Medical privacy protections cannot overcome users who do not follow best practices

HIPAA in the US and the GDPR in the EU set out stringent requirements for patient privacy.

GlobalData October 26, 2023

Previous data breaches were able to obtain email and password combinations from other companies, which rendered the user accounts for 23andMe vulnerable to attack individually. Credit: Victor Moussa / Shutterstock.

The 23andMe breach of confidential information based on genetic analysis appears to have been caused by users using identical login information across multiple platforms. Previous data breaches were able to obtain email and password combinations from other companies, which rendered the user accounts for 23andMe vulnerable to attack individually. Many businesses require password changes to avoid this kind of vulnerability, but it is not common practice among consumer-facing logins.

Companies are increasingly aware of the liabilities present by data security. User data broadly, and healthcare records specifically, have been the target of ransomware attacks or data breaches to varying degrees of success. Some have been released and resulted in large fines such as Premera Blue Cross being fined $6.85m in 2020.

HIPAA in the US and the GDPR in the EU set out stringent requirements for patient privacy. These help to attach real costs to privacy violations and incentivise companies to protect patients. The trouble is when patients themselves are not aware of the risks their poor security practices may be putting them at, as companies are largely protected from liability if the login information has been compromised through no fault of their own.

To protect their privacy, users should follow best practices by using a password manager and changing passwords periodically. It is also important to recognise and prioritise which accounts have the most risk associated in case of a breach, and to set up measures like two-factor authentication.

How well do you really know your competitors?

Access the most comprehensive Company Profiles on the market, powered by GlobalData. Save hours of research. Gain competitive edge.

Company Profile – free sample

Thank you!

Your download email will arrive shortly

Not ready to buy yet? Download a free sample

We are confident about the unique quality of our Company Profiles. However, we want you to make the most beneficial decision for your business, so we offer a free sample that you can download by submitting the below form

By GlobalData

Tick here to opt out of curated industry news, reports, and event updates from Medical Device Network.

Visit our Privacy Policy for more information about our services, how we may use, process and share your personal data, including information of your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.