The HIPAA legislation and privacy rule were written at a time when medical identity theft was not foremost on the minds of policymakers. While health care fraud as a general issue was definitely on lawmakers minds (as is evidenced by the specific anti-fraud provisions in HIPAA), medical identity theft and its specific consequences were not.

-DATA BREACHES AND MEDICAL IDENTITY THEFT
-THE NATIONAL HEALTH INFORMATION NETWORK AND MEDICAL IDENTITY THEFT
-CURRENT AUDIT SYSTEMS DO NOT RESOLVE THE PROBLEM
-DIGITAL SECURITY ISSUES IN THE NHIN AND OTHER HIGHLY DIGITIZED, VIRTUALIZED ENVIRONMENTS
-PHYSICAL SECURITY ISSUES IN A MEDICAL ENVIRONMENT

-THE NECESSITY OF A COMPREHENSIVE RISK ASSESSMENT
-LEGITIMATE DRUG TRIALS AND MEDICAL RESEARCHERS NEED TO DIFFERENTIATE THEMSELVES FROM FRAUDSTERS
-FURTHER STUDY: GETTING A GRASP OF THE SIZE, SCOPE, INCIDENCE OF THIS PROBLEM IS CRUCIAL

-CONCLUSION
-CREDITS
-REPORT AUTHOR
-FOR MORE INFORMATION

Financial privacy — Joint comments filed by EPIC, Privacy Rights Clearinghouse, and World Privacy Forum.