All organizations involved in any type of health information exchange should be required to have digital certificates to authenticate their identities, a panel advising federal regulators on policy issues recommends.
There was good news and bad news in the past month about the official federal tally of major health information breaches. While only six new incidents were added in the past month, one of those cases affected more than 280,000 individuals.
The Department of Veterans Affairs has taken steps to help ensure thumb drives lacking encryption cannot be plugged into its computers. The move comes following the discovery of an unencrypted drive containing personal information on veterans.
The conventional wisdom that Congress won't enact significant IT security legislation this year hasn't deterred some Democratic lawmakers, including House Homeland Security Committee Chair Bennie Thompson, from introducing another cybersecurity bill.
A Florida hospital is notifying approximately 40,000 of its emergency room patients about a breach incident involving stolen paper records that it believes might have affected about 1,500 of those patients.
Hospitals and clinics need to take a methodical approach to privacy and security as they prepare to qualify for electronic health records incentive payments from Medicare and Medicaid under the HITECH Act, security adviser Phyllis Patrick says.
The American Medical Association has adopted a new policy offering guidelines on physician use of social media that calls for refraining from posting identifiable patient information online to protect privacy.