Cybersecurity: Is your patient information, practice protected?

October 7, 2015
Safeguard patient data and your practice with these cybersecurity tips.

"Stop. Think. Connect." It's the message a national cybersecurity awareness campaign hopes resonates with an evermore digitally connected public. But when it comes to doctors, a more apt slogan would read: "Stop. Think. Protect."

That's because patient health and financial information is the newest target for cybercriminals as data breaches afflict the health care industry's relatively lax cybersecurity measures, most recently with dizzying results.

October is National Cyber Security Awareness Month, a collaborative campaign between the U.S. Department of Homeland Security and National Cyber Security Alliance to educate Americans about safe and secure online practices. It's an appropriate time to review the steps doctors are taking to ensure the information entrusted to them doesn't fall in the wrong hands.

Data breaches can be financially devastating. That's because HIPAA requires doctors to notify patients when their data has been compromised—a process that can cost $30 per record, according to Kevin Johnson, vice president of Lockton Affinity, an AOAExcel® endorsed business partner. For practices with thousands of records, complying with the law can be financially onerous.

To protect patient data and your practice from cyberattacks, follow these recommendations:

  • Ensure electronic patient information is encrypted. Basic passwords won't cut it when it comes to hi-tech hackers, so activate the encryption program that most electronic health record (EHR) systems already offer.
  • Perform a risk analysis to evaluate potential for cyberattack. Not all software is created equal—as doctors of optometry investigating EHR vendors can attest—and older model computer operating systems (OS) might  not be HIPAA compliant any longer due to end of support.
  • Add peace of mind with cyberliability insurance. Protect business functions online, including operating the practice website and storing confidential patient records with  cyberliability insurance available from AOAExcel.
  • Review the HIPAA Privacy and Security Rules. Doctors of optometry who transmit information in an electronic format, such as a claim to Medicare or other payers, are considered covered entities under HIPAA, and should be aware of the  HIPAA Privacy and Security Rules.

Learn more ways to circumvent risks to your patients and practice.

Related News

Is your website in compliance with the ADA?

Website accessibility is still trying to catch up with the Americans with Disabilities Act, first passed 30 years ago. As the courts or Congress work it out, learn how doctors of optometry might navigate the indecision.

How team learning improves doctor, staff coordination

The AOA 2021 Virtual Learning Livecast, Oct. 1-2, offers over a dozen courses specifically geared toward integrated, doctor-paraoptometric education. But registration closes Monday, Sept. 27.

Pandemic savings strategies

COVID-19 has taught us that planning ahead may be more critical now than ever. During periods of uncertainty, it’s important to keep a long-term perspective.