US Comfort Dental Mar 2013 Technical Error (Q15651)

From Open Risk Manual
Revision as of 23:08, 8 March 2020 by imported>Wiki admin (‎Created a new Item)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
A data breach risk event
Language Label Description Also known as
English
US Comfort Dental Mar 2013 Technical Error
A data breach risk event

    Statements

    March 2013
    0 references
    According to news reports, over 60 boxes containing years of dental records pertaining to over 5,600 patients, and including very sensitive personal information, were found in a dumpster. Apparently, the dentist hired a third party vendor to dispose of the records; that vendor likely was a business associate under HIPAA and, if so, also subject to the HIPAA privacy and security rules. For small medical or dental practices, as for other professional service businesses such as lawyers, accountants, and insurance brokers, data security can be both daunting and expensive if there is a breach. Like many businesses, small businesses rely on third party vendors to perform certain activities. When those activities involve personal information of the business customers, the business owner should b (English)