Laptop Containing California Patients’ Information Stolen

How many times have we heard about such news? What is HIPAA doing about this? I’ve read all about HIPAA privacy and security practices and the liability that healthcare organizations face if they fail to maintain HIPAA standards. The only action that HIPAA has taken is to fine a healthcare organization in the WA state.

The reason for my rant here is because of the questions I get from people about the privacy and security of Personal Health Records (PHR) that are offered by corporations like Microsoft, Google, Wal-Mart, etc. Though these entities are not covered under HIPAA, I believe, they provide better privacy and security to patient information mainly due to their capabilities in using better and improved technologies that healthcare organizations don’t seem to use. What do you think?