HIPAA Nightmares

Technology both enabled these offenses and enabled the discovery of the offenses.

First:

Three employees and a contract nurse were terminated from the Tuscon University Medical Center for looking at medical records of the Tuscon shooting victims. None are accused of leaking any information.

Second:

A relative called this week during the 11 o'clock news. Ohio Health had announced that patient data from Grant Hospital in Columbus had been compromised. She has been a patient there in the last six months.

An employee had stolen computers from the IT inventory, attempted to wipe the hard drives and then to sell the computers. Whatever data was lost was encrypted and the probability of a compromise is low, but Grant will be required to do the full court press on HIPAA security procedures (at no small cost).

How is your HIPAA security program working? Would breaches be detected?