Hospitals tighten security on patient data

HITECH provisions in economic stimulus law aim to protect patient data

More than half of the nation’s hospitals and health care providers surveyed intend to buy more cybersecurity tools to safeguard against breaches of electronic medical records as a result of requirements in the economic stimulus law, according to a new survey of 186 health care providers and associates.

The stimulus law has provision known as the Health Information Technology for Economic and Clinical Health (HITECH) Act, which took effect on Sept. 23. It includes a broader definition of what patient health data must be protected against unauthorized release, increased penalties for violations and provides for aggressive enforcement. The law also requires providers to notify the Health and Human Services Department of all data breaches and to call media outlets if more than 500 residents in an area are affected.

As a result of the HITECH Act, 57 percent of the survey respondents said they would make additional investments in security tools or technologies, according to the survey by Healthcare Information and Management Systems Society Analytics released Nov. 17. The survey included got responses from 150 executives with provider organizations and 26 executives with business associates.

More than 90 percent of the survey respondents said their organizations have either changed, or plan to change, their policies and procedures to prevent and detect data breaches. More than 75 percent plan to do additional staff training against breaches, and 75 percent are revising their organization’s security policies and procedures. Forty-six percent said they would take all those steps.

The hospitals and health care organization executives acknowledged their groups are at risk of patient data breaches even while almost all of them (91 percent) are conducting risks assessments and 81 percent using encryption technology.

During the last year, 31 percent of the respondents said they had at least one data breach. Larger hospitals were more at risk, with 52 percent of the executives from large hospitals indicating at least one breach, 33 percent at medium-sized hospitals, and 25 percent at small hospitals.

About the Author

Alice Lipowicz is a staff writer covering government 2.0, homeland security and other IT policies for Federal Computer Week.

Featured

  • FCW PERSPECTIVES
    sensor network (agsandrew/Shutterstock.com)

    Are agencies really ready for EIS?

    The telecom contract has the potential to reinvent IT infrastructure, but finding the bandwidth to take full advantage could prove difficult.

  • People
    Dave Powner, GAO

    Dave Powner audits the state of federal IT

    The GAO director of information technology issues is leaving government after 16 years. On his way out the door, Dave Powner details how far govtech has come in the past two decades and flags the most critical issues he sees facing federal IT leaders.

  • FCW Illustration.  Original Images: Shutterstock, Airbnb

    Should federal contracting be more like Airbnb?

    Steve Kelman believes a lighter touch and a bit more trust could transform today's compliance culture.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.