Most medical-record storage is going electronic, giving doctors and hospitals more opportunity to understand patients’ histories. But electronic records also provide risks. Here is what security experts advise:
For providers
Go on a data diet; only keep what you need.
Have explicit rules about what data is stored where, and who has access to it.
Know a baseline for normal data activity and monitor daily use to recognize spikes in activity that could suggest breaches.
Quickly update software when updates are released.
Make sure staff and contractors are fully trained on security.
Have a plan in place to handle breaches.
For patients
Ask your doctor about how your records are stored and who has access to them.
If informed of a possible data breach, contact your doctor or hospital to find out what information could have been stolen and what precautions are recommended.
