May/June 2010 | Page 29

By Taiba Solaiman Risk Management Analyst , TDIC

Data Breach

Will it Happen to You ?

Dentists have an ethical and legal responsibility to safeguard the confidentiality of patient information , which includes name , date of birth , address , driver ’ s license number , Social Security number and credit card numbers , in addition to health and other personal information . The practice owner is responsible to ensure the information is accessible to those authorized and is restricted from generalized use . Keeping current on privacy requirements under state and federal laws will help dentists and the dental team protect their patients . Compliance can also help protect the dental practice from claims of improper disclosure or use of a patient ’ s information .
Any business that stores personal information can be the victim of a data breach . Networks can be hacked , a laptop computer stolen or personal information inadvertently revealed in an e-mail or on a website . The thief can use a patient ’ s Social Security number and birth date to create a false identity and utilize it to commit fraud . According to a 2006 survey by the Federal Trade Commission ( FTC ), three percent of identity thefts involve a person ’ s health care information . A thief steals a patient ’ s dental identity to get free dental services , prescriptions or to file false claims with insurance companies . Establish the following protocols to protect from data breach :
• Develop a secure password system and train staff to understand why your security procedures are important .
May / June 2010 • Pennsylvania Dental Journal
27