October 19, 2004 The California Department of Social Services (CDSS) issued a notification of computer security incident.
An unauthorized party accessed a computer at UC Berkeley, which contained personal information about In Home Supportive Services (IHSS) recipients and providers. CDSS encourages IHSS recipients and providers to follow the recommendations of the Office of Privacy Protection to protect themselves from identity theft. Step-by-step recommendations on how to place fraud alert on credit accounts and how to receive free copies of credit reports are posted on the CDSS web site at www.cdss.ca.gov/ihhs/
California Law requires entities with electronic individually identifiable information that has or is suspected of having a security incident causing unauthorized access or transmission of this information to notify the individual whose personal information may have been involved.
The Privacy Rule requires a Covered Entity to take reasonable steps to mitigate harm of unauthorized use or disclosure of PHI, and the Security Rule requires a Covered Entity to have policies and procedures for security incidents.
Notifying individuals of the security incident and providing step-by-step recommendations on how to place a fraud alert on credit accounts and how to receive free copies of credit reports may be the only reasonable action a covered entity can take to mitigate harm. Do you have a process in place for such a security incident listed above?
Have a safe and happy Thanksgiving,
Barbara McGowin, CPC
Executive Recruiting
HIT Recruiting
(843) 824-8537
mcgowins@...
Connecting Healthcare Organizations with People,
Products and Services to Achieve HIPAA Compliance.
Executive Recruiting
HIT Recruiting
(843) 824-8537
mcgowins@...
Connecting Healthcare Organizations with People,
Products and Services to Achieve HIPAA Compliance.