Health Privacy Breaches Can Be Prevented

Why patient information is so often compromised - and what healthcare organizations can do about it.

As personal health records are increasingly being stored electronically, the number of data and privacy breaches is also growing rapidly – despite safeguards such as the Health Insurance Portability and Accountability Act (HIPPA).

Healthcare organizations, already racing to prevent such breaches, now face new mandates from Congress that further tighten data-security requirements, and include greater penalties for non-compliance.

Though many healthcare organizations are responding with improved technology and ad hoc process changes, Booz Allen Hamilton believes a more holistic approach is needed. This approach, described in the study, outlines a strategic information program that gives organizations far greater control over their data.

The study explores why HIPPA has not been as effective as expected, and examines how the culture of the medical community – which puts patient care first – can actually hamper efforts to keep medical records secure.

The holistic approach described in the study includes a data-classification system that enables healthcare organizations to fully monitor what patient-sensitive information they have, and where it is at all times. With such a program, organizations can keep their records more secure, improve compliance with regulations, and save money through an effective data-disposal program.

The approach also stresses the importance of changing the organizational culture – encouraging the entire medical community to take responsibility for safeguarding patient records.

Stemming the Rising Tide of Health Privacy Breaches: The Need for a More Holistic Approach was prepared by Booz Allen Hamilton principal Glen Day and Dr. Kenneth W. Kizer, an internationally renowned healthcare thought leader.

study posted June 4, 2009