Health care providers can protect PII by obeying EU's GDPR

Fraud examiners who work for health care providers should know the stipulations of the EU’s General Data Protection Regulation to protect patients from data breaches. The law also applies to U.S. organizations that provide care for EU citizens.

The global health care industry is facing multiple challenges as it tries to protect patients’ sensitive data from cybercriminals and fraudsters, especially during the COVID-19 age. Just in the U.S., health care organizations have endured at least 172 ransomware attacks since 2016 costing more than $157 million. (See the Feb. 11 comparitech article by Paul Bischoff.)

Here are some key questions about protecting the privacy of all personally identifiable information (PII):

The essence of the answers to these questions (and the first one in particular) lie in developed countries’ rules and regulations on privacy, such as these: