: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: Le texte français suit. Dear CALLeagues, First, a heartfelt thank you to everyone who took the time to fill in our conference survey. Your feedback is invaluable as we plan future conferences. As promised, we held two draws for those who completed the survey, and I am delighted to announce the winners: congratulations to Emma Scott, who wins the Moncton Delta gift certificate, and to Betty Dykstra, who wins $100 off next year's conference! I am pleased to share that Our Executive Director (OED) has now officially taken over sole management of CALL/ACBD's account. We are still very much in a period of integration, and I ask for your continued patience as the OED team learns our needs and ways of working. As they review how we do things, OED has also been offering helpful suggestions for process improvements and identifying opportunities to tidy up and strengthen our existing practices. We are grateful for their fresh perspective and attention to detail, and we look forward to building an even stronger foundat[...]
: Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smar[...]