<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Digital Risk Strategies &#187; Electronic Health Records</title>
	<atom:link href="http://blog.digitalriskstrategies.com/category/electronic-health-records/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.digitalriskstrategies.com</link>
	<description>Published by Paul E. Paray</description>
	<lastBuildDate>Mon, 30 Jan 2012 18:00:37 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>OCR:  Lost Records of 192 Patients = $1 million</title>
		<link>http://blog.digitalriskstrategies.com/ocr-lost-records-of-192-patients-1-million/</link>
		<comments>http://blog.digitalriskstrategies.com/ocr-lost-records-of-192-patients-1-million/#comments</comments>
		<pubDate>Fri, 25 Feb 2011 11:14:32 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=760</guid>
		<description><![CDATA[On the heels of the Cignet Health CMP, the OCR has just announced a Resolution Agreement with Massachusetts General that includes a $1 million &#8220;resolution amount&#8221;.  Under this Resolution Agreement, Mass General is also required to develop and implement &#8220;a comprehensive set of policies and procedures to safeguard the privacy of its patients.&#8221; According to [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/ocr-lost-records-of-192-patients-1-million/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OCR Gets Serious:  $4.3 Million Penalty Under Privacy Rule</title>
		<link>http://blog.digitalriskstrategies.com/ocr-gets-serious-4-million-penalty-under-privacy-rule/</link>
		<comments>http://blog.digitalriskstrategies.com/ocr-gets-serious-4-million-penalty-under-privacy-rule/#comments</comments>
		<pubDate>Thu, 24 Feb 2011 00:30:02 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=748</guid>
		<description><![CDATA[As shown by yesterday&#8217;s press release and this morning&#8217;s email blast, OCR is certainly eager to let the world know that it just issued a Notice of Final Determination and Notice of Proposed Determination finding that Cignet Health violated the HIPAA Privacy Rule to the tune of $4.3 million dollars. According to yesterday&#8217;s Associated Press [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/ocr-gets-serious-4-million-penalty-under-privacy-rule/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A Data Security Trend For 2011:  The Data Threat Hype Continues</title>
		<link>http://blog.digitalriskstrategies.com/a-data-security-trend-for-2011-the-data-threat-hype-continues/</link>
		<comments>http://blog.digitalriskstrategies.com/a-data-security-trend-for-2011-the-data-threat-hype-continues/#comments</comments>
		<pubDate>Tue, 18 Jan 2011 02:43:42 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Intellectual Property]]></category>
		<category><![CDATA[IT Consultants]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=686</guid>
		<description><![CDATA[The new year appears to be continuing a trend begun in 2008 &#8212; ever increasing hype concerning the level of data security threats faced by public and private entities.  This hype is not just about increasing public breach disclosures (which have primarily been driven by the increase in breach notification laws) given it also manifests [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/a-data-security-trend-for-2011-the-data-threat-hype-continues/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>PC World:  Self-Encrypted Drives Set to Become Standard Fare</title>
		<link>http://blog.digitalriskstrategies.com/pc-world-self-encrypted-drives-set-to-become-standard-fare/</link>
		<comments>http://blog.digitalriskstrategies.com/pc-world-self-encrypted-drives-set-to-become-standard-fare/#comments</comments>
		<pubDate>Thu, 06 Jan 2011 17:24:39 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=670</guid>
		<description><![CDATA[Although they have been out now for a few years, it is only recently that manufacturers have decided to mass market self-encrypting hard drives, i.e., drives that have integrated keys within their chip set.  According to standards experts quoted in a recent PC World article, in a few years, companies will be relying on self-encrypting drives &#8220;and you won&#8217;t [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/pc-world-self-encrypted-drives-set-to-become-standard-fare/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ponemon Institute:  Lost Laptops Cost Billions</title>
		<link>http://blog.digitalriskstrategies.com/ponemon-institute-lost-laptops-cost-billions/</link>
		<comments>http://blog.digitalriskstrategies.com/ponemon-institute-lost-laptops-cost-billions/#comments</comments>
		<pubDate>Fri, 03 Dec 2010 11:10:26 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Intellectual Property]]></category>
		<category><![CDATA[Law Firm]]></category>
		<category><![CDATA[Middle Market Business]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=638</guid>
		<description><![CDATA[The Ponemon Institute&#8217;s latest report, &#8220;The Billion Dollar Laptop Study,&#8221; shows that 329 organizations surveyed lost more than 86,000 laptops over the course of a year.  Based on these findings and an earlier survey that put the average cost of lost laptop data at $49,246, the total cost amounts to more than $2.1 billion or $6.4 million per organization. [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/ponemon-institute-lost-laptops-cost-billions/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IW:  CIOs See Smartphones As Data Breach Time Bomb</title>
		<link>http://blog.digitalriskstrategies.com/iw-cios-see-smartphones-as-data-breach-time-bomb/</link>
		<comments>http://blog.digitalriskstrategies.com/iw-cios-see-smartphones-as-data-breach-time-bomb/#comments</comments>
		<pubDate>Wed, 24 Nov 2010 11:05:44 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Law Firm]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=632</guid>
		<description><![CDATA[As recently reported by InformationWeek, a study conducted by market researcher Ovum and the European Association for e-Identity and Security found that eight out of 10 CIOs believe using smartphones in the workplace increases their firm&#8217;s vulnerability to attack.  Although these CIOs rank data breaches as their top related security concern, half of the organizations acknowledge that they [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/iw-cios-see-smartphones-as-data-breach-time-bomb/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CA Hospital Appeals Fine of $250,000 for Failure to Report a Laptop Theft</title>
		<link>http://blog.digitalriskstrategies.com/ca-hospital-appeals-fine-of-250000-for-failure-to-report-a-laptop-theft/</link>
		<comments>http://blog.digitalriskstrategies.com/ca-hospital-appeals-fine-of-250000-for-failure-to-report-a-laptop-theft/#comments</comments>
		<pubDate>Mon, 13 Sep 2010 11:05:46 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=580</guid>
		<description><![CDATA[Lucile Packard Children’s Hospital (LPCH) at Stanford is appealing a California Department of Public Health (CDPH) penalty issued on April 23, 2010.  The fine of $250,000 was levied as a result of a late reporting of a security incident.  According to a September 9, 2010 press release issued by the hospital, the incident was related [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/ca-hospital-appeals-fine-of-250000-for-failure-to-report-a-laptop-theft/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>HITECH Public Data Breaches:  Majority Caused by Theft</title>
		<link>http://blog.digitalriskstrategies.com/hitech-public-data-breaches-majority-caused-by-theft/</link>
		<comments>http://blog.digitalriskstrategies.com/hitech-public-data-breaches-majority-caused-by-theft/#comments</comments>
		<pubDate>Fri, 03 Sep 2010 11:43:19 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=559</guid>
		<description><![CDATA[Last month, the Health Information Trust Alliance published an analysis of the 108 breaches reported to HHS from Sept. 23, 2009 (when reporting first started under the HITECH Act) to mid-July.  This review illustrates the major impact of theft on healthcare providers.   Of 108 total reported breaches, 68 were the result of theft.  Indeed, the only [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/hitech-public-data-breaches-majority-caused-by-theft/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AON Disclosure Impacts 22,000 Retirees</title>
		<link>http://blog.digitalriskstrategies.com/aon-disclosure-impacts-22000-retirees/</link>
		<comments>http://blog.digitalriskstrategies.com/aon-disclosure-impacts-22000-retirees/#comments</comments>
		<pubDate>Tue, 31 Aug 2010 12:26:55 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Privacy]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=548</guid>
		<description><![CDATA[According to a story published today in the News Journal, Aon Consulting is mailing letters to approximately 22,000 State of Delaware retirees after it inadvertently posted social security numbers, gender information and dates of birth in a Request for Proposal (RFP) the company prepared for the State.  The RFP information was posted by AON to the procurement [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/aon-disclosure-impacts-22000-retirees/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Healthcare Industry Hit Hard with Data Breaches</title>
		<link>http://blog.digitalriskstrategies.com/healthcare-industry-hit-hard-with-data-breaches/</link>
		<comments>http://blog.digitalriskstrategies.com/healthcare-industry-hit-hard-with-data-breaches/#comments</comments>
		<pubDate>Mon, 16 Aug 2010 11:40:58 +0000</pubDate>
		<dc:creator>Paul E. Paray</dc:creator>
				<category><![CDATA[Electronic Health Records]]></category>
		<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Risk Management]]></category>

		<guid isPermaLink="false">http://blog.digitalriskstrategies.com/?p=496</guid>
		<description><![CDATA[According to the ID Theft Resource Center, 97 of the 341 organizations that sustained a significant data breach in the first half of 2010 were in the healthcare industry.  By comparison, only 38 breaches were reported at banking and other financial institutions.   As shown by the breach sustained by BCBS Tennessee, the direct costs for breaches can exceed [...]]]></description>
		<wfw:commentRss>http://blog.digitalriskstrategies.com/healthcare-industry-hit-hard-with-data-breaches/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

