Privacy officers must ensure their hospital removes potential patient identifiers from data sets used for reasons outside of treatment, payment, and healthcare operations, privacy experts say.
When it comes to data breaches, it's not a question of if, but a matter of when, says Cris V. Ewell, PhD, chief information security officer at Seattle Children's Hospital, Research, and Foundation.