INDUSTRY SOLUTION

Healthcare Breach Solution

Protecting patient privacy.

The risks associated with the breach of protected health information (PHI) faced by healthcare organizations and others that fall under HIPAA regulations are growing every day. Over half (52%) of large hospitals said that they had at least one data breach incident during the past twelve months.
1

About ID Experts
ID Experts (founded in 2003) is the leading provider of comprehensive data breach solutions. We are trusted by many of Americas most prominent healthcare institutions, corporations, universities and government agencies to provide the most positive outcomes in addressing data breach risks. Our team of certied professionals, based entirely in the United States, assists our clients in prevention, preparedness and management of data breach incidents, ensuring compliance with state legislation and the HITECH Act for healthcare organizations and others that

With the passage of the Healthcare Information Technology for Economic and Clinical Health (HITECH) Act in 2009, the bar has been raised for both HIPAA covered entities (CE) and business associates (BA). Both are now subject to HIPAA Security and Privacy Rule compliance, and for the rst time, CEs are now required to notify patients or other individuals whose information is exposed in a data breach incident involving PHI. ID Experts is your one source for assisting in preventing, preparing and responding to such incidents, ensuring compliance with the strict HITECH Act notication requirements. Our certied professionals have managed hundreds of data breach incidents and have extensive experience with providers, payers and BAs.
PREVENTION

maintain PHI. ID Experts CIPP-certied privacy professionals are available to assist you in assessing risks of data breach and implementing best practices in order to reduce those risks to acceptable levels. Our capabilities include: Proprietary Breach HealthCheck tool for assessing level of business exposure and data breach risk for healthcare organizaWhen we had our data tions Formal PHI-aware privacy risk assessment providing gap analysis against best practices and identifying high impact areas for risk reduction HIPAA Security Rule assessment to evaluate compliance for CEs and BAs Implementation of DLP (data loss prevention) technology solutions that enable monitoring and blocking of PHI
PREPARATION breach, ID Experts just seemed to have all the answers. I knew that things would work out well and that our patients would be completely cared for. That peace of mind was invaluable to me.

Once you feel comfortable with your identity breach risk situation, it is essential to ensure that you are adequately prepared to assess and respond to breach incidents. e HITECH Act requires a formal

1. 2009 HIMSS Analytics Report: Evaluating HITECHs Impact on Healthcare Privacy and Security, November, 2009.

Healthcare Breach Solution

risk assessment of any incident and notication for those that are considered a data breach. We can provide you with: Risk assessment tool that enables you to ensure incident assessments are carried out in compliance with the rules issued by the Department of Health and Human Services (HHS) that govern HITECH incidents Comprehensive Incident Response Plan (IRP) that ensures eective and caring notication of patients while meeting HITECH notication requirements Retainer agreement that would allow for rapid response to breach incidents, never longer than the specied 60 days, so as to avoid any undue delay Use of best practices that would enable your organization to avoid risks of being found to have shown willful neglect in protecting the privacy of patient information
RESPONSE

Consulting using our HITECH risk assessment tool to determine whether the incident exceeds the notication threshold Computer forensic investigation services to determine whether PHI was actually exposed or stolen Notication via letter to all aected individuals meeting HITECH and state law requirements, as well as to state Attorneys General and HHS as required Credit monitoring and healthcare protection services, including cybermonitoring for misuse of PHI as well as the proprietary ID Experts Healthcare Identity Protection Toolkit Medical identity theft fully-managed restoration services provided by our dedicated ICFE-certied fraud professionals
COMPLIANCE

If and when an identity breach incident occurs, ID Experts ensures timely, condential and compliant assessment, notication and response to the incident. We have extensive experience handling breaches of PHI aecting highly sensitive populations. Our response includes:

e HITECH Act has rigorous requirements for protecting the privacy of patient PHI and penalties for neglecting to provide adequate protections. ID Experts is uniquely qualied to serve you because of our extensive experience with healthcare-related data breach risks, having worked with some of the largest and most prominent healthcare organizations in the US.

Benets of ID Experts Healthcare Breach Solution

BENEFIT Protect Patient Privacy Ensure HITECH Compliance Reduce Risks of Identity Breach Maintain High Level of Preparedness Respond to Incidents with Care and Timeliness Avoid Still Fines and Penalties FEATURES Proprietary Breach HealthCheck tool, risk assessment engagements and data loss prevention (DLP) technology solutions all focus on reducing risks to compromising patient privacy. Risk assessment methodology and tools determine and document whether the incident requires notication, notication by letter of all aected patients meeting HITECH and state law requirements, as well as providing for notication of HHS and media as required. CIPP-certied professionals can carry out privacy and security risk assessments documenting your risk factors and signicant gaps to HIPAA rules and best practices for reducing identity breach risks. We also oer best-in-class DLP technology for monitoring and blocking PHI. A comprehensive Incident Response Planning (IRP) based on an extensive template is derived from healthcare industry requirements and best practices for ensuring eective communication with and excellent protection for patients. FraudStop Healthcare Breach Edition is a best-in-class oering for protecting patients at risk of medical identity theft, including credit monitoring, our proprietary Healthcare Identity Protection Toolkit, cybermonitoring, ID theft reimbursement insurance, and an unmatched team of ICFE-certied fraud specialists to assist with identify theft issues and identity recovery. By carrying out a privacy risk assessment, taking remedial actions to high risk ndings, creating a comprehensive incident response plan, and retaining ID Experts for incident risk assessment, notication and patient monitoring and protection, you can avoid HITECH nes and in most cases also avoid class action litigation.

8625 SW Cascade Avenue Beaverton, Oregon 97008 866.431.4431 www.idexpertscorp.com