Tag: regulation

Health insurer tells watchdogs where to go

bad-dogIn the wake of a serious hacking, a US health insurer has resolved a problem with government watchdogs snuffling around a huge data leak by banning them from its networks.

Anthem Healthcare lost more than 80 million patient records raising a slight question about what it does about security.

However when the federal auditor asked to scan the company’s systems, it took the bold step of telling the watchdog to sling its hook.

The  Office of Personnel Management’s (OPM) Office of Inspector General, issued a statement saying that Anthem refused to allow the agency to perform “standard vulnerability scans and configuration compliance tests” this summer, as requested by the OIG. Worse: Anthem refused a similar request in 2013. In each case, Anthem cited “internal policies” that forbid outside access to its network as the reason for refusing to allow the vulnerability scans.

In other words, no you can’t look at our security because that would be a breach of security.

In its dealings with other insurers, the watchdog would have a problem, but OPM has the authority to conduct the audits on Anthem because that health insurer provides health plans to federal employees under the Federal Employee Health Benefits Program (FEHBP).

What Anthem appears to be worried about is that the watchdog might find out that its security problems go much deeper than a one off hacking.

An earlier OPM report filed in September 2013 and based on only limited access to Anthem’s network identified a number of concerns, from porous vulnerability scans that failed to include desktop systems to a loose configuration management program. In each case, Anthem (then Wellpoint) responded by arguing that its current processes were adequate.

DT boss calls for Google regulation

330ogleThe CEO of Deutsche Telekom has made a very precise call for Google and Facebook to be regulated in the same way that telcos are.

Tim Hoettges said that there was a convergence between over-the-top web companies and classic telcos and there needs to be one regulatory environment to rule them.

Improvements should be made to spectrum policy for the telecommunications industry, and that the loosening of regulation would encourage the type of investment that governments and policy-making bodies are currently seeking from carriers.

Hoettges said that policy-makers should leave telecoms groups adequate operational freedom to develop IoT-related services such as smart meters and intra-communicating cars, commenting: “We favour net neutrality, but we need to be allowed to have quality classes to enable new services in the Internet of Things.”

Being in favour of net neutrality is different from his US rivals who want everyone to pay them twice for a service that the rest of the world gets for half the price.

Interest in the possible government regulation of Google grows in line with the ever expanding services, reach and influence of Mountain View’s empire.

In fact there have been calls for the regulation of Google since 2012 when Dr Robert Epstein laid out some of the most popular arguments for the regulation of Google, partially-based on evidence, fines following controversies such as the extraction of wifi data during the gathering of photographic information for Google Maps, and partially on his view of Google’s real place in the economy as an ungoverned monopoly.

Austerity pressures hospital CIOs

nhsleafletEurope-wide austerity programmes and spending cuts are placing more and more pressure on healthcare providers and hospitals to shrink their spending, and a report from IDC Health Insights claims one viable option will be consolidating their IT systems.

Increasing efficiencies must be a priority for hospital procurement and implementation, IDC claims. They will be striving to offer the same level of care, quality and safety with less resources, so in turn, to stay afloat, they should offer services coordinated with other providers in their catchment areas.

Silvia Piai, IDC Health Insights EMEA research manager, said that in a resource stretched scenario, keeping IT in line with long term business objectives is not an easy task. “Hospitals’ CIOs have to architect for reusability, interoperability, and scalability when implementing new enterprise and line of business solutions, Piai said. “Just keeping the lights on for the existing systems will only drive them to a budget-cut vortext”.

Hospital IT departments are usually driven, IDC pointed out, by regulation compliance. Other aspects in chain management and governance are underestimated, and this leans on a hospitals’ capabilities in risk management.

Top on the agenda for hospital CIOs at the moment is electronic medical records. Health information exchange exchange focusing on cooperation with other providers “is still relatively low,” IDC said. High investments are being put into e-procurement, business intelligence and analytics.

Speaking with over 100 European hospital executives about their business priorities, IDC noted that pressure to reduce public expendiature is reflected in hospitals’ needs to improve performance and IT costs. Strong financial and legal penalties for failing to meet regulatory requirements in emerging areas such as data capture, retention, protection and security are ultimately determining the course of hospital IT investment.

IDC notes change management will include alternative governance models and this challenge is being underestimated in IT. It will bring together physicians and nurses from different care centres, IDC said, or changes in funding models that offer incentives for care and collaborative culture.

E-fags cause regulatory stink

efagThe days when sparking up a fag with a drink in the warmth in public is a misty memory for those who live in the UK.

Instead smokers have had to endure the cold, snow, and often spaces smaller than a battery farm in a bid to get that nicotine hit after a meal at a UK restaurant, in a bar or in a club.

However, it seemed that some smokers’ problems were stubbed out thanks to the E-cigarette, which steam rolled into the market.

Marketed as a lower risk option to smoking and a way to help quit the habit, this new product
also had the added extra of allowing people to “smoke” inside.

The e-cigarette comes in two parts. One end contains the liquid nicotine, while the other has a rechargeable battery and an atomiser.

When the user inhales, the liquid nicotine is vaporised and absorbed through the mouth.

As there is no tobacco in these products, there is no harmful, and potentially lethal tar, and the “smoke” that these emit is mainly water vapour.

According to the charity Action on Smoking and Health (ASH) around 700,000 people in the UK were using e-cigarettes last year, with around 300,000 more predicted to use these this year.

However, new proposals could now see the industry, which has around 100 manufacturing companies, go up in, er,  smoke.

Earlier this year the British Medical Association (BMA) called for more regulation and research around these products, advising  health professionals to use regulated and licensed nicotine replacement therapy instead to help patients stop smoking.

It is also calling for restrictions to the marketing, sale and promotion of e-cigarettes, and for clear labelling on the contents of cartridges and their safe use.

In an updated online briefing, it pointed out that these battery-operated devices were not licensed as a medicine in the UK and there was a lack of peer-reviewed evidence on their value in helping smokers cut down or stop.

It also said there were concerns that the use of e-cigarettes could threaten the norm of not smoking in public places and workplaces.

BMA director of professional activities Vivienne Nathanson said: ‘It took us many decades and hundreds of thousands of deaths to understand the connection between cigarette smoking and disease. We must not encourage use of a new system of nicotine delivery when we are unsure about its safety, or efficacy as a means of stopping smoking.

‘We are especially concerned that e-cigarettes might reinforce the smoking habit as they are designed to closely mimic smoking actions.’

The UK Medicines and Healthcare products Regulatory Agency is set to report on nicotine product regulation this spring.