Η Community Health Systems, was charged last week by the Attorney General Ashley moody and 27 more attorney generals. The Tennessee-based medical unit and its subsidiary, CHSPSC LLC, were charged with a data breach case. THE infringement affected about 6,1 million patients, including more than 430.000 from the state of Florida.
When the data breach, Community Health Systems leased or operated 206 affiliated hospitals, including 37 located in Florida. Information exposed to the breach includes addresses, dates of birth, names, telephone numbers, and patients' social security numbers. The decision to settle the case requires payment of $ 5 million on states and provides that CHS agrees to implement and maintain a comprehensive information security program designed to safeguard personal information and health which will include specific information security requirements.
"Healthcare patients are regularly called upon to disclose personal information during treatment. The extra stress surrounding a data breach that reveals personal information can be overwhelming. "I am delighted to have been able to provide relief to more than 430.000 Florida residents affected by the negligent actions of this healthcare company," Moody said Thursday.
The decision contains some measures and requirements from Community Health Systems:
- Development of a written event response plan.
- Integration of training on safety and privacy for all staff who have access to protected health information.
- Limit unnecessary or inappropriate access to protected health information.
- Implement specific business partner policies and procedures, including the use of partner agreements and business partner controls.
Except for Florida, represented by the Assistant Attorney General of the Consumer Protection Division Patrice Malloy, are other states such as Alaska, Arkansas, Connecticut, Illinois, Indiana, Iowa, Kentucky, Louisiana, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, N Jersey, North Carolina, Ohio, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Utah, Vermont, Washington and West Virginia.
Judicial approval is pending for the proposed decision.