{"id":12684,"date":"2016-06-04T07:42:08","date_gmt":"2013-06-04T14:42:08","guid":{"rendered":"http:\/\/www.accessrx.com\/blog\/?p=9677"},"modified":"2013-06-04T07:42:08","modified_gmt":"2013-06-04T14:42:08","slug":"5-places-your-medical-privacy-may-be-at-risk-and-how-to-protect-it-m0603","status":"publish","type":"post","link":"https:\/\/www.edrugstore.com\/blog\/current-health-news\/5-places-your-medical-privacy-may-be-at-risk-and-how-to-protect-it-m0603\/","title":{"rendered":"5 Places Your Medical Privacy May Be at Risk (And How to Protect It)"},"content":{"rendered":"

\"You
You might be surprised where thieves gain access to medical information.<\/figcaption><\/figure>Along with electronic health records and\u00a0the Health Insurance Portability and Accountability Act (HIPAA) have come hundreds of breaches of patient confidentiality. <\/p>\n

For example, a UCLA Health System breach<\/a> that resulted in an $865,000 settlement with federal regulators after employees illegally accessed celebrity medical records without authorization.<\/p>\n

Where are the “leaks” in health records about you? Here are 5 places your medical privacy could be at risk, and what you can do about it.<\/p>\n

1. On Healthcare Workers’ Mobile Devices<\/b><\/p>\n

The good news is that the number of major medical information breaches has fallen since 2010. However, theft accounts for over half of reported cases<\/a>, and many of those thefts were of mobile devices. Physical security of devices can typically be addressed in a straightforward manner, and simple awareness is an important step. Does your doctor’s office use tablets to collect and store information about you? If so, ask questions, and if you don’t get straight answers, consider finding a practice with better security. Physician practices need to be held accountable when it comes to actions that could result in loss of medical privacy.<\/p>\n

2. In the Cloud<\/b><\/p>\n

The term “big data” refers to tools and procedures that allow management of very large sets of data. Many big data processing operations are in the cloud, and big data is capable of taking many disparate elements and analyzing them to create remarkably accurate individual profiles. Corporations are also more brazen about simply asking for data that would have been unthinkable a generation ago. A Horizon Blue Cross client sued the insurer<\/a> after the company asked for all online data from their daughter’s social networking pages after a dispute over an insurance claim for the girl, who had anorexia.<\/p>\n

3. On Social Media Sites<\/b><\/p>\n

You wouldn’t think healthcare providers would discuss patients on social media sites, but it has happened many times. Several nurses working at Tri City Medical Center in California were disciplined<\/a> after allegedly posting patient information on Facebook. A worker at Providence Holy Cross Medical Center in California posted a photo of a woman’s medical record on Facebook that included her name and date of admission, as well as disparaging comments about her. Providence, who said the worker was provided by a staffing agency, assured the media that the individual would never work in a Providence facility again.<\/p>\n

4. In Your Doctor’s Unencrypted Medical Records<\/b><\/p>\n

Weak passwords allowed hackers to gain access<\/a> to the computer network of The Surgeons of Lake County in Illinois and steal Social Security numbers, credit card numbers, and medical information about patients. The hackers then encrypted the data so physicians couldn’t access it and demanded ransom in return for a password. The promises of cost savings and federal incentives have physician practices converting records into digital files, and sometimes they do so without having robust data security policies in place. In fact, HIPAA requires healthcare providers to perform risk analysis of data protection, but many healthcare facilities have been remarkably careless about doing so.<\/p>\n

5. In Your Own Hands<\/b><\/p>\n

Many people use smartphone apps to track blood sugar or blood pressure, or to help them quit smoking. Phones now contain personal medical information, yet medical apps aren’t covered by HIPAA, and the FDA limits oversight to apps that “could present a risk to patients if the apps don’t work as intended.” Because of this lack of oversight, a company making such apps can basically do whatever they want with the medical information<\/a> the app user enters. Some apps allow password protection, which is imperfect at best. Furthermore, many apps encourage users to share information via email with physicians, pharmacists and others. It’s up to you to choose whether or not to enter sensitive information into healthcare apps, because for the most part they are unregulated.<\/p>\n

Awareness is the first step to protecting your medical information. Don’t be afraid to ask questions of your physician’s practice. The more patients speak out about concerns, the more likely practices are to take them seriously, particularly as more healthcare providers have to pay fines for HIPAA violations due to data breaches. Don’t enter personal information into apps or online surveys unless you are comfortable with that data being shared, because it will be.<\/p>\n

When you purchase prescription drugs online, learn about the provider’s commitment to HIPAA compliance, as well as standard data security practices like Secure Socket Layer encryption. If you get vague or unsatisfactory answers, go elsewhere. At eDrugstore.com, we take customer medical, identity, and credit card information security very seriously. We are HIPAA compliant and use SSL technology for all transactions. Furthermore, we never sell, rent, or otherwise share your information with any third party. Your medical information is private and valuable, and in the age of electronic health records, you have to do your part to ensure the safety of this sensitive information.<\/p>\n

Photo Credits: Stuart Miles \/ freedigitalphotos.net<\/a>, Kittikun Atsawintarangkul \/ freedigitalphotos.net<\/a>, Suphakit73 \/ freedigitalphotos.net<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Along with electronic health records and\u00a0the Health Insurance Portability and Accountability Act (HIPAA) have come hundreds of breaches of patient confidentiality. For example, a UCLA Health System breach that resulted in an $865,000 settlement with federal regulators after employees illegally accessed celebrity medical records without authorization. Where are the “leaks” in health records about you? […]<\/p>\n","protected":false},"author":1,"featured_media":9720,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_autoblog_aioseo_focus_keyphrase":"","_autoblog_aioseo_title":"","_autoblog_aioseo_description":"","footnotes":""},"categories":[18],"tags":[472,449],"class_list":["post-12684","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-current-health-news","tag-medical-data","tag-medical-privacy"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t