⁍ A Rhode Island health system has agreed to pay around $1 million and carry out a corrective action plan.
⁍ An affiliated hospital employee’s unencrypted laptop containing patient health information was stolen from a car in 2017, the U.S. Department of Health and Human Services said Monday.
⁍ Lifespan failed to encrypt all devices used for work-related purposes and didn’t implement procedures to track devices that access the network or hold protected health data, the department said.
– A Rhode Island health system has agreed to pay a $1,040,000 fine after an employee’s unencrypted laptop containing patient health information was stolen from her car in 2017, Westlaw Today reports. According to the Department of Health and Human Services’ Office of Civil Rights, Lifespan Health System failed to encrypt all devices used for work-related purposes and didn’t implement procedures to track devices that access the network or hold protected health data.
Source: https://www.reuters.com/article/healthdata-encryption-ocr/ri-health-system-reaches-1-million-deal-over-unencrypted-laptop-theft-idUSL2N2EY26M