Physicians Practice - April 2008 - (Page 55)

THE TECH DOCTOR ARE YOUR DISCARDED PCs REALLY CLEAN? HOW TO ENSURE YOUR INFORMATION STAYS PROTECTED B Y J O N AT H A N M c C A L L I S T E R It’s inevitable. You purchase new PCs for your practice, and an employee approaches you with the question: “What are we doing with our old computers? My sister/cousin/neighbor/church could really use one, and if you’re just going to throw them out … (insert guilt here).” I’ve heard every variant of this question — posed by CEOs to receptionists alike — each looking to obtain a used PC for their son, daughter, church, charity, home ofﬁce, or use it as a component for their home stereo system (really). Before the Good Samaritan in you hands one of your replaced PCs over, there are a few things you may want to take into account before proceeding with this act of kindness. After all, no good (technology) deed goes unpunished. “BUT I PRESSED ‘DELETE’…” We’ve all seen TV crime dramas in which a tech-savvy criminal is tracked down by a team of experts who study data from his home PC — usually information he thought he’d erased. Data recovery is not just the stuff of television. When you hit the delete key, it rarely means that the ﬁle is gone forever. Often a remnant image of the ﬁle still exists on your computer’s hard drive. In most cases, deleting a ﬁle essentially tells your computer that new disk space is available for rewriting with new data … but the old data still exists until your computer writes over that available space. Imagine making all your ofﬁces’ ﬁles — and the personnel ﬁles of all your employees, including you — available to a complete stranger. WWW.PHYSICIANSPRACTICE.COM Besides your practice’s sensitive ﬁnancial information, some of those PCs may contain your entire patient base’s healthcare records, and perhaps their Social Security and credit card numbers as well. Such protected health information (PHI) is covered under HIPAA, which deﬁnes it as any “individually identiﬁable health information.” Could you sleep at night knowing that one of your transcriptionist’s old PCs may be in the hands of a tech-savvy college student? Inexpensive data recovery tools can be easily and inexpensively downloaded from the Internet. What if that same college student’s roommate resurrected some of your “deleted” transcription ﬁles? Is the gift worth the risk? What if that student starts printing out recovered radiology reports, medication lists, or workman’s comp visit notes? Do your donated PCs contain employee payroll ﬁles, physician credentialing applications, or even images from your personal digital camera? Many PCs also retain lists of Web sites you or your employees have visited as well as images from those sites. Are you nervously recounting in your head where those retired ofﬁce PCs you gave away last year may be sitting this very moment? Now that you’ve been incited to be prudently paranoid, what steps can you take to avoid these scenarios? PURCHASE PEACE OF MIND If you are uncomfortable or unskilled with PCs or don’t have access to professional IT experts on your staff, you have a couple of choices: You can retain someone who can scrub data from your old disk drives or you can purchase “disk sanitization” or “disk wiping” software, typically reasonably priced and relatively easy to use. One of the most-often referenced industry benchmarks for these drive sanitization software tools is the U.S. Department of Defense (DoD) rules for wiping hard drives clean. Most vendors selling thirdparty software for drive sanitization will cite their level of compliance with respect to the strict rules deﬁned by the DoD for disk drive wiping. With this in mind, you can select simple and affordable software that can give you the peace of mind that comes with knowing that you’ve signiﬁcantly lowered the likelihood of ever having any data recovered from your old drives. And your hand-medown PCs will still be useable by the lucky people who receive them. Of course, if you are uncomfortable doing the job yourself, you can hire an expert to do it for you. The money you pay up front to have your PCs certiﬁed as clean is inﬁnitesimal relative to your potential liability if your sensitive data makes it out of your practice and into the wrong hands. • You’ll be happy to hear that there’s an entire IT market segment waiting to come to your rescue. Jonathan McCallister has worked in healthcare IT management for more than eight years and in general IT management for more than a decade. He can be reached via bgabriel@physicianspractice.com. 55 APRIL 2008 | PHYSICIANS PRACTICE | http://WWW.PHYSICIANSPRACTICE.COM

Table of Contents Feed for the Digital Edition of Physicians Practice - April 2008

Physicians Practice - April 2008 Contents The Bigger Picture: Medicare Decision Time Letters Physicians Practice Pearls: Outsource Your Pain Noteworthy Cover Story: Trial Lawyers Tell All Management: When It’s Time to Change Ask the Experts Technology: Do You Know Where Your Data Is? The Tech Doctor: Are Your Discarded PCs Really Clean? Billing & Collections: Playing Hardball The Administrator's Desk: Recruiting for Patient Satisfaction Start It Up: Finance - Mastering the Numbers Game Coding The Great Practice Makeover: Taking Care of Business Associates Classifieds Advertiser Index

Physicians Practice - April 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.