About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline



28 Health Matrix 365 (2018)
Health Care Held Ransom: Modifications to Data Breach Security & the Future of Health Care Privacy Protection

handle is hein.journals/hmax28 and id is 371 raw text is: 



               HEALTH  MATRIX 28 - ISSUE 1 - 2018


      HEALTH CARE HELD RANSOM:

   MODIFICATIONS TO DATA BREACH

SECURITY & THE FUTURE OF HEALTH

        CARE PRIVACY PROTECTION


                      Ryan  M.  Krisbyt



                          CONTENTS

I.  INTRODUCTION             .............................................. 366
II. BACKGROUND        ................................................. 369
    A. HIPAA  & Risk...................................   369
    B. HIPAA's Security Rule........    ........................371
       1. Physical Safeguards    .................................373
       2. Administrative Safeguards  ...........................373
       3. Technical Safeguards    ...............................374
    C. Ransomware.........................................375
       1. Encryption.................    .......................375
       2. Ransomware Attacks   .......................... ...... 376
       3. The Current State of Data Security in  ealthcare............. 378
       4. The Cost of Ransomware and Other Cyber-threats........ 381
    D. The Problem of Outsourcing .................................. 382
III. RECOMMENDATIONS      ......................................... 383
    A. Mandate Stricter Technical Requirements..  ............... 383
       1. Require a 3-2-1 Rule for Data Backup ................. 384
       2. Encryption ...... ................................... 385
       3. Data-at-rest v. D Daa-in-motion .............. ............. 387
       4. Prohibit Use of Generic Usernames .................... 389
       5. Require Access-Triggered Breach Notification............ 390
    B. Provide Clearer & Simplified Compliance Guidelines ......... 391
    C. A Flexible Administrative Standard     ....................... 393
    D. Addressing the Outsourcing Problem.....................395
IV. THE  FEDERAL TRADE  COMMISSION         ........................... 396
    A. FTC v. Wyndham  Worldwide Corp ............   .............. 396
    B. In re LabMD             Bro............................n.................... 398


t   J.D. Candidate, 2018, Case Western Reserve University School of Law;
    BA.  University of Dayton; winner of the Health Matrix Outstanding
    Note of the Year (2017).  would like to thank professor Sharona Hoffman
    for her guidance and invaluable insight throughout the process of writing
    this Note. I would also like to thank my peers at Health Matrix, for
    keeping me sane all the while. Finally, I would like to thank the following:
    Mom  and Dad (for your bottomless supply of love and support) and
    Jessica Edelstein (for the humbling reminder that I am not as cool as I
    sometimes believe myself to be).


365