Privacy Breaches: Not Just About Health Information

Our colleagues who represent retailers, technology, and media companies recently wrote that high profile data breaches have resulted in legislative and commercial industry initiatives to better protect consumers’ financial information from data theft.

We want to note that those in the health care industry need to pay attention to these developments as well. To read our colleagues’ article, click here.

Health care providers, insurers, and their business associates collect and maintain more than patient health information. Even if no health information is compromised by a breach, information and data associated with an individual’s online login, his/her account, financial information (including credit and banking information), Social Security number, or driver’s license number may nevertheless be subject to other breach reporting and notification requirements. HIPAA and state health information privacy laws are only part of the analysis in determining the appropriate response to a breach of data.

If you have more questions about data breaches and privacy issues, please contact Thomas E. Jeffrey Jr. or Lowell C. Brown.