Data Breach Insurance in Demand!

     In light of “meaningful use” and the ever-increasing use of technology in the healthcare setting, hospitals are beginning to invest in data breach insurance.  According to Fierce Health IT, healthcare organizations are predicted to see this as one of many tactics used to protect themselves when data breaches occur.   This may be exactly what California based Sutter Health System will need.  Just days ago they announced that nearly 5000 patients will be notified that their personally identifiable information has been stolen.  Discovered during a drug raid, police officers found a patient list containing social security numbers, dates of birth, addressed, names of employer, work numbers and marital status. 

            Sutter Health is no stranger to the patient notification process.  In 2011 an unencrypted computer was stolen making this one of the largest HIPAA breaches in the US.

            On the opposite coast, another healthcare system called Bon Secours has recently reported another HIPAA breach affecting 5000 patients as well.  Apparently unauthorized employees accessed the same personal information exposed in the Sutter Health report.

            Given the number of hospitals who are repeat offenders of HIPAA violations, it seems apparent that greater measures must be taken to ensure the safety of patient information.  While I realize that hospitals employee a large number of employees and that alone can pose significant challenges, I believe greater due diligence must be demanded of these organizations.  Entrusting ones health to a bunch of strangers can be stressful enough, but worrying about your personal information while you’re worrying about your health is just more than I think any patient should have to deal with!