Prior to that, however, the FDA had already announced its intention to issue a proposed rule giving the agency regulatory oversight of LDTs.
“The FDA has continually supported the passage of the VALID Act by Congress,” attorney Charles Dunham IV, a Shareholder at Greenberg Traurig LLP in Houston, told Dark Daily. “In fact, there is speculation that the VALID Act will be attached to the Pandemic and All Hazards Preparedness Act as it moves through Congress.”
“The FDA may not actually proceed with promulgating rules to regulate LDTs if it is concerned it will not be successful in court if the rules are challenged, which would happen,” said attorney Charles Dunham IV (above), a Shareholder at Greenberg Traurig, LLP. Clinical laboratory leaders can learn more from Dunham during a panel discussion at next week’s 2023 Executive War College on Diagnostics, Clinical Laboratory, and Pathology Management in New Orleans. (Photo copyright: Greenberg Traurig LLP.)
Arguments For and Against FDA LDT Regulation of LDTs
Supporters of the VALID Act contend that putting LDTs under FDA regulation will lead to improved patient safety and less review for low-risk tests. Their argument is that LDTs should undergo the same FDA review and approval process as other medical devices.
Hospital laboratory managers and pathologists—particularly in academic medical center laboratories—have largely opposed FDA regulation of LDTs. They prefer to keep the current setup under which lab-developed tests are validated under the Clinical Laboratory Improvement Amendments of 1988 (CLIA). They argue that FDA intervention will slow down development of new tests.
In response, an FDA official indicated during the American Clinical Laboratory Association’s (ACLA) annual meeting on March 1 that the federal agency plans to issue a proposed rule to regulate LDTs, BioWorld reported. That rulemaking has not yet emerged. It’s possible the FDA will wait and see what happens in Congress with the VALID Act.
“Some legal experts have suggested that one significant new legal challenge FDA may face is the Supreme Court’s West Virginia v. EPA decision last summer that limited the ability of the EPA to cap power plant emissions by regulation due to the EPA’s lack of explicit congressional authority to do so,” said Gee, who also will appear on the Executive War College legal panel next week.
“The West Virginia v. EPA ruling provides support for those in the clinical lab industry who point to the FDA’s lack of clear statutory authority to regulate LDTs and therefore fundamentally disagree with FDA’s longstanding position that LDTs are medical devices subject to FDA’s authority to regulate,” he added.
Actions Clinical Laboratory Managers Can Take
Clinical laboratory managers who want to share their thoughts about the future of LDT regulation may want to take one or both of the following actions:
Contact their representatives in Congress.
Find out whether any trade associations they belong to have taken a position on the VALID Act.
Clinical laboratory professionals should monitor the VALID Act’s progress while also paying attention to industry groups and manufacturers that support or oppose the bill.
Doing so will provide a clearer indication of who has the most to gain or lose should the legislation be passed. Pathologists and medical laboratory managers should also remain alert for further efforts by the FDA to issue proposed rulemaking to regulate LDTs.
As a deployable medical laboratory, the 1st AML is designed to run field-based clinical laboratory diagnostics and conduct health threat assessments
Clinical laboratory professionals may be surprised to learn that the US Army has a deployable medical laboratory that is equipped to perform the same menu of basic lab tests as their labs here in the United States, but in support of army units deployed in the field. At the same time, the Army’s deployable medical lab has the added responsibility of testing for infectious diseases and chemicals/agents that could be used by terrorists or enemy forces.
“The 1st Area Medical Laboratory identifies and evaluates health hazards through unique medical laboratory analyses and rapid health hazard assessments of nuclear, biological, chemical, endemic disease, occupational, and environmental health threats,” according to an Army new release.
A recent visit by the leaders of this lab unit to meet with their counterparts in Poland highlights the important diagnostic work the military prepares for by using this one-of-a-kind clinical laboratory model.
Col. Matthew Grieser (left), Commander of the 1st Area Medical Laboratory (AML) is shown above meeting with Col. Przemysław Makowski, MD, (right), Deputy Commander of the Military Preventive Medicine Center in Wrocław, Poland. Leaders from the US Army’s 1st AML visited military and medical officials in Poland. “It was a great opportunity to meet our Polish counterparts and to learn from one another,” said Grieser in an Army news release. “We intend to continue to strengthen this relationship … Poland is a great ally, and it was an honor to visit our counterpart organizations.” (Photo copyright: US Army.)
Role and Makeup of the 1st Area Medical Laboratory
The 1st AML traces its roots back to World War II, where it was one of 19 field laboratories spun up in 1944. It was deactivated after the Vietnam War and then reactivated in 2004. It is currently the Army’s only deployable field laboratory, according to the National Library of Medicine.
This specialized unit deploys worldwide to conduct threat detection and medical surveillance, according to the Army. For example, the military can send the 1st AML to locations where samples cannot quickly be transported to a fixed facility, or where there is a need for immediate hazard identification due to chemical or biological contamination or epidemic disease.
During the Ebola outbreak in Liberia in 2014-2015, the 1st AML operated four blood-testing laboratories and helped oversee two others manned by Navy personnel. The goal was to perform quick turnaround times to identify local residents who carried the disease, all while operating with extensive safety measures. More than 4,500 samples were tested during a six-month stay, Army Times reported.
Commanders from the 1st AML recently met with medical officials and chemical, biological, radiological, and nuclear experts from the Polish Armed Forces in the Warsaw area of Poland, the Army news release noted.
“It was a great opportunity to meet our Polish counterparts and to learn from one another,” said Col. Matthew Grieser, Commander of the 1st AML.
Maj. Suzanne Mate, the Chief of chemical threat assessment for the 1st AML, said meeting with allies helps to keep NATO ready for any contingency.
“It’s better to know your partners before you have to work together in a high-consequence situation,” said Mate in the Army news release. “We learned the strengths in different mobility platforms for laboratories and the capabilities within fixed scientific institutions to maintain standards and currency in chemical, biological, and radiological [CBR] investigations.
“This knowledge is invaluable when determining how to move a sample quickly and efficiently to characterize a suspected CBR threat when airlift resources are constrained or country treaties prevent movement activities,” she added.
Observant clinical laboratory managers will note similarities between their own jobs and those of the 1st AML. The military needs lab-based capabilities to perform a menu of diagnostic tests in support of Army units in the field and traditional clinical laboratories do the same in support of the healthcare providers they service.
Hospital-at-home programs like that of Atrium Health are a trend that may create new opportunities for local clinical laboratories to support physicians treating patients in the comfort of their own homes
Here is a deal that shows the hospital-at-home (HaH) movement is gaining momentum, a trend that clinical laboratories need to recognize for the opportunities it represents. Best Buy Health is partnering with 40-hospital Atrium Health in an HaH program that the healthcare system plans to scale nationally.
This newly-announced collaboration means that Charlotte, North Carolina-based Atrium Health—as partner—may include the hospitals and providers that are part of the 26-hospital Advocate Aurora Health system (now known as Advocate Health), a non-profit healthcare system that Atrium merged with in December of 2022. Providers and hospitals from North/South Carolina, Georgia, Wisconsin, Illinois, Indiana, and Ohio all could be participating in the new HaH venture.
This latest partnership between a retail giant and healthcare network demonstrates how innovation is working its way into the US healthcare system via companies not traditionally involved in direct patient care. These two organizations see an opportunity to combine their strengths to “enhance the patient experience of receiving hospital-level care at home,” according to a Best Buy news release.
“This is the coming together of technology and empathy,” said Rasu Shrestha, MD (above), Executive Vice President and Chief Innovation and Commercialization Officer at Advocate Health, in a press release. “We’re able to leverage the power of social workers, paramedics, nurses and physicians, but also technology to take care of the patients in their homes. We can bring forward things like remote patient monitoring and sophisticated wearable devices that capture their vital signs and combine it with the human touch—bringing it directly into our patients’ homes.” Clinical laboratories that support providers in the states Advocate Health serves may want to contact Best Buy Health. (Photo copyright: Advocate Health.)
Dispatching Geek Squads to Support Telehealth in Patients’ Homes
Best Buy Health brings to its collaboration with Atrium Health expertise in omnichannel business strategies, supply chain, and a platform to enable telehealth connectivity between patients and providers, as well as deploying specially trained Geek Squad agents for in-home support, according to an Atrium Health press release.
“With Atrium Health, we want to help enable healthcare at home for everyone. It’s getting the devices to the home when Atrium Health and the patient needs them,” said Deborah Di Sanzo, President of Best Buy Health.
Atrium Health sees Best Buy Health as a partner that can grow its program while addressing complex in-home technology that can be “tricky” to operate, Retail Dive reported.
“This transition that happens from discharging a patient from a hospital to the void of their home is the dark side of the moon: it’s disconnected, confusing, expensive. What we’ve been doing in the past is working through our hospital-at-home program and putting together a lot of these devices,” Rasu Shrestha, MD, Executive Vice President and Chief Innovation and Commercialization Officer at Advocate Health, told Fierce Healthcare.
“By working with Best Buy Health, we’re developing the seamless connected care experience and an opportunity to truly scale this,” he added.
Supporting hospital-at-home services in collaboration with Atrium Health will be a new role for at least some members of the Geek Squad. “They won’t necessarily be the same team that’s doing your home theater. They will be Geek Squad agents specially trained in health to deliver specific services in the home,” said Deborah Di Sanzo, President of Best Buy Health. (Photo copyright: Best Buy.)
Best Buy’s Healthcare Acquisitions and Growth in Hospital-at-Home Programs
Current Health, a remote monitoring care-at-home platform, in 2021.
While Best Buy was busy acquiring healthcare companies, more HaH programs popped up across the US due in part to rising inpatient costs and providers’ need to be more efficient and resourceful.
Atrium Health started its Hospital-at-Home program in March 2020 as a way to care for COVID-19 patients. The HaH program now serves people with:
According to Healthcare Dive, Shrestha claimed Atrium’s HaH program “has served more than 6,300 patients and freed 25,000 hospital bed days since it launched in March 2020,” and produced clinical outcomes that were “the same or better” when compared to the health systems’ own hospitals, and with higher patient satisfaction scores.
“We anticipate the partnership will combine Atrium Health operational and clinical expertise with Best Buy Health’s technical and logistical expertise to allow us to scale the program to 100 patients at a time and beyond within our market,” Shrestha told Healthcare Dive. “When you put that into context, this would be the equivalent of having an additional mid-sized hospital and have a real impact on capacity in our bricks-and-mortar facilities.”
Taking Atrium’s HaH Program Nationwide
According to federal Centers for Medicare and Medicaid Services predictions, healthcare spending will reach $6.8 trillion by 2030. This might explain why Best Buy increased its investment in healthcare at the same time its sales declined 9.3% in the fourth quarter of 2022 amid softening consumer demand for electronics, Reuters reported.
And, according to Forbes, though financial terms on the Best Buy/Atrium Health partnership were not released, additional investments are planned to “scale [Atrium’s HaH program] beyond the system.”
“We combine our omnichannel, Geek Squad, caring centers, and Current Health services to enable care,” Di Sanzo told Forbes. “At scale, no other company has the holistic combination of resources that when combined, will change the lives of consumers and enable them to heal right in their own home surrounding by the people and things they love the most. Those strengths, combined with Atrium Health’s extensive clinical expertise and deep experience leading in virtual care, will help us improve and enable care in the home for everyone.”
Clinical Laboratory Testing at Home
Clearly there are opportunities for clinical laboratories to support providers who treat patients in their homes. Lab leaders may want to reach out to colleagues who are planning HaH programs in partnership with Best Buy Health, Atrium Health, or other companies around the nation launching similar hospital-at-home programs.
As medical laboratories address staffing challenges, HaH strategies for performing blood tests and other diagnostics on patients in their homes could lead to important new revenue.
New federal funds likely to spark additional growth in hospital-at-home programs across the US while creating need for clinical laboratories to serve these homebound patients
In one of the latest examples of health systems’ providing acute care to patients outside of traditional hospital settings, Orlando Health announced its launch of the Orlando Health Hospital Care at Home program serving central Florida.
According to an Orlando Health press release, “The Orlando Health program is the first in Central Florida to be approved for Medicare and Medicaid patients, with future plans to expand the service for patients with private insurance and at other Orlando Health locations. It is an extension of a federal initiative created during the height of the COVID-19 pandemic to increase hospital capacity and maximize resources.”
Orlando Health is a not-for-profit healthcare system with 3,200 beds at 23 hospitals and emergency departments. It is the fourth largest employer in Central Florida with 4,500 physicians and 23,000 employees. Its Hospital Care at Home program serves patients who meet clinical criteria with 24/7 telehealth remote monitoring and virtual care from the Orlando Health Patient Care Hub. In-person nursing visits are also offered daily, according to Orlando Health.
“Orlando Health wanted to be able to provide a different level of care for its patients and give them a different opportunity to be cared for other than the brick-and-mortar of the hospital,” Linda Fitzpatrick (above), Assistant Vice President for Advanced Care at Orlando Health told Health News Florida. “We’ll have decreased infectious rates in their homes, decreased exposures. It is a healthier and happier place to be in order to heal.” Clinical laboratories in the Orlando area will have the opportunity to serve healthcare providers diagnosing patients in non-traditional healthcare settings. (Photo copyright: Orlando Sentinel.)
Lowering Costs and Avoiding In-hospital Infections, Medical Errors
Treating patients at home, even after inpatient visits, can save them money. At the same time, patients are more comfortable in their own homes and that contributes to faster recoveries.
“[We’ll be able to measure] heart rate, respiration, temperature, and blood pressure. We’ll also do video conferencing from that location with the patient. We’ll have nurses going to the patient’s home at least twice a day,” interventional cardiologist Rajesh Arvind Shah, MD, Senior Medical Director of Hospital Care at Home, Orlando Health, told Health News Florida.
Orlando Health patients can be safely treated in their homes for many conditions including:
According to the American Hospital Association (AHA), “many are seeing the hospital-at-home model as a promising approach to improve value. … This care delivery model has been shown to reduce costs, improve outcomes, and enhance the patient experience. In November 2020, the Centers for Medicare and Medicaid Services launched the Acute Hospital Care at Home program to provide hospitals expanded flexibility to care for patients in their homes.”
Hospital-in-the-Home (HITH) is considered by many experts to be safer for patients, as they are not exposed to nosocomial (hospital-acquired) infections, falls, and medical errors. In its landmark “To Err is Human” report of 1999, the Institute of Medicine (IOM) estimated that medical errors killed as many as 98,000 patients in hospitals annually.
And in “Australia’s Hospital-in-the-Home Care Model Demonstrates Major Cost Savings and Comparable Patient Outcomes,” we predicted that wider adoption of that country’s HITH model of patient care would directly affect pathologists and clinical laboratory managers who worked in Australia’s hospital laboratories. Having more HITH patients would increase the need to collect specimens in patient’s homes and transport them to a local clinical laboratory for testing, and, because they are central to the communities they serve, hospital-based medical laboratories would be well-positioned to provide this diagnostic testing.
New Federal Funds for HITH Programs
One recent impetus to create new HITH programs was the passing of the Consolidated Appropriations Act, 2023 (HR 2617). The federal bill includes two-year extensions of the telehealth waivers and Acute Hospital Care at Home (AHCaH) individual waiver that got started during the COVID-19 pandemic.
As of March 20, the federal Centers for Medicare and Medicaid Services (CMS) listed 123 healthcare systems and 277 hospitals in 37 states that had been approved to use the AHCaH wavier.
Now that federal funding for AHCaH waivers has been extended, more healthcare providers will likely start or expand existing HITH programs.
“I think [the renewed funding] is going to allow for additional programs to come online,” Stephen Parodi, MD, Executive Vice President External Affairs, Communications, and Brand, Permanente Federation; and Associate Executive Director, Permanente Medical Group, told Home Health Care News.
“For the next two years, there’s going to be a regulatory framework and approval for being able to move forward. It allows for the collection of more data, more information on quality, safety, and efficiency of these existing programs,” he added. Parodi also oversees Kaiser Permanente’s Care at Home program.
Labs without Walls
Clinical laboratories can play a major role in supporting HITH patients who require timely medical test results to manage health conditions and hospital recovery. Lab leaders may want to reach out to colleagues who are planning or expanding HITH programs now that federal funding has been renewed.
Even US military clinical laboratories strive to cut costs, protect quality, and improve outcomes
Defense Health Agency (DHA), a part of the federal Department of Defense (DOD), recently launched a plan to consolidate healthcare facilities within certain geographical regions and to unify and integrate the military’s clinical laboratory operations in those areas. The goal is to streamline efficiencies and lower costs while maintaining quality lab testing services.
The DOD operates a nationwide network of medical treatment facilities (MTFs) that include state-of-the-art clinical and anatomic pathology laboratories serving military personnel and their families. These military labs face the same issues of cost, efficiency, and outcomes as do civilian clinical laboratories throughout the United States.
To address those challenges and bring together clinical laboratory services in specific regions, the DHA established the Tidewater Market in April of 2021 to serve select US Air Force, Army, and Navy MTFs in the Washington DC metro area, central North Carolina, Jacksonville, and coastal Mississippi.
Tidewater is the fifth Military Health System (MHS) market created to manage MTFs as they transition into the DHA.
Health.mil—a website maintained by the MHS as an informational resource for those it serves—describes the MHS as “one of America’s largest and most complex healthcare institutions, and the world’s preeminent military healthcare delivery operation.
“Our MHS saves lives on the battlefield, combats infectious disease around the world, and is responsible for providing health services through both direct care [at military hospitals and clinics known as ‘military treatment facilities’] and private sector care to approximately 9.6 million beneficiaries, composed of uniformed service members, military retirees, and family members,” Health.mil notes.
With 9.6 million beneficiaries, MHS is one of the largest healthcare service organizations operating in the United States.
“The establishment of this market provides a true opportunity to optimize healthcare for our beneficiaries by focusing on outcomes and access across the Tidewater market,” said Navy Rear Admiral Darin Via, MD, Tidewater market manager, in an MHS/DHA news release. “It also allows us to work towards standardization of processes, creating an easier environment for our patients to navigate within.” (Photo copyright: US Navy.)
Finding Efficiencies, Optimizing Clinical Laboratory Processes and Services
In an article outlining the Tidewater Market clinical laboratory initiative, Health.mil noted that “A market is a group of MTFs in one geographic area working together with its TRICARE partners, Veterans Affairs hospitals, other federal healthcare organizations, private sector teaching hospitals and medical universities, as well as other healthcare partners. Markets operate as a system to support the sharing of patients, staff, budget, and other functions across facilities to improve readiness and the delivery and coordination of health services.”
The Tidewater Market provides integrated, affordable, high-quality healthcare services to active-duty service members, military retirees, reservists and national guardsmen, and their families. The market currently serves more than 390,000 beneficiaries.
In 2022, the Tidewater Market Laboratory/Pathology Integration Working Group was created to optimize services while reducing costs within the market. The group was created by US Navy Captain Stacie Milavec, who has more than 23 years of experience in military medicine.
“One of DHA’s goals with setting up a market structure is to find efficiencies and optimize and standardize processes and services wherever possible,” Milavec said in an MHS/DHA news release. “We’ve been able to do exactly that by collaborating within our working group.”
Resource Sharing between Military Clinical Laboratories
The MTFs that are geographically close to each other helped expedite turnaround times for testing results. By working together, they saved the Tidewater Market an estimated $80,000 during fiscal year 2022.
One of the methods they used to streamline testing and lower costs was to allow resource sharing between facilities within the market. For example, the full-service clinical laboratory located at the Naval Medical Center Portsmouth (NMCP) began performing head and neck pathology cases, breast biopsies, and PAP testing for some of the other facilities within the Tidewater Market. These services were previously performed by other means and in some cases were sent to commercially-contracted clinical laboratories for analysis at a high cost.
The NMCP also took on Human Papilloma Virus (HPV) testing for all MTFs within the market.
In February of 2023, NMCP began taking on additional clinical chemistry tests from the 633rd Medical Group at Joint Base Langley-Eustis located in Hampton, Virginia. Prior to that collaboration, those tests were sent out to contracted labs off-base for analysis.
“[Through collaboration between the MTFs] we’ve been able to successfully transition civilian marketplace send-out testing back into the military market by utilizing market resources,” said pathologist US Air Force Captain Dianna Chormanski, MD, Laboratory Medical Director with the 633rd Medical Group at Joint Base Langley-Eustis, in the press release. “I’m a big fan of cooperation and working together, and that’s what a market should be.”
The DHA established the market-based structure as part of the National Defense Authorization Act for Fiscal Year 2017. It’s an example of regional laboratory consolidation within one region of the US where a common effort brought together clinical laboratories operating on military bases of different services. The military’s goal was a unified, integrated medical laboratory operation that could deliver targeted cost savings while maintaining quality lab testing services. It appears to be successful.
Recent intrusions into the hospitals’ IT systems resulted in blocked medical records including medical laboratory data
Healthcare cyberattacks continue to be a threat that bring potentially costly business consequences for clinical laboratories. Just in the past month, two hospital systems had their health information technology (HIT) systems disrupted due to security incidents. In response, the hospitals’ medical laboratories were forced to switch from digital to paper documentation and, in at least one case, the organization reportedly had difficulty accessing electronic laboratory test results.
At Tallahassee Memorial, an “IT security issue” on Feb. 2 resulted in the organization shutting down its IT systems for 13 days, including at its clinical laboratory. The hospital’s computer network went back online on Feb. 15, according to a news release.
At Atlantic General Hospital, according to an AGH news release, IT personnel discovered a ransomware attack on Jan. 29 that affected the hospital’s central computer system. As a result, the walk-in outpatient laboratory was closed until Feb. 14.
These recent cyberattacks underscore the importance for clinical laboratory leaders to have plans and procedures already in place prior to a disruption in access to critical patient data.
Healthcare cyberattacks can be a “complete blindside for a lot of organizations that think they have protections in place because they bought a product or they developed a policy,” said Ben Denkers (above), Chief Innovation Officer at CynergisTek, an Austin, Texas-based cybersecurity company, in an exclusive interview with The Dark Report. Since clinical laboratory test results make up about 80% of a patient’s medical records, disruption of a hospital’s IT network can be life threatening. (Photo copyright: The Dark Report.)
Laboratory Staff Unable to View Digital Diagnostic Results at Tallahassee Memorial
Though the exact nature of the incident at Tallahassee Memorial HealthCare has not been divulged, hospital officials did report the incident to law enforcement, which suggests a cyberattack had occurred.
Electronic laboratory test results were among the casualties of the IT difficulties at TMH. “Staff have been unable to access digital patient records and lab results because of the shutdown,” a source told CNN.
Attempts by Dark Daily to reach a medical laboratory manager for comment at TMH were unsuccessful. However, in a news release posted online shortly after the cyberattack, the health system advised staff members on dealing with the IT outages.
“Patients and families may notice the switch to paper documentation during registration, admission, or during their care, as our providers will be using paper forms, prescription pads, handwritten notes, or other similar paper methods where they may usually use an electronic process,” the news release stated. “We apologize for any delays this may create. We practice for situations like this, and we are prepared to provide safe, high-quality care to our patients during computer system downtimes.”
Atlantic General Hospital Reports Ransomware Incident to the FBI
At Atlantic General Hospital, the outpatient walk-in laboratory and outpatient imaging department both temporarily closed because of the ransomware attack.
Staff members throughout the hospital were “forced to manually check patients in and out of appointments and record all other information by hand instead of online,” Ocean City Today reported.
The hospital immediately informed the FBI of the ransomware incident and continues to work with an incident response team to determine whether criminals accessed any sensitive data. It was not clear whether the organization ultimately paid a ransom to unlock its systems.
The hospital’s medical laboratory director did not respond to an email from Dark Daily seeking further comment.
Healthcare Cyberattacks Attempt to Gain Access to Data
Therefore, it is critical that clinical laboratory and hospital staff work with their IT counterparts to verify that technology and processes are in place to protect access to patient data.
In “Labs Must Audit Their Cybersecurity Measures,” Ben Denkers, who at that time was Chief Innovation Officer at CynergisTek, a cybersecurity firm based in Austin, Texas, told The Dark Report, “Testing, validating, and auditing whether measures are working as designed is a change of mentality for a lot of organizations.” (If you don’t subscribe to The Dark Report, try our free trial.)
An IT network attack is an attempt by a cybercriminal to gain unauthorized access to devices that contain and exchange data within an organization. Although this information may be on individual devices or on servers, network attacks are often only possible after a hacker enters a system through an endpoint, such as an individual’s email inbox.
“It’s important to understand that while the network server itself might have ultimately been the target, that doesn’t necessarily mean that it was compromised first,” Denkers told The Dark Report. “Phishing is a perfect example of a way an attacker could first gain access to a workstation, and then from there move laterally to a server.”
The final cost of a healthcare cyberattack often exceeds the ransom. Media coverage can lead to an organization’s diminished reputation within the community, and if protected health information (PHI) is accessed by the criminals, a hospital or health system may need to pay for identity theft monitoring for affected patients.
There also are regulatory repercussions that can be costly depending on the circumstances surrounding a cyberattack. For example, on Feb. 2, the US Department of Health and Human Services’ Office for Civil Rights announced a settlement with Banner Health Affiliated Covered Entities (Banner Health), a nonprofit health system headquartered in Phoenix, to resolve a data breach resulting from a hacking incident in 2016. That incident disclosed PHI for 2.81 million patients.
As part of the settlement, Banner Health paid a $1.25 million penalty and will carry out a corrective action plan to protect PHI in the future and resolve any alleged HIPAA violations, according to the HHS Office for Civil Rights.
This hefty penalty is a reminder to pathologists and clinical laboratory managers that—when it comes to cyberattacks—the classic adage “an ounce of prevention is worth a pound of cure” is appropriate advice.