Government Healthcare Policy, Business and Technology

DoD IG finds massive security flaws in Army, Navy EHR and handling of patient data

Healthcare IT News: The electronic health record and security systems at the Defense Health Agency and some Navy and Air Force hospitals and clinics are riddled with serious vulnerabilities, according to a recent U.S. Department of Defense Office of Inspector General report.

OIG identified the issues at the Naval Hospital Camp Pendleton, San Diego Naval Medical Center, NSNS Mercy, 436th Medical Group and Wright-Patterson Medical Center. These vulnerabilities ranged from password configurations to meet DOD requirements to user access based on assigned duties.

In fact, OIG officials said DHA, Navy and Air Force may have violated HIPAA with their lax security protocols, which could result in millions of dollars in fines.

Read article