3 ms·
The key takeaway from that article, for me, is that the government body that is supposed to monitor, enforce, and penalize organizations who fail to follow the
by sbarre 7y ago
The key takeaway from that article, for me, is that the government body that is supposed to monitor, enforce, and penalize organizations who fail to follow the HIPAA rules is basically doing nothing.
So with no consequence to these massive lapses, why would these companies care?
- modmans2nd 7y agoUnder funded...just like the IRS.
- WC3w6pXxgGd 7y agoNo, just inept like all government agencies.
- humaniania 7y agoOffice for Civil Rights (OCR) https://www.hhs.gov/ocr/index.html https://www.hhs.gov/ocr/index.html
- lunchables 7y agohttps://compliancy-group.com/hipaa-fines-directory-year/ https://compliancy-group.com/hipaa-fines-directory-year/ My honest opinion is that they know healthcare specifically is so far behind meeting their regulator requirements they have been trying to slowly phase in penalties.
- zpallin 7y agoThis is the wrong takeaway. The article states pretty clearly from the interview with Senator Mark Warner: > “To my knowledge, Health and Human Services has done nothing about it,” Warner told TechCrunch. “As Health and Human Services aggressively pushes to permit a wider range of parties to have access to the sensitive health information of American patients without traditional privacy protections attached to that information, HHS’s inattention to this particular incident becomes even more troubling,” he added. It's not that they're doing nothing, they're supposedly making it worse. They're also underfunded. OCR budget dropped to 10% of its previous budget between 2017 and 2018: https://www.hhs.gov/about/budget/fy2018/budget-in-brief/ocr/index.html https://www.hhs.gov/about/budget/fy2018/budget-in-brief/ocr/... So, when you ask "why would these companies care?", I think the current federal government is trying to say "these companies _should not_ care."
- deleted 7y ago[deleted]