How Safe is Your Medical Data? You Don’t Want to Know…
So you live in a country that has legislation requiring your health data to be protected and you believe it’s all safe. If you live in the US, think again.
According to a study by Ponemon Institute sponsored by MegaPath:
- 91% of small healthcare organizations (think your local doctor, dentist, optometrist or clinic) had experienced a breach of protected health information (PHI) in the previous 12 months; of those, 29% resulted in medical identity theft
- 52% of small healthcare providers rated their security technology plans as ineffective
- 43% had experienced medical identity theft in their organizations
- 55% of respondents had to notify patients of a data breach in the previous 12 months
- On average, less than 10% of the respondents’ IT budgets are spent on security
You can register and download the entire paper at http://www.megapath.com/solutions/industry/healthcare/study/
I found this table the most interesting discouraging:
From a data governance and data protection point of view, I’d really expect to see ALL of those be 100%. My doctor recently moved to mostly electronic health records (as have most in my province), but I’m wondering what his answers to all of these questions would be. When I think about the 91% data breach numbers, I see this table as one of the key reasons that number is so high.
Even if you aren’t in a health-related organization, I’d expect your numbers to be higher. 63% backup and disaster recovery plans? How can we call ourselves professionals when this is life-critical information? Ultimately it is organization leadership who are responsible for protecting data. But I’ve always been concerned about how far we data professionals should go in ensuring that the public is protected from harm when data polices and practices are not sufficient. Should we not move to other projects? Report bad practices? To whom?
This is a US-based study and I’m curious about similar numbers in other countries with and without health data privacy legislation. If you have links to other sources, please provide them in the comments.
1 Comment
Leave a comment
Subscribe via E-mail
Recent Comments
Categories
Downloads
- 476275616.jpg
- favicon
- Refactoring Computer Engineer Barbie
- 10 Things I Hate About Interviewing with You
- EDW 2013 Karen Lopez Get Blogging
- Karen Lopez presentation DAMA PS 2012
- Data Modeling Contentious Issues - DAMA Nebraska
- Karen Lopez - 10 Physical Blunders - DAMA
- Career Success In Data Profession - DAMA
- The Straw Poll
- You've Just Inherited a Data Model CheckList
- KarenLopez - 5 Physical Blunders - 24HOP-2011
- Handouts for OEMUG / CA Global Modeling User Group Why Be Normal Webcast
- Handouts Database Design Contentious Issues - New York 2010
- Handouts Database Design Contentious Issues - DC 2010
Archive
Recent Posts
Archives
- November 2018
- May 2018
- April 2018
- December 2017
- August 2017
- September 2016
- August 2016
- June 2016
- May 2016
- April 2016
- March 2016
- February 2016
- January 2016
- December 2015
- November 2015
- September 2015
- July 2015
- June 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- October 2014
- August 2014
- July 2014
- June 2014
- May 2014
- April 2014
- March 2014
- February 2014
- January 2014
- December 2013
- November 2013
- October 2013
- September 2013
- August 2013
- July 2013
- June 2013
- May 2013
- April 2013
- March 2013
- February 2013
- January 2013
- December 2012
- November 2012
- October 2012
- September 2012
- August 2012
- July 2012
- June 2012
- May 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
- September 2010
- August 2010
- July 2010
- February 2009
[…] I’ve previously blogged about how poorly medical data is protected. […]