US health dept says UnitedHealth can notify patients of data breach
Changes sourcing, adds UnitedHealth response in paragraph 5
June 12 (Reuters) -U.S. healthcare providers can ask UnitedHealth Group UNH.N to notifypeople whose data was exposed during a hack on the company'sChange Healthcare unit in February, according to an update on the health department's website.
The news comesas a relief for U.S. hospitals and healthcare providers that hadurged the Department of Health and Human Services (HHS) to shift the notification responsibility toUnitedHealth and its unit.
"Affected covered entities that want Change Healthcare to provide breach notifications on their behalf should contact Change Healthcare," the HHS' Office for Civil Rights (OCR)said in an update dated May 31.
U.S. law states data breaches must be reported to individual patients within 60 days of discovery.
A UnitedHealth spokesperson said the company appreciates the clarification from OCR, which "reiterates our stated preference to ease the reporting obligations of our customers".
Earlier in May, the healthcare conglomerate's CEO Andrew Witty told a Congressional committee that hackers potentially stole a third of Americans' data in the Feb. 21 cyber attack that led to disruptions in processing medical claims. The company is still trying to fix the processingsnags.
Witty had also saidthe company continued to investigate the amount of data involved and thought it was"going to be substantial".
UnitedHealth warned the breached data could contain sensitive information such as names, addresses, medical codes and insurance numbers, the Wall Street Journal reported earlier in the day, citing the company's responses to questions from the Senate Finance Committee.
The breach at the unit, which handles healthcare billing, data systems and many other services, has caused widespread disruptions in claims processing, impacting patients and providers across the country.
Reporting by Sriparna Roy and Mariam Sunny in Bengaluru; Editing by Devika Syamnath
Latest News
Disclaimer: The XM Group entities provide execution-only service and access to our Online Trading Facility, permitting a person to view and/or use the content available on or via the website, is not intended to change or expand on this, nor does it change or expand on this. Such access and use are always subject to: (i) Terms and Conditions; (ii) Risk Warnings; and (iii) Full Disclaimer. Such content is therefore provided as no more than general information. Particularly, please be aware that the contents of our Online Trading Facility are neither a solicitation, nor an offer to enter any transactions on the financial markets. Trading on any financial market involves a significant level of risk to your capital.
All material published on our Online Trading Facility is intended for educational/informational purposes only, and does not contain – nor should it be considered as containing – financial, investment tax or trading advice and recommendations; or a record of our trading prices; or an offer of, or solicitation for, a transaction in any financial instruments; or unsolicited financial promotions to you.
Any third-party content, as well as content prepared by XM, such as: opinions, news, research, analyses, prices and other information or links to third-party sites contained on this website are provided on an “as-is” basis, as general market commentary, and do not constitute investment advice. To the extent that any content is construed as investment research, you must note and accept that the content was not intended to and has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such, it would be considered as marketing communication under the relevant laws and regulations. Please ensure that you have read and understood our Notification on Non-Independent Investment. Research and Risk Warning concerning the foregoing information, which can be accessed here.
