Douglas County Health & Human Services notifies patients that former employee accessed their records inappropriately

Alex Evans reports: Unauthorized access of HIPAA-protected information by county employee, largely flies under the radar. Six-months after the Douglas County Department of Health and Human Services determined an employee had accessed protected personal… Continue reading Douglas County Health & Human Services notifies patients that former employee accessed their records inappropriately

CA: Ontario Provincial Police charge three former hospital employees PHIPA violations of patient privacy breaches

Toula Mazloum reports: Three former hospital employees have been charged following investigations into unrelated alleged breach of patient privacy incidents that took place over the course of last year in different parts of the province, according to t… Continue reading CA: Ontario Provincial Police charge three former hospital employees PHIPA violations of patient privacy breaches

UK: Manchester employee handed suspended prison sentence for illegally accessing personal information

A motor insurance worker who unlawfully accessed personal information has been handed a suspended prison sentence after an investigation by the Information Commissioner’s Office. Rizwan Manjra, 44, from Bolton, led a team dealing with accident claims f… Continue reading UK: Manchester employee handed suspended prison sentence for illegally accessing personal information

In: Former employees booked for stealing company data and sharing with competitor

Your insider threat reminder comes from Mumbai this morning. Vinay Dalvi reports that Mumbai police filed an FIR against two ex-employees of Baccarose Perfume and Beauty Products Private Limited in Worli for allegedly stealing the firm’s confiden… Continue reading In: Former employees booked for stealing company data and sharing with competitor

Veterans Affairs’ Nurse Charged With Unlawfully Accessing Patient Health Information

Here’s today’s reminder of the insider threat. It’s a shame they don’t explain how the employee was able to access the patient’s information or why it was accessed. From the U.S.A.O. of the Western District of Michigan: GR… Continue reading Veterans Affairs’ Nurse Charged With Unlawfully Accessing Patient Health Information

Failure to terminate access can be costly. Very costly.

Earlier today, DataBreaches posted an HHS OCR announcement of a settlement with a HIPAA covered entity. A former contractor had accessed its electronic medical record system on three occasions without authorization to retrieve PHI for use in potential … Continue reading Failure to terminate access can be costly. Very costly.

HHS Office for Civil Rights Imposes a $1.19 Million Penalty Against Gulf Coast Pain Consultants for HIPAA Security Rule Violations

In April 2019, DataBreaches reported that Gulf Coast Pain Consultants, LLC d/b/a Clearway Pain Solutions Institute had recently notified patients after discovering on February 20 that their EMR system had been accessed by a third party without authoriz… Continue reading HHS Office for Civil Rights Imposes a $1.19 Million Penalty Against Gulf Coast Pain Consultants for HIPAA Security Rule Violations

Information and Privacy Commissioner of Alberta Publishes 2023-24 Annual Report

November 27 EDMONTON – The 2023-2024 Annual Report of the Office of the Information and Privacy Commissioner (OIPC) of Alberta was tabled today by the Speaker of the Alberta Legislative Assembly and has now been published online by the OIPC. “The 2023-… Continue reading Information and Privacy Commissioner of Alberta Publishes 2023-24 Annual Report