Types of Information Compromised in Breaches of Protected Health Information

Letters21 January 2020Types of Information Compromised in Breaches of Protected Health InformationJohn (Xuefeng) Jiang, PhD and Ge Bai, PhD, CPAJohn (Xuefeng) Jiang, PhDEli Broad College of Business, Michigan State University, East Lansing, Michigan (J.(.J.) and Ge Bai, PhD, CPAThe Johns Hopkins Carey Business School and The Johns Hopkins Bloomberg School of Public Health, Baltimore, Maryland (G.B.)Author, Article, and Disclosure Informationhttps://doi.org/10.7326/M19-1759 Annals Author Insight Video - John Jiang, PhD In this video, John Jiang, PhD, offers additional insight into the article, "Types of Information Compromised in Breaches of Protected Health Information." SectionsAboutFull TextPDF ToolsAdd to favoritesDownload CitationsTrack CitationsPermissions ShareFacebookTwitterLinkedInRedditEmail Background: In March 2019, the U.S. Department of Health and Human Services proposed a rule to support access, exchange, and use of electronic health information (1). In May 2019, the U.S. Senate Committee on Health, Education, Labor, and Pensions proposed legislation that would expand public health data systems and enhance health data interoperability (2). Considering the fundamental tradeoff between data access and data security (3), it is critical to limit the risk for protected health information (PHI) breaches. The reporting requirements, academic research, and public attention regarding consequences of PHI breaches are primarily focused on the number of affected patients ...References1. 21st Century Cures Act: Interoperability, Information Blocking, and the ONC Health IT Certification Program. Fed Regist. 2019;84:7424-7610. To be codified as 45 CFR §170-171. Accessed at www.govinfo.gov/content/pkg/FR-2019-03-04/pdf/2019-02224.pdf on 11 July 2019. Google Scholar2. Lower Health Care Costs Act, S 1895, 116th Cong, 1st Sess (2019). Accessed at www.help.senate.gov/imo/media/doc/LHCC%20Act%20Discussion%20Draft%205_23_2019.pdf on 11 July 2019. Google Scholar3. Jiang JX, Bai G. Evaluation of causes of protected health information breaches. JAMA Intern Med. 2019;179:265-7. [PMID: 30453327] doi:10.1001/jamainternmed.2018.5295 CrossrefMedlineGoogle Scholar4. U.S. Department of Health and Human Services. Summary of the HIPAA privacy rule. Accessed at www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html on 11 July 2019. Google Scholar5. U.S. Department of Health and Human Services. Breach portal: notice to the Secretary of HHS breach of unsecured protected health information. Accessed at https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf on 11 July 2019. Google Scholar Author, Article, and Disclosure InformationAffiliations: Eli Broad College of Business, Michigan State University, East Lansing, Michigan (J.(.J.)The Johns Hopkins Carey Business School and The Johns Hopkins Bloomberg School of Public Health, Baltimore, Maryland (G.B.)Acknowledgment: Dr. Bai thanks The Johns Hopkins Carey Business School for its supplementary research support.Disclosures: Authors have disclosed no conflicts of interest. Forms can be viewed at www.acponline.org/authors/icmje/ConflictOfInterestForms.do?msNum=M19-1759.Reproducible Research Statement:Study protocol: Not applicable. Statistical code and data set: Available from Dr. Jiang (e-mail, [email protected]edu).This article was published at Annals.org on 24 September 2019. PreviousarticleNextarticle Advertisement Annals Author Insight Video - John Jiang, PhD In this video, John Jiang, PhD, offers additional insight into the article, "Types of Information Compromised in Breaches of Protected Health Information." FiguresReferencesRelatedDetails Metrics Cited byOptimally Designing Cybersecurity Insurance Contracts to Encourage the Sharing of Medical DataTrends in Ransomware Attacks on US Hospitals, Clinics, and Other Health Care Delivery Organizations, 2016-2021Are there trade-offs with mandating timely disclosure of cybersecurity incidents? Evidence from state-level data breach disclosure lawsArtificial intelligence-based strategies to identify patient populations and advance analysis in age-related macular degeneration clinical trialsEffectiveness of Email Warning on Reducing Hospital Employees' Unauthorized Access to Protected Health InformationClinician checklist for assessing suitability of machine learning applications in healthcareThe Ethics of Artificial Intelligence in Pathology and Laboratory Medicine: Principles and PracticeDigital microbiologyGenetic Data Aren't So Special: Causes and Implications of ReidentificationSecure, privacy-preserving and federated machine learning in medical imagingResearch, Digital Health Information and Promises of Privacy: Revisiting the Issue of Consent 21 January 2020Volume 172, Issue 2Page: 159-160KeywordsCancer treatmentDate of birthHealth careHealth information technologyPsychiatry and mental healthResearch designResearch reporting guidelinesSexually transmitted diseasesStatistical dataSubstance abuse ePublished: 24 September 2019 Issue Published: 21 January 2020 Copyright & PermissionsCopyright © 2019 by American College of Physicians. All Rights Reserved.PDF downloadLoading ...