AG: Hospital Taking Wrong Approach
HEALTHCARE PRIVACY—U.S.September 14, 2010
Massachusetts Attorney General Martha Coakley is objecting to a hospital's decision not to send notifications to 800,000 individuals who may have been affected by a recent breach, GovInfoSecurity reports. However, the report states, the office has not taken any formal action against South Shore Hospital. The hospital has cited a state law as the basis for its new notification strategy, but the HITECH interim final breach notification rule requires breaches affecting 500 or more to be reported to federal authorities and those affected within 60 days, the report states. Coakley has said the hospital should mail notices about the incident to the patients that were potentially affected, and the office has stated it will "continue to monitor and investigate South Shore Hospital's actions with regards to the data breach and its response."