Monday, July 25, 2016

UMMC fined $2.7 million

The University of Mississippi Medical Center issued the following press release:


UMMC TO PAY PENALTY RELATED TO LAPTOP DISAPPEARANCE


JACKSON, Miss. – The University of Mississippi Medical Center has reached an agreement with the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services to settle a matter regarding the disappearance of a laptop computer from UMMC in March of 2013.

After an extended review, OCR found that there were deficiencies in some UMMC policies and procedures intended to protect the confidentiality of personal health information, and that the Medical Center’s follow-up to the disappearance of the laptop was not satisfactorily resolved.

As part of the settlement, UMMC has agreed to pay a civil money penalty of $2.75 million from its health-care operations revenue.  An OCR news release about the case, including a link to the resolution agreement, can be found at http://www.hhs.gov/ocr/newsroom/index.html.

The laptop disappeared in March 2013 and is believed to have been stolen.  However, there is no evidence that protected health information was accessed or otherwise disclosed.

The laptop was deployed in the adult hospital to a unit and not to an individual.  It was used by multiple staff members to, among other things, access a database containing patient records.  Even though an individual staff member’s password was required to access UMMC’s computer network via the laptop, the database did not require an individual login.

At the time of the incident, UMMC administrators initiated required procedures, including issuing a news release and placing a public notice on the Medical Center’s websites about the potential breach of confidential patient data.  They also notified OCR of the incident and conducted an internal investigation into the laptop’s disappearance.

However, UMMC did not directly notify each individual whose protected health information “was reasonably believed to have been accessed, acquired, used or disclosed as a result of the breach,” which was an expectation of the agency.
As part of the settlement, OCR will require UMMC to implement a corrective action plan during the next three years, including updating its Information Security Policy.   The revised policy will include a standard that, following the discovery of a breach of protected health information, UMMC will notify each individual potentially affected by the breach.

UMMC will also be required to demonstrate that each user with access to confidential health information must be individually identifiable, to deter access by unauthorized users.

Under the terms of the agreement, UMMC is not admitting liability and the government is not conceding that UMMC is not in violation of applicable federal regulations.

In the last several years, UMMC has initiated substantial improvements in its information security program.  Among other initiatives, the Medical Center is requiring that all laptop computers have encryption software installed, restructured the role and reporting relationships of its Chief Information Security Officer, and brought in an outside firm for a complete assessment and overhaul of its IT security program.

“Our patients should never have to doubt that their privacy is a sacred trust that we are committed to protecting as part of our core ethical values,” said Dr. LouAnn Woodward, vice chancellor for health affairs.  “We have learned from this experience and are working hard to ensure that our information security program meets or exceeds the highest standard.”

12 comments:

Anonymous said...

I wonder who the $2.7 mil goes to and what it will be used for?

Anonymous said...

That is an expensive lap top.

Anonymous said...

Perhaps UMMC will take its compliance with federal laws seriously from now on. The OCR doesn't routinely hand out multi-million dollar fines unless there is gross incompetence. This was a simple case for it to resolve. It is widely known that UMMC is underrepresented on healthcare laws.

Kingfish said...

They have Lord Snow. What else do they need?

Anonymous said...

Whomever is in charge of UMMC's liability insurance program should be terminated without delay. This is Insurance & Risk Management 101. We can hope, I guess, that he has enough sense to by cyber-liability coverage.

Anonymous said...

Perhaps Hillary Clinton will take our Federal laws seriously from now on... Aw screw it.

Anonymous said...

"Under represented on healthcare laws" say what? Please . There is so much bureaucracy and so many bulllshit job titles in that place. Bet the assistant vice chancellor for micro aggression bias response bathroom equality committee chairperson would not have missed it.
How many people ....err ... Did anyone get fired over this ? Oh yea , its UMC, nevermind , dumb question.

Anonymous said...

Butler Snow farms that work out through a subcontract.

Anonymous said...

Folks this is going to happen for real one day. This is one of the many crazy parts of Obomacare. Having all the medical records for the entire USA online is just too big a target. It will be hacked one day.

Anonymous said...

Obamacare didn't do this. The push for electronic medical records started with Bush/Cheney.

Anonymous said...

Not saying the problem is electronic medical records. As I see it the problem is having all the records connected, I. E. government run healthcare. How much effort would you spend to have UMC patients vs hacking the entire USA?

Anonymous said...

@12:07- Clearly you have not read the ACA (which was supported by the UMMC Godfather). EHR mandate was passed under Bush, not Obama. This is just another example of UMMC being the most screwed, poorly run entity in our state. It is a shame how much money our tax payers waste on this failing medical center.



Recent Comments

Search Jackson Jambalaya

Subscribe to JJ's Youtube channel

Archives

Trollfest '09

Trollfest '07 was such a success that Jackson Jambalaya will once again host Trollfest '09. Catch this great event which will leave NE Jackson & Fondren in flames. Othor Cain and his band, The Black Power Structure headline the night while Sonjay Poontang returns for an encore performance. Former Frank Melton bodyguard Marcus Wright makes his premier appearance at Trollfest singing "I'm a Sweet Transvestite" from "The Rocky Horror Picture Show." Kamikaze will sing his new hit, “How I sold out to da Man.” Robbie Bell again performs: “Mamas, don't let your babies grow up to be Bells” and “Any friend of Ed Peters is a friend of mine”. After the show, Ms. Bell will autograph copies of her mug shot photos. In a salute to “Dancing with the Stars”, Ms. Bell and Hinds County District Attorney Robert Smith will dance the Wango Tango.

Wrestling returns, except this time it will be a Battle Royal with Othor Cain, Ben Allen, Kim Wade, Haley Fisackerly, Alan Lange, and “Big Cat” Donna Ladd all in the ring at the same time. The Battle Royal will be in a steel cage, no time limit, no referee, and the losers must leave town. Marshand Crisler will be the honorary referee (as it gives him a title without actually having to do anything).


Meet KIM Waaaaaade at the Entergy Tent. For five pesos, Kim will sell you a chance to win a deed to a crack house on Ridgeway Street stuffed in the Howard Industries pinata. Don't worry if the pinata is beaten to shreds, as Mr. Wade has Jose, Emmanuel, and Carlos, all illegal immigrants, available as replacements for the it. Upon leaving the Entergy tent, fig leaves will be available in case Entergy literally takes everything you have as part of its Trollfest ticket price adjustment charge.

Donna Ladd of The Jackson Free Press will give several classes on learning how to write. Smearing, writing without factchecking, and reporting only one side of a story will be covered. A donation to pay their taxes will be accepted and she will be signing copies of their former federal tax liens. Ms. Ladd will give a dramatic reading of her two award-winning essays (They received The Jackson Free Press "Best Of" awards.) "Why everything is always about me" and "Why I cover murders better than anyone else in Jackson".

In the spirit of helping those who are less fortunate, Trollfest '09 adopts a cause for which a portion of the proceeds and donations will be donated: Keeping Frank Melton in his home. The “Keep Frank Melton From Being Homeless” booth will sell chances for five dollars to pin the tail on the jackass. John Reeves has graciously volunteered to be the jackass for this honorable excursion into saving Frank's ass. What's an ass between two friends after all? If Mr. Reeves is unable to um, perform, Speaker Billy McCoy has also volunteered as when the word “jackass” was mentioned he immediately ran as fast as he could to sign up.


In order to help clean up the legal profession, Adam Kilgore of the Mississippi Bar will be giving away free, round-trip plane tickets to the North Pole where they keep their bar complaint forms (which are NOT available online). If you don't want to go to the North Pole, you can enjoy Brant Brantley's (of the Mississippi Commission on Judicial Performance) free guided tours of the quicksand field over by High Street where all complaints against judges disappear. If for some reason you are unable to control yourself, never fear; Judge Houston Patton will operate his jail where no lawyers are needed or allowed as you just sit there for minutes... hours.... months...years until he decides he is tired of you sitting in his jail. Do not think Judge Patton is a bad judge however as he plans to serve free Mad Dog 20/20 to all inmates.

Trollfest '09 is a pet-friendly event as well. Feel free to bring your dog with you and do not worry if your pet gets hungry, as employees of the Jackson Zoo will be on hand to provide some of their animals as food when it gets to be feeding time for your little loved one.

Relax at the Fox News Tent. Since there are only three blonde reporters in Jackson (being blonde is a requirement for working at Fox News), Megan and Kathryn from WAPT and Wendy from WLBT will be on loan to Fox. To gain admittance to the VIP section, bring either your Republican Party ID card or a Rebel Flag. Bringing both and a torn-up Obama yard sign will entitle you to free drinks served by Megan, Wendy, and Kathryn. Get your tickets now. Since this is an event for trolls, no ID is required. Just bring the hate. Bring the family, Trollfest '09 is for EVERYONE!!!

This is definitely a Beaver production.


Note: Security provided by INS.

Trollfest '07

Jackson Jambalaya is the home of Trollfest '07. Catch this great event which promises to leave NE Jackson & Fondren in flames. Sonjay Poontang and his band headline the night with a special steel cage, no time limit "loser must leave town" bout between Alan Lange and "Big Cat"Donna Ladd following afterwards. Kamikaze will perform his new song F*** Bush, he's still a _____. Did I mention there was no referee? Dr. Heddy Matthias and Lori Gregory will face off in the undercard dueling with dangling participles and other um, devices. Robbie Bell will perform Her two latest songs: My Best Friends are in the Media and Mama's, Don't Let Your Babies Grow up to be George Bell. Sid Salter of The Clarion-Ledger will host "Pin the Tail on the Trial Lawyer", sponsored by State Farm.

There will be a hugging booth where in exchange for your young son, Frank Melton will give you a loooong hug. Trollfest will have a dunking booth where Muhammed the terrorist will curse you to Allah as you try to hit a target that will drop him into a vat of pig grease. However, in the true spirit of Separate But Equal, Don Imus and someone from NE Jackson will also sit in the dunking booth for an equal amount of time. Tom Head will give a reading for two hours on why he can't figure out who the hell he is. Cliff Cargill will give lessons with his .80 caliber desert eagle, using Frank Melton photos as targets. Tackleberry will be on hand for an autograph session. KIM Waaaaaade will be passing out free titles and deeds to crackhouses formerly owned by The Wood Street Players.

If you get tired come relax at the Fox News Tent. To gain admittance to the VIP section, bring either your Republican Party ID card or a Rebel Flag. Bringing both will entitle you to free drinks.Get your tickets now. Since this is an event for trolls, no ID is required, just bring the hate. Bring the family, Trollfest '07 is for EVERYONE!!!

This is definitely a Beaver production.

Note: Security provided by INS
.