As HIPAA was written before the flood of health technology, it can be unclear how the privacy law applies to other organizations. The law itself says it applies to “covered entities,” which includes health plans, healthcare clearinghouses and healthcare providers conducting certain electronic transactions, as well those entities’ business associates.
“Yet these days, scores of new businesses use consumer-facing technology to collect, handle, analyze and share health information about individuals — sometimes without those individuals’ knowledge,” according to an ONC blog post announcing the report.
The report outlines the lack of guidance surrounding privacy and security of health data stored by such businesses not covered by HIPAA, as well as consumer access to this information.
“To ensure privacy, security and access by consumers to health data, and to create a predictable business environment for health data collectors, developers and entrepreneurs to foster innovation, the gaps in oversight identified in this report should be filled,” according to the report.
More articles on cybersecurity:
78% of organizations don’t have a plan to deal with cybersecurity
3 cybersecurity tips from Google’s security and privacy lead
Execs more likely to pay ransom if they’ve been previously hacked, survey finds
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
