The Health Data Conundrum

THERE’S quite a paradox when it comes to our health data. Most of us still cannot readily look at it, but there’s been an epidemic of cybercriminals and thieves hacking and stealing this most personal information.

Last year hundreds of breaches involving millions of health records were reported to the Department of Health and Human Services — with the hackings of the health insurers Anthem and Premera Blue Cross alone affecting some 90 million Americans. At least 10 hospitals and health care systems have had their patient data and information systems literally held for ransom. This month, the national medical lab Quest Diagnostics reported that information on 34,000 patients had been stolen. And these breaches are just the ones that have been disclosed.

Why is our private health information being stolen and trafficked by cybercriminals? For one, these records include information that makes them more valuable to hackers than almost any other type of data. Thieves can use this information to order medical equipment and drugs to resell and to fraudulently bill insurance companies, the costs of which are passed along to consumers.

HIPAA is 20 years old. What has it meant for healthcare?

HIPAA is 20 years old. What has it meant for healthcare?

birthday cake

On Aug. 21, 1996 — 20 years ago Sunday — President Bill Clinton signed the Health Insurance Portability and Accountability Act (HIPAA) into law.

Back when bipartisanship still occasionally happened in Washington, this law, championed by then-Sens. Edward M. Kennedy (D-Massachusetts) and Nancy Kassebaum (R-Kansas) has come become to be defined by the privacy and security regulations that it enabled. Those took effect in 2002 and 2003, respectively, after the Bush administration modified rules that the Clinton administration rushed to finish before Clinton left office in January 2001.

But, as the formal name implies, HIPAA initially was known for giving people the right to “portability” of health insurance when they change jobs by limiting the ability for insurers to exclude coverage of pre-existing conditions. The complex law also led to standards for healthcare administrative transactions and a national system of provider identity codes.

HIPAA did call for a national patient identifier as well, but in 1998, Congress voted to deny the Department of Health and Human Services funding to implement a patient ID. The program still has never been funded, and the private sector has since taken it upon itself to address the issue.

So what has HIPAA accomplished in 20 years? Where has it fallen short?

Health System Agrees to Largest HIPAA Fine Against a Single Entity

http://www.medicarecompliancewatch.com/news-analysis/health-system-agrees-largest-hipaa-fine-against-single-entity?spMailingID=9320994&spUserID=MTMyMzQyMDQxMTkyS0&spJobID=980622516&spReportId=OTgwNjIyNTE2S0

A Chicago-based healthcare system agreed to the largest HIPAA settlement fine against a single entity, HHS announced August 4. Advocate Health Care Network will pay $5.55 million to settle three separate HIPAA breaches reported in 2013. The breaches affected a total of 4 million individuals and the protected health information (PHI) included:

  • Clinical information
  • Credit card information
  • Demographic information
  • Health insurance information
  • Patient names, addresses, and dates of birth

John Oliver’s medical debt investigation raises questions about hospital business practices

http://www.fiercehealthfinance.com/story/john-olivers-medical-debt-investigation-raises-questions-about-hospital-bus/2016-06-06

Debt Buying Firms

One of the component’s of Oliver’s weekly show is an in-depth investigation into the social, political and commercial issues troubling America. His most recent installment was on the debt buying and collection business. It has a ridiculously low bar of entry–“Last Week Tonight” incorporated such a company online in Mississippi for only $50. In many states, there is no license required to collect debts.

Among the most disturbing tactics of these debt-buying firms is to sue individual debtors–even if they have already had their debt dismissed through bankruptcy or barred by the statute of limitations. Those companies bet the defendants won’t show up in court, allowing them to win by default. These debt-buying firms can then legally garnish the debtors’ wages to satisfy the judgment.

Companies want to Disclose Employee Health Data to Shareholders, and It’s a Bad Idea

https://hbr.org/2016/03/companies-want-to-disclose-employee-health-data-to-shareholders-and-its-a-bad-idea?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+harvardbusiness+%28HBR.org%29

mar16-04-98324660

Medical Device Vulnerabilities High on CIO’s List of Worries

http://www.healthleadersmedia.com/technology/medical-device-vulnerabilities-high-cios-list-worries

Cyber Security

FBI v Apple: Is medical records privacy at risk?

http://www.healthcaredive.com/news/fbi-v-apple-is-medical-records-privacy-at-risk/414908/

Reputation is everything: How 2 hospitals are weathering PR firestorms

http://www.healthcaredive.com/news/reputation-is-everything-how-2-hospitals-are-weathering-pr-firestorms/412982/

Why doctors still don’t text or email their patients

http://www.brookings.edu/blogs/techtank/posts/2015/11/09-outdated-doctor-patient-communication-yaraghi

Doctor Stephane Mercier, Head of the palliative care unit at Paul-Brousse Hospital, attends an interview with Reuters in his office at the hospital in Villejuif near Paris March 4, 2015. France's parliament will on Tuesday debate a bill allowing patients near the end of their lives to stop treatment and enter a "deep sleep" until they die, a move that critics say amounts to euthanasia in disguise. If passed, the legislation would give dying patients in the secular but majority Catholic country more power over their own treatment. Jean Leonetti, a centre-right lawmaker and doctor who authored the law, told Reuters the bill would allow patients with "hours or days to live" to request to be placed under general anaesthetic right through to the moment they die.

When Something Goes Wrong At The Hospital, Who Pays?

http://khn.org/news/when-something-goes-wrong-at-the-hospital-who-pays/

hospital bandage money 570

Click to access To%20Err%20is%20Human%201999%20%20report%20brief.pdf