Tag archive for "News"

Articles, News

Hospital must implement revised policies for telephone messages

Comments Off 10 August 2012

Hospital Implements New Minimum Necessary Polices for Telephone Messages

Covered Entity: General Hospital

Issue: Minimum Necessary; Confidential Communications

A hospital employee did not observe minimum necessary requirements when she left a telephone message with the daughter of a patient that detailed both her medical condition and treatment plan. An OCR investigation also indicated that the confidential communications requirements were not followed, as the employee left the message at the patient’s home telephone number, despite the patient’s instructions to contact her through her work number. To resolve the issues in this case, the hospital developed and implemented several new procedures. One addressed the issue of minimum necessary information in telephone message content. Employees were trained to provide only the minimum necessary information in messages, and were given specific direction as to what information could be left in a message. Employees also were trained to review registration information for patient contact directives regarding leaving messages. The new procedures were incorporated into the standard staff privacy training, both as part of a refresher series and mandatory yearly compliance training.

via All Case Examples.

Articles, News

Radiologist sanctioned for relying on incorrect billing information

Comments Off 10 August 2012

Radiologist Revises Process for Workers Compensation Disclosures

Covered Entity: Health Care Provider

Issue: Impermissible Uses and Disclosures

A radiology practice that interpreted a hospital patient’s imaging tests submitted a worker’s compensation claim to the patient’s employer. The claim included the patient’s test results. However, the patient was not covered by worker’s compensation and had not identified worker’s compensation as responsible for payment. OCR’s investigation revealed that the radiology practice had relied upon incorrect billing information from the treating hospital in submitting the claim. Among other corrective actions to resolve the specific issues in the case, the practice apologized to the patient and sanctioned the employee responsible for the incident; trained all billing and coding staff on appropriate insurance claims submission; and revised its policies and procedures to require a specific request from worker’s compensation carriers before submitting test results to them.

via All Case Examples.

Articles, News

Private Practice must Provide Access to All Records, Regardless of Source

Comments Off 10 August 2012

Private Practice Provides Access to All Records, Regardless of Source

Covered Entity: Private Practice

Issue: Access

A private practice denied an individual access to his records on the basis that a portion of the individual’s record was created by a physician not associated with the practice. While the amendment provisions of the Privacy Rule permit a covered entity to deny an individual’s request for an amendment when the covered entity did not create that the portion of the record subject to the request for amendment, no similar provision limits individuals’ rights to access their protected health information. Among other steps to resolve the specific issue in this case, OCR required the private practice to revise its access policy and procedures to affirm that, consistent with the Privacy Rule standards, patients have access to their record regardless of whether another entity created information contained within it.

via All Case Examples.

Articles, News

State Hospital Sanctions Employees for Disclosing Patient’s PHI

Comments Off 10 August 2012

State Hospital Sanctions Employees for Disclosing Patient’s PHI

Covered Entity: Health Care Provider / General Hospital

Issue: Impermissible Disclosure

A nurse and an orderly at a state hospital discussed the HIV/AIDS status of a patient and the patient’s spouse within earshot of other patients without making reasonable efforts to prevent the disclosure. Upon learning of the incident, the hospital placed both employees on leave; the orderly resigned his employment shortly thereafter. Among other actions taken to satisfactorily resolve this matter, the hospital took further disciplinary action with the nurse, which included: documenting the employee record with a memo of the incident; one year probation; referral for peer review; and further training on HIPAA Privacy. In addition to corrective action taken under the Privacy Rule, the state attorney general’s office entered into a monetary settlement agreement with the patient.

via All Case Examples.

Articles, News

Dentist required to change records storage and office layout

Comments Off 10 August 2012

Dentist Revises Process to Safeguard Medical Alert PHI

Covered Entity: Health Care Provider

Issue: Safeguards, Minimum Necessary

An OCR investigation confirmed allegations that a dental practice flagged some of its medical records with a red sticker with the word “AIDS” on the outside cover, and that records were handled so that other patients and staff without need to know could read the sticker. When notified of the complaint filed with OCR, the dental practice immediately removed the red AIDS sticker from the complainant’s file. To resolve this matter, OCR also required the practice to revise its policies and operating procedures and to move medical alert stickers to the inside cover of the records. Further, the covered entity’s Privacy Officer and other representatives met with the patient and apologized, and followed the meeting with a written apology.

via All Case Examples.

Articles, News

Physician required to update Faxing Procedures to Safeguard PHI

Comments Off 10 August 2012

Physician Revises Faxing Procedures to Safeguard PHI

Covered Entity: Health Care Provider

Issue: Safeguards

A doctor’s office disclosed a patient’s HIV status when the office mistakenly faxed medical records to the patient’s place of employment instead of to the patient’s new health care provider. The employee responsible for the disclosure received a written disciplinary warning, and both the employee and the physician apologized to the patient. To resolve this matter, OCR also required the practice to revise the office’s fax cover page to underscore a confidential communication for the intended recipient. The office informed all its employees of the incident and counseled staff on proper faxing procedures.

via All Case Examples.

Articles, News

Large Health System required to Restricts Provider’s Use of Patient Records, Nurse sanctioned

Comments Off 10 August 2012

Large Health System Restricts Provider’s Use of Patient Records

Covered Entity: Multi-Hospital Healthcare Provider

Issue: Impermissible Use

A nurse practitioner who has privileges at a multi-hospital health care system and who is part of the system’s organized health care arrangement impermissibly accessed the medical records of her ex-husband. In order to resolve this matter to OCR’s satisfaction and to prevent a recurrence, the covered entity: terminated the nurse practitioner’s access to its electronic records system; reported the nurse practitioner’s conduct to the appropriate licensing authority; and, provided the nurse practitioner with remedial Privacy Rule training.

via All Case Examples.

Articles, News

Obama Campaign releases an app that shows political affiliations of your neighbors

Comments Off 06 August 2012

In the name of democracy, and political campaigns, the Obama campaign took things to a scary new level.

 

Just as Girls Around Me used public Facebook & FourSquare data to list single girls around you, this app uses the freely available census and political data to display blue flags, and reveal names & ages of people who are registered democrats.

Scary that a presidential campaign would stoop this low…

 

From ProPublica:

Curious how many Democrats live on your block? Just download the Obama campaign’s new mobile app.

The app, released last week, includes a Google map for canvassers that recognizes your current location and marks nearby Democratic households with small blue flags.

For each targeted address, the app displays the first name, age and gender of the voter or voters who live there: “Lori C., 58 F, Democrat.”

All this is public information, which campaigns have long given to volunteers. But you no longer have to schedule a visit to a field office and wait for a staffer to hand you a clipboard and a printed-out list of addresses.

With the Obama app, getting a glimpse of your neighbor’s political affiliation can take seconds.

via Is Your Neighbor a Democrat? Obama Has an App for That – ProPublica.

Articles

Twitter goes down due to DUAL datacenter failures

Comments Off 27 July 2012

Most cloud vendors promise great uptime and brag about having redundant offsite facilities.

How many are planning for DUAL (or MULTIPLE) datacenter failures?

Twitter, SalesForce, Amazon have each had massive outages due to multiple, cascading failures.

 

From TheRegister.com

Twitter went down last night for several hours because – the company has now confirmed – redundancy in the micro-blogging site’s data centres failed to kick in.

The result was a catastrophic system collapse, Twitter’s engineering veep Mazen Rawashdeh explained:

The cause of today’s outage came from within our data centers. Data centers are designed to be redundant: when one system fails (as everything does at one time or another), a parallel system takes over. What was noteworthy about today’s outage was the coincidental failure of two parallel systems at nearly the same time.

The company is now “aggressively” investigating what Rawashdeh described as an “infrastructural double-whammy” to find out what went wrong with its failover system and to prevent it happening in the future.

“On behalf of our infrastructure team, we apologise deeply for the interruption you had today. Now – back to making the service even better and more stable than ever,” the exec added.

via Twitter titsup: Our failover was actually just FAIL ALL OVER • The Register.

Articles, News

The NSA has dossiers on every American – HOPE 9

Comments Off 19 July 2012

At some point, we LOST the cold war and the AXIS powers won.

 

Soviet-style media clampdown?  Taken care of by the media cartels.

East German-style spying?  Facebook, Google, ATT, Verizon, Onstar, etc make that possible.

 

In case after case, the DOJ uses State Secrets to squash lawsuits and FOIA requests regarding the NSA’s domestic surveillance programs.

 

Here’s what one of the NSA whistleblowers, William Binney, said at HOPE 9 recently:

“Domestically, they’re pulling together all the data about virtually every U.S. citizen in the country and assembling that information, building communities that you have relationships with, and knowledge about you; what your activities are; what you’re doing. So the government is accumulating that kind of information about every individual person and it’s a very dangerous process.” He estimated that one telecom alone was sending the government an “average of 320 million logs every day since 2001.”

via Privacy and Security Fanatic: HOPE 9: Whistleblower Binney says the NSA has dossiers on nearly every US citizen.

Articles

Would you setup shop in the middle of a warzone?

Comments Off 01 June 2012

Do you fancy opening your next office in Baghdad?  Kabul?  Beirut? Bogata?  Medellin?

 

No?  Why not?  Could it be because you do NOT want your employees or clients to get caught in a crossfire?

 

That’s EXACTLY what you’re doing when you setup shop in “the cloud”.

 

A 3-pronged cyberwar has been going on for over a decade:

Battleground 1: Criminals vs consumers – malware, spyware, banking trojans

Battleground 2: Governments vs citizens – ECPA, Patriot Act, CISPA, ACTA, 3-strikes laws

Battleground 3: Governments/societies vs Governments - Stuxnet, Flame, Vupen exploits, China vs. Google, Brazil vs. Google, India vs. RIM, etc

 

From June 1, 2012 NYTimes.com:

From his first months in office, President Obama secretly ordered increasingly sophisticated attacks on the computer systems that run Iran’s main nuclear enrichment facilities, significantly expanding America’s first sustained use of cyberweapons, according to participants in the program.

Hasan Sarbakhshian/Associated Press

Iran’s nuclear enrichment facility at Natanz.

Multimedia

Graphic

How a Secret Cyberwar Program Worked

TimesCast Politics: Confront and Conceal

Related

Iran Confirms Attack by Virus That Collects Information (May 30, 2012)

Facing Cyberattack, Iranian Officials Disconnect Some Oil Terminals From Internet (April 24, 2012)

Times Topic: Cyberattacks on Iran — Stuxnet and Flame

World Twitter Logo.

Connect With Us on Twitter

Follow @nytimesworld for international breaking news and headlines.

Twitter List: Reporters and Editors

Readers’ Comments

Share your thoughts.

Post a Comment »

Read All Comments (271) »

Mr. Obama decided to accelerate the attacks — begun in the Bush administration and code-named Olympic Games — even after an element of the program accidentally became public in the summer of 2010 because of a programming error that allowed it to escape Iran’s Natanz plant and sent it around the world on the Internet. Computer security experts who began studying the worm, which had been developed by the United States and Israel, gave it a name: Stuxnet.

via Obama Ordered Wave of Cyberattacks Against Iran – NYTimes.com.

Articles

SceneTap – Creepy new surveillance App in Bars

Comments Off 14 May 2012

Remember all those movies where the hero ducked into a bar to avoid the bad guys?

Or all those bars you ducked into with your date, because the vibe felt right?

 

Kiss those days good bye.

 

Bars equipped with SceneTap record all patrons in real time, perform gender & demographic analysis, and publish that data on the web & mobile apps.

So much for the privacy and anonymity of your local bar…

 

From VentureBeat.com:

Imagine this. You and your girlfriend walk into a neighborhood bar, order a cocktail, and, unbeknownst to you both, a camera above is scanning your faces to determine your age and gender. Your deets are combined with data on other bar patrons and then spit out to looky-loo mobile application users trolling for a good-time venue with the right genetic make-up.This isn’t make believe, folks. Rather, it’s a very real scenario that you may have already experienced thanks to a Chicago-based startup called SceneTap, which went live in San Francisco at 25 bars on Friday.SceneTap is a maker of cameras that pick up on facial characteristics to determine a person’s approximate age and gender. The company works with venues to install these cameras and track customers. It also makes web and mobile applications that allow random observers to find out, in real-time, the male-to-female ratio, crowd size, and average age of a bar’s patrons. And no one goes unnoticed. “We represent EVERYONE in the venue,” SceneTap proudly proclaims on its website.Launched in Chicago last July, SceneTap is now live in seven markets, including San Francisco and Austin, and has tracked more than 8.5 million people at 400 partner venues. Bamboo Hut, Bar None, milk bar, The Abassador, Fluid Ultra Lounge and 20 other San Francisco locations now have the i-spy cameras in place.

via Overexposed? Thanks to SceneTap, San Francisco bars are now profiling you | VentureBeat.

Articles

Times Square Marriott Injects javascript to break privacy and serve ads

Comments Off 06 April 2012

Apparently, the Time Square Marriott cannot make profit at $ 368/night.

 

The use technology to infect/inject every web page that you view with altered ads.

 

Would we put up with this if they took every magazine in the hotel, replaced all the ads and still sold you the magazine?

 

From JustInsomnia.org:

Marriott is injecting JavaScript into the HTML of every webpage its hotel customers view for the purpose of injecting ads and in the meantime, breaking YouTube. Marriott’s wireless internet service provider is a third-party company called Hotel Internet Services, so it is possible, though unlikely, that Marriott doesn’t know what’s going on. But it’s crazy to me that I’m paying $368 a night for a hotel room, and this is how I get treated.Update: I guess not all press is good press. Ronen Isaac coincidentally of Wlan Mall appears to have taken down the Vimeo video above that did such an excellent job describing how the Revenue eXtraction Gateway worked

via Hotel Wifi JavaScript Injection – Justinsomnia.

News

Who’s behind SOPA, PIPA, ACTA legislation? The $8 billion ipod

Comments Off 21 March 2012

The RIAA and MPAA own politicians…that’s no secret.

 

And to protect their dying business models, the music labels and Hollywood have launched a war against privacy, freedom and security.

 

ACTA, SOPA, PIPA, etc are all laws written by, and paid for, by the recording & moving industry.

 

Rob Reid explains how the RIAA determines that a $ 0.99 track on iTunes or a $ 16.95 CD is actually worth $ 150,000 per song.

 

Behold, the $ 8,000,000 iPod.

via Rob Reid: The $8 billion iPod | Video on TED.com.

News

Want a football scholarship? Friend your coach

Comments Off 21 March 2012

Who’s more invasive than State Governments & employers? Colleges.

 

Yes, the bastions of higher learning and organized sports are also erasing any concept of privacy.  To protect the multi-billion dollar college sports rackets, er, business model, colleges are demanding that “student-athletes” hand over their facebook & twitter logins, friend coaches, etc.

 

Apparently, The US Constitution and The Bill Of Rights doesn’t exist inside a football stadium or the locker room.

 

From MSNBC:

 

Student-athletes in colleges around the country also are finding out they can no longer maintain privacy in Facebook communications because schools are requiring them to “friend” a coach or compliance officer, giving that person access to their “friends-only” posts. Schools are also turning to social media monitoring companies with names like UDilligence and Varsity Monitor for software packages that automate the task. The programs offer a “reputation scoreboard” to coaches and send “threat level” warnings about individual athletes to compliance officers.

via Red Tape – Govt. agencies, colleges demand applicants’ Facebook passwords.

News

Want a job? hand over your facebook credentials

Comments Off 21 March 2012

In the US, UK and several other countries, employers are requiring that employees hand over their Facebook / Linkedin / etc accounts during the hiring process.

 

Some are requiring applicants to login to their social media accounts, with the interviewer looking over their shoulders, so that the employers can claim that they did not demand usernames & passwords…just a peek at the data.

 

From The Register:

 

The Facebook job test: Now interviewers want your logins

Need work? Better hand over that password

By Dan Olds, Gabriel Consulting • Get more from this author

Posted in HPC Blog, 21st March 2012 13:42 GMT

HPC blog When I wrote this blog about how a recent research study correlated social network behavior with employee success, I speculated that we’d soon see employers trying to circumvent Facebook’s privacy policies in order to get a good look at your Facebook pages.

Well, it turns out that some employers aren’t happy with just seeing the public part of applicant profiles; they’re actually asking prospective employees to turn over their Facebook login and password. Wait, did I get that right? (Looks again.) Yeah, I did. They’re outright asking applicants to give them their Facebook login details as part of the interview screening process.

Other companies are requesting that prospective (and presumably current) employees “friend” HR reps or background-checkers on Facebook. Others are requiring applicants to log in to their Facebook accounts from a company-owned computer – I guess they take screen scrapes of the page for later study, or maybe capture the login keystrokes.

If a company requires you to give them an intimate view of your social networking pages during the interview process, might there be something in the employment agreements that gives them the “right” to take a second, third, or fourth look – whenever they want to – after you’re hired?

via The Facebook job test: Now interviewers want your logins • The Register.

News

Apple will close iWork.com and delete user documents on July 31, 2012

Comments Off 21 March 2012

One of the biggest risks in Cloud Computing is when your cloud vendor dies, or kills the product.

In numerous cases, we see small businesses using 4-. 5- or even 10-year old software because it’s what their business relies on.  If you bought the licensed software, and it fits your needs, there’s no reason to upgrade.

 

If you rely on a cloud vendor however, then all your files, settings, workflow processes, etc can disappear into thin air, at the providers’ discretion.

 

Apple will close iWork.com and delete user documents on July 31, 2012

By AppleInsider Staff

Published: 03:20 PM EST (12:20 PM PST)

Apple’s new iCloud suite will officially replace iWork.com on July 31, 2012, at which point users will no longer be able to access their documents from the site.

In an e-mail sent to users of the iWork.com public beta on Friday, Apple informed participants that they should begin migrating to iCloud. Apple has recommended that users sign in to iWork.com before July 31 to download all of their documents to their computer.

In addition, Apple has created a support document available on its website, informing users that the iWork.com public beta will be discontinued in July. There, Apple offers a list of instructions on how to download documents from the website.

“Last year, we launched iCloud, a service that stores your music, photos, documents, and more and wirelessly pushes them to all your devices,” Apple’s e-mail reads. “Today, there are over 40 million documents stored on iCloud by millions of iWork customers.”

The iWork.com service launched in beta in early 2009. At the time, it was aimed at making it easier for iWork users on the Mac to collaborate with others using Windows and Microsoft Office.

via Apple will close iWork.com and delete user documents on July 31, 2012.

News

Minnesota school demands Facebook username & password from 12 year old Girl

Comments Off 21 March 2012

CNN — A Minnesota middle school student, with the backing of the American Civil Liberties Union, is suing her school district over a search of her Facebook and e-mail accounts by school employees.The 12-year-old sixth grade student, identified in court documents only as R.S., was on two occasions punished for statements she made on her Facebook account, and was also pressured to divulge her password to school officials, the complaint states.”R.S. was intimidated, frightened, humiliated and sobbing while she was detained in the small school room” as she watched a counselor, a deputy, and another school employee pore over her private communications.The lawsuit claims that her First Amendment rights were violated by employees at Minnewaska Area Middle School, in west-central Minnesota, as well as her Fourth Amendment rights regarding unreasonable search and seizure.

via Minnesota girl alleges school privacy invasion – CNN.com.

News

What Should You Do If Your Employer Asks For Your Facebook Password?

Comments Off 14 March 2012

What Should You Do If Your Employer Asks For Your Facebook Password?

By Dave Copeland / March 12, 2012 8:30 AM / 24 Comments

 

Why are some employers asking workers and would-be workers for their Facebook passwords?

Because, with U.S. unemployment hovering at 8.3%, they can.

“Unfortunately, in these economic times employers may exercise latitude in asking for the unreasonable,” career coach Sandra Lamb said in an email. “But employees (and applicants) should be steadfast in asserting their rights to their personal life. If your FaceBook or other social media website password is requested (or required) that goes beyond a red flag–it’s a deal breaker.”

Even social media newbies know that you need to check and re-check your privacy settings on Facebook and other social networks at regular intervals to make sure employers don’t see any content you don’t wnat them to see. Or, better yet, don’t post that content in the first place. But employees, job applicants and student athletes are increasingly being asked for their Facebook passwords so their overseers can check to see what content they may be hiding behind their privacy wall.

via What Should You Do If Your Employer Asks For Your Facebook Password?.

Articles, News

FTC tears into Apple, Google over kids’ privacy – or lack of

Comments Off 20 February 2012

The FTC has notified Apple & Google that they actually need to read, abide by and enforce their own privacy policies.  Specifically, these two operators can’t turn a blind-eye to what data the cell-phone application developers collect, and what they do with that data.

 

 

From The Register:

FTC tears into Apple, Google over kids’ privacy – or lack of

‘Impossible’ to know data collected by apps, watchdog fumes

By Brid-Aine Parnell

 

US regulators have told smartphone software makers to do more to protect the privacy of kids using their apps – or face the watchdogs’ wrath.

In a report that acknowledged the “tremendous” growth of mobile software, the Federal Trade Commission said app developers are not making “simple and short” declarations of their privacy policies. As a result, young users – picked out for their vulnerability – could be giving up their mobile phone numbers, contacts, location and other data without knowing about it.

It also warned that app stores run by Apple and Google needed to do more.

“Although the app store developer agreements require developers to disclose the information their apps collect, the app stores do not appear to enforce these requirements. This lack of enforcement provides little incentive to app developers to provide such disclosures and leaves parents without the information they need,” notes the report.

“As gatekeepers of the app marketplace, the app stores should do more.”

via FTC tears into Apple, Google over kids’ privacy – or lack of • The Register.

What to teach your kids about Social Media

Comments

I enjoyed your presentation yesterday! Thank you, Kathleen A. Perez, CISSP, CAP Network Engineering, 690 ISS\SCXE (Kathleen A. Perez)

Quote Rotator

Loading Quotes...

© 2013 Raj Goel, CISSP. Powered by WordPress.

Daily Edition Theme by WooThemes - Premium WordPress Themes