Content by Marianne Kolbasuk McGee

Prepping for 2015's HIPAA Audits

Marianne Kolbasuk McGee  •  December 29, 2014

As federal regulators plan to resume random HIPAA compliance audits in 2015, organizations should prepare by conducting their own mock audits, advise attorneys Alisa Chestler and Donna Fraiche.

Boston Children's Fined for Breach

Marianne Kolbasuk McGee  •  December 22, 2014

For the second time in less than a month, the Massachusetts attorney general has fined a hospital for a data breach - this time Boston Children's Hospital. Learn why experts expect to see more state and federal breach sanctions in 2015.

Biggest Health Data Breaches in 2014

Marianne Kolbasuk McGee  •  December 22, 2014

The five biggest 2014 health data breaches listed on the federal tally so far demonstrate that security incidents are stemming from a variety of causes, from hacker attacks to missteps by business associates.

OCR, ONC Get Flat Fiscal 2015 Budgets

Marianne Kolbasuk McGee  •  December 19, 2014

The fiscal 2015 federal budget provides two agencies responsible for health information security and privacy activities with flat funding. Find out what plans are on hold, and why Congress wants greater scrutiny of EHR system interoperability.

Small Hospital Target of Extortion Scheme

Marianne Kolbasuk McGee  •  December 17, 2014

A tiny Illinois hospital was the target of an extortion scheme in which an anonymous e-mailer threatened to make public patients' information. The incident shows why providers of all sizes need to be prepared to deal with emerging threats.

3 Health InfoSec Lessons from Sony Hack

Marianne Kolbasuk McGee  •  December 17, 2014

The healthcare sector can learn three important lessons from the recent hack attack on Sony Pictures Entertainment, which compromised employee health data, says breach resolution expert Michael Bruemmer of Experian.

Prison Term for ID Theft at Hospital

Marianne Kolbasuk McGee  •  December 16, 2014

The sentencing of a former Alabama hospital worker to two years in prison for his role in an ID theft incident that resulted in tax refund fraud, and a related class action lawsuit, illustrate that insider threats are a major ongoing challenge, two privacy experts say.

Threat Info Sharing: Time for Leadership

Marianne Kolbasuk McGee  •  December 15, 2014

HHS is acknowledging the need to ensure healthcare organizations of all sizes have timely access to the latest cyberthreat intelligence. But the agency needs to take prompt, bold leadership action on this issue.

Healthcare InfoSec Survey Launched

Marianne Kolbasuk McGee  •  December 12, 2014

HealthcareInfoSecurity launches its fourth annual survey to measure progress toward ensuring the privacy and security of healthcare information as more records are digitized and shared, and as more cyberthreats emerge.

Analysis: HHS' Threat Info Sharing Plan

Marianne Kolbasuk McGee  •  December 12, 2014

Learn why the Department of Health and Human Services is reassessing how its many internal agencies, and the entire healthcare sector, can boost cyberthreat intelligence sharing and analysis to minimize risks.

AirWatch Chairman on Mobile Security

Marianne Kolbasuk McGee  •  December 12, 2014

Financial transactions on smart phones require layered security that helps outsmart cyberthieves, says Alan Dabbiere, chairman of AirWatch, who describes today's mobile challenges.

FTC Settles Deceptive Patient Portal Case

Marianne Kolbasuk McGee  •  December 11, 2014

An FTC settlement with a medical billing company shines a spotlight on deceptive practices related to the collection and disclosure of patient's personal health information. What can healthcare providers learn from the settlement?

$150K HIPAA Fine for Unpatched Software

Marianne Kolbasuk McGee  •  December 9, 2014

Federal regulators are sending a powerful message about the importance of applying software patches by slapping an Alaska mental health services providers with a $150,000 HIPAA sanction. Learn what's included in the corrective action plan.

Federal Strategic Health IT Plan Issued

Marianne Kolbasuk McGee  •  December 9, 2014

Federal regulators have issued a strategic health IT plan that includes five goals, including advancing secure health information exchange. Could more EHR certification requirements and another information sharing and analysis center be in the works?

Radiologist Arrested in Breach Case

Marianne Kolbasuk McGee  •  December 8, 2014

A New York radiologist faces three misdemeanor charges for allegedly stealing health information of 97,000 patients. Find out why a district attorney is advocating a change in state law to permit tougher charges in such cases.