Medical Identity Theft Research Paper

Some people use patient information illegally. They could get their name, address, social security number, or credit card information if they have used it to pay their bill. If that happens they someone could easily run up their credit card bill and buy things they want. Then have the bill sent to the patient and before they figure it out they have already maxed out their credit cards while the patient

Identify theft, in general, can affect a person for a lifetime. Federal law defines medical identity theft as “A fraud committed or attempted using the identifying information of another person without authority to obtain medical services or goods, or when someone uses the person’s identity to obtain money by falsifying claims for medical services and falsifying medical records to support those claims.” (“Red Flag Rule - Identity Theft Prevention Policy”, 2009). However, medical identity theft is not as easily traced compared to something such as, credit card theft. With the crime being less traceable and the ever-expanding health care system, it is not surprising that medical identity theft is continually rising. Medical identity theft accounts

When confidential patient information is disclosed without consent it is a violation of the HIPAA Title II Security Rule. This rule was enacted in response to private information being leaked to the news and emails containing privileged information were read by unauthorized people. Identity theft is a real concern so patient privacy should be taken seriously. This is a rule can easily be broken without the

With the enthusiasm for health information technology, potential risks and problems associated with electronic health records have received far less attention. Three fundamental security goals are essential to EHR systems: confidentiality, integrity and availability (Haas e26). Patients lose the protection of implied trust domain of medical institutions due to their medical record maintenance performed by non-medical enterprises (e27). Depending on the paradigm, enabling access to an increased number of users poses threats to security and privacy.

Recent developments in technology have changed the delivery of health care and the system used to record and retrieve health information. In addition to using paper medical records, healthcare professionals, hospitals and insurers routinely use computers, phones, faxes, and other methods or recording and transferring information. In many instances, this information - which could include medical diagnoses, prescriptions, or insurance information - is readily available to anyone (including clerical and other staff) who walks by a fax machine or logs on to a computer. This lack of privacy has the potential to undermine patients' relationships with providers and adversely affect the quality of care. Patients may also fear that the exposure of personal health information, including the results of genetic tests that are becoming increasing available, could result in the loss or denial of health insurance, job discrimination or personal embarrassment.

Another downfall or disadvantage of using this software is the concerns of client’s security. Most individuals think a disadvantage would be the security vulnerability for the client’s medical records. The ultimate concern is that hackers are still out there and may steal client’s personal information and possible compromise their identity. It does not matter how many password encryptions, security features added, and firewalls are put up, hackers can get in there. However, there are also companies that specialize in security measures for the maintenance of Electronic Health Records software.

The good news is that there are ways to prevent these breaches from happening altogether. The government has created laws to help fix these breaches, and to punish those who intentionally steal private information. These laws are HIPAA and HITECH. HIPAA created security for the exchange of medical information (US Dept of Health 2002). When someone goes to a hospital or doctor’s office and they are asked sign a document about whether or not they can release medical information to other doctors or hospitals, this is HIPAA in effect. The individual chooses whether or not they want their information to be sent anywhere else. This law makes the medical facilities accountable for protecting all medical information. HITECH was put into effect for

In today’s health care industry providing quality patient care and avoiding harm are the foundations of ethical practices. However, many health care professionals are not meeting the guidelines or expectations of the American College of Healthcare Executives (ACHE) or obeying the organizations code of ethics policies, especially with the use of electronic medical records (EMR). Many patients fear that their personal health information (PHI) will be disclosed by hackers or unauthorized users. According to Carel (2010) “ethical concerns shroud the

Privacy of health information has become an area of emphasis across the healthcare industry. It is important to understand what data is protected under federal regulations, how it can be shared, and how to prevent any accidental exposure of protected data. It is possible that data that should be protected can be exposed without anyone even realizing a violation has occurred. Exposure of protected healthcare data can result in medical identity theft and is therefore a very important and hot topic. The security and privacy of healthcare data is necessary to ensure consumer confidence in the healthcare industry and to prevent medical identity theft.

Security breaches of EMRs vary from someone without consent viewing the patient’s information, to a hacker using the information to steal one’s identity. According to Privacy Rights Clearing House, more than 260 million data breaches have occurred in the United States, including those of health related records. Approximately 12 percent of data breaches involve medical organizations (Gellman, 2012). According to Redspin, a provider of Health Insurance Portability and Accountability Act risk analysis and IT security assessment services, more than 6 million individual’s health records were compromised during a period from August 2009 and December 2010 (Author Unknown, 2010). A provision of the Health Information Technology for Economic and Clinical Health (HITECH) Act requires all breaches affecting 500 or more people to be reported to the Department of Health and Human Services. This reporting is to be accomplished within 60 days of discovery. The Redspin report covering the period above involved 225 breaches of protected health information. The amount of people with access to an individual’s health record creates concern with confidentiality. According to the Los Angeles

Medical identity theft is described as the unlawful use of someone else’s personal information to get medical services or to make fake claims for medical services (Mancilla and Moczygemba, n.d.). Medical identity theft can be divided into three categories. One category type is using personal information and using the health coverage of an insured person. The second category consists of a medical facility worker mistreating privacy privileges to get a patient’s health insurance information, and then sell the health policy information or use it to submit false bills to the insurance company.

The department of Health and Human Services protects and guides the health and well being of individuals here in America (Thacker, 2014). They fulfill these duties providing Americans with adequate and efficient health and human services and monitoring services designed to increase the efficiency of care in the health system (Thacker, 2014). One of the services being monitored by the department of Health and Human Services is the electronic health record system, which carries private and vital information of patient’s health record enabling all eligible participating health workers access to these records (Thacker, 2014). A breach of the protective health information of patients in a health organization creates chaos as these are against the health insurance portability and accountability (HIPAA) law (Thacker, 2014). Hence, measure will have to be put in place to determine what caused the breach and how to rectify it to ensure the breach never happens again (Thacker, 2014).

In a world full of electronics it would only seem logical to have health records electronic. Not only are medical records efficient, reliable, and quick to access, new technology allow patients to access their own personal medical records with a simple to use login and password. “People are asking whether any kind of electronic records can be made safe. If one is looking for a 100% privacy guarantee, the answer is no”(Thede, 2010). At my hospital, upon every admission we ask the patient for a password for friends and family to have to have if they would like an update on the patient 's condition. We do not let visitors come up and see the patient without the patient 's consent. In doing these things, we help to ensure the safety and protection of the patient 's health information and privacy.

In light of available security measures and their widespread acceptance within the information security community, there is no excuse for healthcare organizations to fail in fulfilling their duty to protect personal patient information. Guaranteeing the confidentiality and privacy of data in healthcare information is crucial in safeguarding the data of patients as there should be a legal responsibility to protect medical records from unauthorized access.

By definition “Identity theft n. the dishonest acquisition of personal information in order to perpetrate fraud, typically by obtaining credit, loans, etc., in someone else's name; fraud perpetrated in this way. ” (dictionary.oed.com, 2007). It’s estimated that 9 million Americans have had their identities stolen each year. “According to the Secret Service, its investigations show a jump in potential losses due to identity theft, from $851 million in 1998 to $1.4 billion in 2000.” add citation from how stuff works There are many ways that thieve steal your identity, they may go through your trash, steal your wallet or purse. I will discuss a lot of the different ways in more