Health Law & Business News

Mishandled Laptop, Flash Drive Cost New York Hospital $3 Million

Nov. 5, 2019, 8:22 PM

One of New York state’s largest health systems must pay $3 million for failing to encrypt mobile devices such as laptops and flash drives that contained patient data, HHS said Nov. 5.

The Department of Health and Human Services Office for Civil Rights penalized the University of Rochester Medical Center over potential violations of the Health Insurance Portability and Accountability Act involving protected health information.

The agency found that the medical center didn’t conduct a company-wide risk analysis, apply security measures that would reduce these risks and vulnerabilities, or implement a system that encrypts and decrypts electronic health information after...

To read the full article log in. To learn more about a subscription click here.