data security

Seattle health system will pay $100K HIPAA fine

Anne Zieger — Fri, 18 Jul 2008 10:47:30 -0400

A Seattle-based health system has agreed to pay a $100,000 HIPAA fine--as well as improve its medical data security--after failing to properly secure data backup tapes, disks and laptops. During 2005 and 2006, medical data was stolen from Providence Health & Services several times, with backup tapes and laptops being lost or stolen repeatedly. In light of these incidents, the health system will now revise its policy on transporting patient records outside of company buildings, and it will improve employee training. It will also undergo security monitoring by the feds, and turn in report on data security measures for three years.

The fine that will be paid by Providence is actually fairly unusual, as very few HIPAA fines have actually been imposed to date. However, its security issues are also unique. While many health organizations have lost a single laptop or backup tape to theft or disorganization in recent years, I haven't encountered any that have actually had to report multiple losses. That might explain why federal monitors took a particular interest in this organization's troubles.

To learn more about the HIPAA settlement:
- read this Seattle Post-Intelligencer piece

Related Articles:
IT staffer fired after data theft, sues hospital
Tenet warns of potential data theft
VA pledges better data security
Johns Hopkins investigates data breach

Audit finds that IL Medicaid paid providers late

Fri, 13 Jun 2008 06:59:54 -0400

An audit of Illinois'' Medicaid program has found that a $1.5 billion financial shortfall led to delays in paying physicians, hospitals and nursing homes over recent years. However, in recent times it appears that the state has gotten its act together in paying physicians, and what's more, may soon begin to pay hospitals on a timely basis as well. The audit, which covers fiscal years 1999 to 2007, found that while the state did a good job of processing Medicaid claims quickly, it was slow in sending them to the state comptroller for payment. In fiscal 2006, for example, the state took six days to process claims, but 57 days to submit them to the comptroller.

Given these delays, the state may owe $81 million in interest payments to doctors, hospitals and others taking care of Medicaid enrollees, given that state law requires interest to be paid when Medicaid claims take longer than 60 days to process. To date, the state has paid $21.8 million for claims filed during the period studied.

Of late, however, the state has done better with its payment schedule. Now, it's paying physicians' Medicaid claims for ambulatory care within 30 days for child patients, and within 60 days for adult patients, officials said.

To learn more about the state's Medicaid progress:
- read this AMNews article

Related Articles:
NY Medicaid will stop paying for 'never events'
NJ flunks Medicaid data security audit
Maine struggles with Medicaid billing system

ALSO NOTED: Hospitals have data security blind spot; NYU Medical Ctr. gets $100 million gift; and much more...

Wed, 16 Apr 2008 06:59:50 -0400

> Increasingly, it's looking like U.S. hospitals have a blind spot when it comes to data security. FierceHealthIT

> New York University Medical Center will be getting a second $100 million gift from Home Depot founder Kenneth Langone. Article

> New data suggests that hospitals could be collecting a lot more from their self-pay accounts. FierceHealthFinance

> New Orleans charity hospitals are asking for an added $51 million in the state of Louisiana's 2009 budget to pay for the costs of treating prisoners. Article

And Finally... Getting your car towed is bad enough, but this must have been a nightmare. Article