NFL Players’ Medical Information Stolen
NFL Players’ Medical Information Stolen, But Laptop Theft Incident Likely Not Covered Under HIPAA
Keith Fricke, principal consultant at consultancy tw-Security, says that having a laptop password-protected, but not encrypted, “gives a false sense of security” because passwords can be cracked or circumvented.
“It’s akin to locking the windows and doors to a house, but thieves being able to peek through the window’s transparent glass,” he says. Encrypting the device helps “makes those windows opaque,” he says.
Fricke urges all organizations – not just those covered by HIPAA – to encrypt mobile devices. “Err on the side of caution. Just because there isn’t sensitive information on the device today, doesn’t mean it won’t be added by an employee later,” he says.