 29, 2013

The privacy and security provisions of the HIPAA Omnibus Rule and the HITECH Act EHR incentive program "dovetail together quite nicely," says federal privacy officer Joy Pritts, who offers compliance tips.

Mostashari's Vision for Secure Exchange

Howard Anderson  •  April 21, 2013

Farzad Mostashari, M.D., the national coordinator for health information technology, sees the exchange of health information as a way to improve care quality. But what's his vision for achieving truly secure data exchange?

Post-Breach Credit Monitoring Strategies

Howard Anderson  •  April 17, 2013

To retain their customers after a breach of sensitive information, organizations should take the extra step of calling those affected to offer free credit protection services, says security expert Brian Dean.

Survey: Encryption Momentum Building

Howard Anderson  •  April 10, 2013

To prevent data breaches, healthcare organizations are taking a number of critical steps, including ramping up their use of encryption, the second annual Healthcare Information Security Today Survey shows.

Making the Right Encryption Decisions

Howard Anderson  •  March 11, 2013

Healthcare organizations should use a four-step process to determine how best to apply encryption to minimize security risks, says security expert Feisal Nanji.

Farzad Mostashari: HIE Security Vital

Howard Anderson  •  March 8, 2013

Farzad Mostashari, M.D., the national coordinator for health information technology, wants to ramp up use of health information exchange to improve care quality. In an exclusive interview, he tackles privacy, security issues.

Risk Analysis: Avoiding Mistakes

Howard Anderson  •  March 7, 2013

Too many healthcare organizations conduct a HIPAA compliance assessment instead of a comprehensive risk analysis, says security specialist Dave Newell, who also points out other common mistakes.

Medical Devices: New Security Help

Howard Anderson  •  March 6, 2013

The HIPAA Omnibus Rule could play an important role in improving the security of medical devices that store patient data, says an official with the agency that enforces HIPAA. Find out what part the rule could play.

Joy Pritts on HIPAA, HITECH Compliance

Howard Anderson  •  March 6, 2013

Preparing for compliance with the privacy and security provisions of the HIPAA Omnibus Rule and the HITECH Act electronic health record incentive program go hand-in-hand, says federal privacy officer Joy Pritts.