We Could Learn From the Czechs
I learned a few lessons over the weekend about financial sec…
Eligible |
![]() |
A California hospital will fire five employees and discipline another because they used social media to post personal discussions about hospital patients.
An ongoing investigation at Tri-City Medical Center in Oceanside "has not yet identified any evidence that patient names, photographs, or similar identifying information was posted by these employees," according to a statement from Larry Anderson, CEO. "But our investigation yielded sufficient information to warrant disciplinary action."
A hospital spokesman declined to provide any further details. Under the HIPAA privacy rule, which was toughened by the HITECH Act, patients must give permission for their private information to be disclosed.
The California Department of Public Health is conducting an investigation of the incident, a spokesman confirmed June 8, declining to provide further details. The incident involved posting information on Facebook, according to a report by KNSD, the NBC TV affiliate in San Diego.
To help prevent similar incidents, Anderson said the hospital is "re-emphasizing, through employee training and education, the hospital's and the employees' ongoing commitment and obligation to protect our patients' privacy."
A number of healthcare organizations are developing specific security policies for the use of social media. For example, Adventist Health System recently spent six months crafting a detailed policy, says Sharon Finney, corporate data security officer.
NIST SP 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems..Next Topic
DoJ: Report to Congress on Implementation of Section 1001 of the USA PATRIOT Act..Next Topic
NIST Guide to Security for WiMAX Technologies (Draft)..Next Topic
NIST SP 800-41 Revision 1: Guidelines on Firewalls and Firewall Policy..Next Topic
OMB Memorandum: New Reporting Instructions for FISMA..Next Topic
NIST IR 709: Cryptographic Key Management Workshop Summary (Draft)..Next Topic