Comments on: DMHC fines Kaiser Permanente $200,000 for exposing patient information on the Internet http://www.kaiserthrive.org/2005/06/21/dmhc-fines-kaiser-permanente-200000-for-exposing-patient-information-on-the-internet/ Kaiser Permanente: Failure to Thrive -- A Managed Care Watch Web Site Sun, 06 Jul 2008 04:09:34 +0000 http://wordpress.org/?v=2.5.1 By: L http://www.kaiserthrive.org/2005/06/21/dmhc-fines-kaiser-permanente-200000-for-exposing-patient-information-on-the-internet/#comment-4751 L Sat, 30 Sep 2006 03:02:13 +0000 http://kaiserthrive.org/wordpress/2005/11/11/dmhc-fines-kaiser-permanente-200000-for-exposing-patient-information-on-the-internet/#comment-4751 HIPAA is a joke. There are so many things that are supposed to be secured that aren't. For instance, when you check in, that's supposed to be held in private so that no one can hear you. They aren't supposed to use whiteboards any longer where patients may see other patients symptoms, etc. Last time I checked, all that crap was still available for anyone to see in a hospital, especially Kaiser's. Heaven forbid there is a security breach and someone gets into Kaiser's intranet and web applications. There are apps out there that log all kinds of Personal Health Information (PHI) in their application logs. $200,000 is pittance for this security breach, and yeah, I think it should go to Elisa as a reward for pointing it out. HIPAA is a joke. There are so many things that are supposed to be secured that aren’t. For instance, when you check in, that’s supposed to be held in private so that no one can hear you. They aren’t supposed to use whiteboards any longer where patients may see other patients symptoms, etc. Last time I checked, all that crap was still available for anyone to see in a hospital, especially Kaiser’s.

Heaven forbid there is a security breach and someone gets into Kaiser’s intranet and web applications. There are apps out there that log all kinds of Personal Health Information (PHI) in their application logs.

$200,000 is pittance for this security breach, and yeah, I think it should go to Elisa as a reward for pointing it out.

]]>