[rmedicineeagle12]

This is an interesting article; apparently the city of New Haven, CT’s Health Department was fined over $200,000 by the U.S. Dept. of Health and Human Services Office for Civil Rights, due to violating their own employee termination procedures and access controls.

After a rogue employee was terminated, network administrators failed to *terminate the employee’s access from the system*. Eight days after being terminated, the employee returned to her old office, the City Health Department, and logged into her old computer, where she downloaded protected health info onto a USB drive.

The health info contained almost 500 patient records with highly sensitive STD data, as well as other PII. This story is an excellent example of why it is SO important to make those personnel updates to access immediately. Here’s a link to the full story:

Health Dept fined over former employee data theft

Topic