BC Advantage - 2017 Issue 5
Learning from Vanderbilt: Dealing with HIPAA Breaches
Subscribe or sign in to view the full article.
Article Overview
This article examines a reported HIPAA privacy incident involving unauthorized access to patient records at Vanderbilt Medical Center and explains the general breach-analysis framework used under federal privacy rules. It is aimed at healthcare compliance professionals, privacy officers, covered entities, business associates, and other organizations that handle protected health information. The discussion covers breach determination, risk assessment factors, reporting obligations, and operational safeguards that can help reduce the chance of similar incidents.
Why This Topic Matters
Understanding how a privacy incident is assessed and reported helps healthcare organizations strengthen compliance programs, improve access oversight, and reduce legal and reputational risk.
Article Sections
-
What did Vanderbilt announce?
Summarizes the reported patient-record access incident and the basic facts that prompted the privacy discussion. Introduces the broader questions addressed by the article.
-
What constitutes a breach?
Explains the general HIPAA breach framework and the factors used in a post-incident risk assessment. Places the incident into a compliance and reporting context.
-
How can a similar breach be avoided?
Discusses organizational safeguards and process improvements intended to reduce the likelihood of comparable privacy incidents. Focuses on monitoring, access oversight, and compliance practices.
What You Will Learn
- How a reported health information access event is framed under HIPAA privacy concepts
- What general factors are considered in assessing whether a breach occurred
- What types of organizational controls and compliance practices are discussed for prevention
- Why reporting thresholds and incident response processes matter for healthcare organizations
Who Should Read This
- Healthcare compliance professionals
- Privacy officers
- Covered entities
- Business associates
- Subcontractors
- Healthcare administrators
Codes Discussed
Subscribe or sign in to view the full article.
Quick, Current, Complete - www.findacode.com