BOSTON—Health IT security is a conversation that largely remains in the technical domain rather than strategy, said David Ross, general manager of General Dynamics Commercial Cyber Services, speaking at the 2015 Privacy and Security Forum.

A Massachusetts teaching hospital has agreed to pay $850,000 and implement a robust corrective action plan in a HIPAA settlement with the Department of Health and Human Services' Office for Civil Rights (OCR) as a result of a 2011 theft of a laptop. 

The GOP Doctors Caucus seeks a delay Meaningful Use Stage 3 and a blanket hardship waiver for Stage 2, according to a letter sent to House Speaker Paul Ryan (R-Wis.).

Despite the prevalence of health data breaches and cybersecurity threats, many hospitals have surprisingly weak web security programs. 

A Manhattan law firm has filed a class-action lawsuit against Quest Diagnostics for allegedly doing nothing while a protracted breach of patient privacy unfolded under the clinical-lab corporation’s nose. 

Cybersecurity best practices and standards by manufacturers and healthcare providers are the best way to fight off attacks, according to a white paper published by the Medical Imaging & Technology Alliance (MITA), a division of National Electrical Manufacturers Association (NEMA).

The demands of data security, population health and value-based benefits solutions and revenue cycle modernization will drive the evolving payer IT outsourcing market to more than $60 billion by the end of 2017.

One in 13 patients (or 25 million patients) is expected to have their personal and financial information illegally accessed through their healthcare provider’s IT systems over the next five years, according to a report from Accenture.