Search / 9 posts tagged hipaa regulations

Yesterday I read about the 7th criminal conviction and sentencing that has been given under HIPAA, "Woman gets 14 months in ID theft case."

When I got my Sunday Des Moines Register out of the orange box across the road this morning, the front page headline leaped out at me, "Medical privacy law fails to stop snooping." In one of the incidents described, a woman was incredibly embarrassed and humiliated after all the intimate details about

Here's a story that gave me a bit of a chuckle, "Note leads police to robbery arrest"...

Let’s face it: Data classification—despite being an information security “best practice”— is an expensive, time-consuming, labor-intensive task. For those organizations supporting thousands (or even hundreds) of applications and databases, the job of identifying all data elements and classifying each into categories of varying degrees of sensitivity is daunting and, perhaps, impossible.

I've been talking a lot lately about the need for business leaders to more effectively address the secure disposal of information, particularly personally identifiable information (PII). Why? Because it seems like more and more attention is being given to security technologies to protect day-to-day

Today I communicated with Sue Marquette Poremba at SC Magazine for an article she published this afternoon, "Proliferating HIPAA complaints and medical record breaches" She had seen my blog posting from yesterday, "HIPAA Complaints And Associated Resolutions Since 2003" and asked me some follow-up questions.

I have written many times about how the U.S Department of Health and Human Services (HHS) has severely weakened the planned privacy and security goals of the Health Insurance Portability and Accountability Act (HIPAA) to require healthcare covered entities (CEs) to implement strong safeguards for the protected health information (PHI) with which they've been entrusted.

Open source has shown how marketplaces can thrive on doing good, but can whether the same concept be applied to IT governance? Archer Technology hopes so. The risk assessment and compliance company announced Archer Exchange, an open marketplace for governance applications here at its user conference in Orlando.