How do business partner data breaches affect your practice?

How do business partner data breaches affect your practice?

(HealthDay)—Data breaches affecting health care systems or their partners need to be addressed quickly, according to an article published in Medical Economics.

Noting that every successful breach against a care system constitutes a Health Insurance Portability and Accountability Act violation, which must be reported, the authors discuss the importance of keeping an eye on partners that might be compromised.

According to the article, knowing about a business 's data breach early is important. The Department of Health and Human Services' (HHS') breach portal should be reviewed at least once a month as a precaution. Notifications about attacks that are trending or particularly dangerous can be received by joining additional e-mail lists. To protect a practice during an attack, care should be taken to prioritize business associate agreements (BAAs) with every vendor; in the case that a practice does not have a BAA with a vendor that handles protected health information, one should be signed immediately or the vendor should be replaced. Use of more proactive, collaborative policies can help patch attacks to address threats. Breaches should be reported as soon as possible; compliance officers or the HHS can provide detailed instructions on what to report and how.

"Comprehensive security standards and close collaboration with business partners can be a formidable barrier, but the most essential protective measures against ransomware and other are immediate notification and action," the authors write.


Explore further

Hospitals put your data at risk, study finds

More information: Abstract/Full Text
Journal information: Medical Economics

Copyright © 2018 HealthDay. All rights reserved.

Citation: How do business partner data breaches affect your practice? (2018, June 13) retrieved 22 November 2019 from https://medicalxpress.com/news/2018-06-business-partner-breaches-affect.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
 shares

Feedback to editors

User comments