Skip to main content
Subscribe
  • Sign Up Free
  • Login
  • Subscribe
  • News
    • Current News
    • Providers
    • Insurance
    • Government
    • Finance
    • Technology
    • Safety & Quality
    • Digital Health
    • Transformation
    • ESG
    • People
    • Regional News
    • Digital Edition (Web Version)
    • Patients
    • Operations
    • Care Delivery
    • Payment
    • Midwest
    • Northeast
    • South
    • West
  • Opinion
    • Bold Moves
    • Breaking Bias
    • Commentaries
    • Letters
    • Vital Signs Blog
    • From the Editor
  • Events & Awards
    • Awards
    • Conferences
    • Galas
    • Virtual Briefings
    • Webinars
    • Nominate/Eligibility
    • 100 Most Influential People
    • 50 Most Influential Clinical Executives
    • Best Places to Work in Healthcare
    • Excellence in Governance
    • Health Care Hall of Fame
    • Healthcare Marketing Impact Awards
    • Top 25 Emerging Leaders
    • Top Innovators
    • Diversity in Healthcare
      • - Luminaries
      • - Top 25 Diversity Leaders
      • - Leaders to Watch
    • Women in Healthcare
      • - Luminaries
      • - Top 25 Women Leaders
      • - Women to Watch
    • Digital Health Transformation Summit
    • ESG: The Implementation Imperative Summit
    • Leadership Symposium
    • Social Determinants of Health Symposium
    • Women Leaders in Healthcare Conference
    • Best Places to Work Awards Gala
    • Health Care Hall of Fame Gala
    • Top 25 Diversity Leaders Gala
    • Top 25 Women Leaders Gala
    • - Hospital of the Future
    • - Value Based Care
    • - Hospital at Home
    • - Workplace of the Future
    • - Digital Health
    • - Future of Staffing
    • - Hospital of the Future (Fall)
  • Multimedia
    • Podcast - Beyond the Byline
    • Sponsored Podcast - Healthcare Insider
    • Video Series - The Check Up
    • Sponsored Video Series - One on One
  • Data Center
    • Data Center Home
    • Hospital Financials
    • Staffing & Compensation
    • Quality & Safety
    • Mergers & Acquisitions
    • Data Archive
    • Resource Guide: By the Numbers
    • Surveys
    • Data Points
  • Newsletters
  • MORE+
    • Contact Us
    • Advertise
    • Media Kit
    • Jobs
    • People on the Move
    • Reprints & Licensing
MENU
Breadcrumb
  1. Home
  2. Government
November 19, 2015 12:00 AM

Ruling could mean FTC lost tool to go after healthcare-related data breaches

Lisa Schencker
  • Tweet
  • Share
  • Share
  • Email
  • More
    Reprints Print

    A recent ruling against the Federal Trade Commission might make it more difficult for the agency to bring and win cases against healthcare companies involved in data breaches, legal experts say.

    The FTC alleges that clinical testing laboratory LabMD harmed consumers by using inadequate data security methods. An independent FTC administrative law judge, however, ruled that the agency failed to prove that harm. The judge dismissed the case.

    The FTC first filed the complaint against LabMD in 2013 alleging that poor security led to two breaches, including one in 2008 when personal information was available on a peer-to-peer file-sharing network. The second alleged incident occurred in 2012 when LabMD data was found in the possession of individuals who pleaded “no contest” to charges of identity theft.

    “At best, (FTC counsel) has proven the 'possibility' of harm, but not any 'probability' or likelihood of harm,” wrote Michael Chappell, a chief administrative law judge.

    Jessica Rich, director of the FTC's Bureau of Consumer Protection, released a statement that expressed disappointment in the ruling and said FTC staff are considering their next steps. FTC officials could appeal the ruling to the agency's commissioners.

    The ruling sets the bar relatively high in terms of the type of harm the FTC must prove if it wants to punish companies that are victims of hacking, said Alan Friel, a partner at BakerHostetler.

    A number of healthcare companies have experienced data breaches recently. Earlier this year, Anthem was the victim of a cyberattack that exposed the personal information of 80 million current and former members. In May 2014, Premera Blue Cross was victim of a cyberattack that penetrated a system containing the records of 11 million customers.

    Healthcare companies should, however, still be concerned about failing to meet privacy and security requirements under the Health Insurance Portability and Accountability Act, a federal law to protect patient privacy, Friel said.

    Typically, HHS' Office for Civil Rights handles healthcare data breaches because such breaches fall under HIPAA. Friel said the FTC will now likely be more selective in pursuing data breach cases as the judge's recent decision gives companies more ammunition to push back.

    Lisa Clark, a partner at Duane Morris, said this case helps clarify the FTC's authority and the burden of proof. But Ken Dort, a partner at Drinker Biddle & Reath, believes larger implications of the case may lie further in the future, after the FTC commissioners respond.

    If FTC officials appeal the case to the commissioners, and commissioners reverse the judge's decision, Dort said it would open up the doors to more activity.

    On the other hand, if the commissioners were to uphold the decision, it would send a message that the FTC will only narrowly define what constitutes harm in future cases, he said.

    The administrative law judge also noted in his decision that the FTC began investigating LabMD after being notified of potential issues by Tiversa, an intelligence services company. According to LabMD, Tiversa discovered that one of LabMD's reports containing personal information was available on a peer-to-peer file-sharing network, and then offered its services to LabMD to remediate the breach. Tiversa reported the issue to the FTC after LabMD declined to purchase its services.

    "Tiversa has never been a party to this matter, but we have sadly been dragged into this case as LabMD sought to blame others for its admitted mistakes," according to the statement. "We have acted appropriately and legally in every way with respect to LabMD, despite their efforts to besmirch our reputation. "

    Letter
    to the
    Editor

    Send us a letter

    Have an opinion about this story? Click here to submit a Letter to the Editor, and we may publish it in print.

    Recommended for You
    abortion-pill-misoprostol-legal
    Abortion pill case advances to appeals court, on course to Supreme Court
    young doctor medical resident
    Federal physician recruitment program at risk
    Most Popular
    1
    More healthcare organizations at risk of credit default, Moody's says
    2
    Centene fills out senior executive team with new president, COO
    3
    SCAN, CareOregon plan to merge into the HealthRight Group
    4
    Blue Cross Blue Shield of Michigan unveils big push that lets physicians take on risk, reap rewards
    5
    Bright Health weighs reverse stock split as delisting looms
    Sponsored Content
    Modern Healthcare Alert: Sign up for this breaking news email to be kept in the loop as urgent healthcare business news unfolds.
    Get Newsletters

    Sign up for enewsletters and alerts to receive breaking news and in-depth coverage of healthcare events and trends, as they happen, right to your inbox.

    Subscribe Today
    MH Magazine Cover

    MH magazine offers content that sheds light on healthcare leaders’ complex choices and touch points—from strategy, governance, leadership development and finance to operations, clinical care, and marketing.

    Subscribe
    Connect with Us
    • LinkedIn
    • Twitter
    • Facebook
    • RSS

    Our Mission

    Modern Healthcare empowers industry leaders to succeed by providing unbiased reporting of the news, insights, analysis and data.

    Contact Us

    (877) 812-1581

    Email us

     

    Resources
    • Contact Us
    • Advertise with Us
    • Ad Choices Ad Choices
    • Sitemap
    Editorial Dept
    • Submission Guidelines
    • Code of Ethics
    • Awards
    • About Us
    Legal
    • Terms and Conditions
    • Privacy Policy
    • Privacy Request
    Modern Healthcare
    Copyright © 1996-2023. Crain Communications, Inc. All Rights Reserved.
    • News
      • Current News
      • Providers
      • Insurance
      • Government
      • Finance
      • Technology
      • Safety & Quality
      • Digital Health
      • Transformation
        • Patients
        • Operations
        • Care Delivery
        • Payment
      • ESG
      • People
      • Regional News
        • Midwest
        • Northeast
        • South
        • West
      • Digital Edition (Web Version)
    • Opinion
      • Bold Moves
      • Breaking Bias
      • Commentaries
      • Letters
      • Vital Signs Blog
      • From the Editor
    • Events & Awards
      • Awards
        • Nominate/Eligibility
        • 100 Most Influential People
        • 50 Most Influential Clinical Executives
        • Best Places to Work in Healthcare
        • Excellence in Governance
        • Health Care Hall of Fame
        • Healthcare Marketing Impact Awards
        • Top 25 Emerging Leaders
        • Top Innovators
        • Diversity in Healthcare
          • - Luminaries
          • - Top 25 Diversity Leaders
          • - Leaders to Watch
        • Women in Healthcare
          • - Luminaries
          • - Top 25 Women Leaders
          • - Women to Watch
      • Conferences
        • Digital Health Transformation Summit
        • ESG: The Implementation Imperative Summit
        • Leadership Symposium
        • Social Determinants of Health Symposium
        • Women Leaders in Healthcare Conference
      • Galas
        • Best Places to Work Awards Gala
        • Health Care Hall of Fame Gala
        • Top 25 Diversity Leaders Gala
        • Top 25 Women Leaders Gala
      • Virtual Briefings
        • - Hospital of the Future
        • - Value Based Care
        • - Hospital at Home
        • - Workplace of the Future
        • - Digital Health
        • - Future of Staffing
        • - Hospital of the Future (Fall)
      • Webinars
    • Multimedia
      • Podcast - Beyond the Byline
      • Sponsored Podcast - Healthcare Insider
      • Video Series - The Check Up
      • Sponsored Video Series - One on One
    • Data Center
      • Data Center Home
      • Hospital Financials
      • Staffing & Compensation
      • Quality & Safety
      • Mergers & Acquisitions
      • Data Archive
      • Resource Guide: By the Numbers
      • Surveys
      • Data Points
    • Newsletters
    • MORE+
      • Contact Us
      • Advertise
      • Media Kit
      • Jobs
      • People on the Move
      • Reprints & Licensing