Encryption, laptop control are vital to security
Encryption would sharply reduce the risk of damage from any loss of data, and widespread use could discourage thieves from trying to access healthcare information, says Brad Rostolsky, JD, an associate with the law firm of Reed Smith in Philadelphia who has worked with healthcare providers to ensure data security. Rostolsky acknowledges that encryption can be costly for a large organization.
"Identity theft professionals are becoming more sophisticated, and the Utah situation shows that," he says. "They had a lot of security, and the hackers were savvy enough to find the one weakness in one level of the server access. The role of the security officer is becoming as important as the role of the privacy officer."
Hospitals also should have policies and procedures in place that prohibit or sharply restrict downloading sensitive information to personal laptops, including those of contractors, Rostolsky says. Requiring encryption is one option.
In addition, there should be a policy that requires the removal of protected information from the laptops of any employee or contractor leaving the organization, he says.
"This should be a policy that is explained up front when the person comes to work for you, and they should be required to give you permission to go on their machines and remove any sensitive information," he says. "That also should be part of your dismissal process, having someone from IT access their laptop to confirm they won't leave with your data, as soon as possible."
Source
Brad Rostolsky, JD, Associate, Reed Smith, Philadelphia. Telephone: (215) 851-8195. Email: [email protected].
Encryption would sharply reduce the risk of damage from any loss of data, and widespread use could discourage thieves from trying to access healthcare information, says Brad Rostolsky, JD, an associate with the law firm of Reed Smith in Philadelphia who has worked with healthcare providers to ensure data security. Rostolsky acknowledges that encryption can be costly for a large organization.You have reached your article limit for the month. Subscribe now to access this article plus other member-only content.
- Award-winning Medical Content
- Latest Advances & Development in Medicine
- Unbiased Content