Gov Info Security reports on a pharmacy that has been fined $125,000 following a 2012 breach. The small Colorado-based company’s breach involved “improper disposal of paper patient records” and is the second such Health Insurance Portability and Accountability Act (HIPAA) “enforcement action within a year by federal regulators tied to an incident involving records dumping by a covered entity,” the report states. Meanwhile, Krebs on Security looks at what happens to a stolen patient record, and Government Health IT report recommends healthcare organizations embrace ISO 27018, a new privacy standard for cloud providers that “mirrors some of HIPAA’s tenets while providing an all-important third-party audit mechanism.”
Full Story