I’m Kate Dewhirst.

I’m a lawyer who writes about legal issues affecting healthcare in Canada

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

Cyber Risk Management – What’s a Privacy Officer to Do?

Posted by

Have you seen this tool from HIROC – the Health Insurance Reciprocal of Canada?

Cyber-Guide

If you are a Privacy Officer in healthcare – you should read this tool.  It’s great. It’s brand new – November 2017.

You may have a vague understanding of words like “ransomware” and “phishing” and “social engineering“.  And maybe you have team members who deal with the security aspects of your organization’s privacy program.  But any Privacy Officer needs to have more than a passing understanding of cyber risks.

The more you know, the better you are going to be at explaining these risks to your team members.

I’m not going to lie. Reading this guide is going to raise your blood pressure.

There are risks in here you probably never thought about before: like the notice issued in 2016 from Johnson & Johnson about their insulin pumps not being encrypted – which left them vulnerable to hacking.  That’s not good.  I have read other stories about cyber risks for implantable medical devices. We all need to keep up with changing technology and its associated risks.

Let me also reassure you that the guide gives practical step-by-step tips on how healthcare organizations can manage cyber risks and what you can do to equip your team to recognize and prevent cyber interference.

Take Action: If you are a Privacy Officer and you want to learn more about your role, I am doing an Advanced Privacy Officer course on January 16, 2018  (details coming soon) and my signature Privacy Officer course starts again in May 2018.  Email me for details: kate@katedewhirst.com


If you enjoyed this article please share it:


Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Team Privacy Training Events

September 17, September 24, October 16, October 24 and November 21

For Primary Care clinics, Children’s Aid and FHTs

Kate trains health professionals from many more primary care organizations how being privacy-respectful can improve therapeutic relationships. more details...

Speaking event

October 23, 2019

Osgoode Professional Development – Mental health Certificate

Kate joins the faculty for this training event. More details...

Primary care webinars: Contracts & Communications

September 5 and October 3, 2019, 12 noon

Part of Kate’s monthly webinar series.

Our September webinar is about understanding contracts you may be asked to sign, and in Octber our title is Managing incapacity in the workplace.

Full details of the 2019 webinar series and registration here.

Privacy Officer training

January 20 & 27 and February 3,10 & 18, 2020

Kate is the program chair for the Osgoode Certificate in Privacy in Healthcare.

This program explores the range of privacy interests that must be protected in the day-to-day treatment of patients, the development of information systems and the creation of institutional policies.More details ...

Advanced Privacy Officer training

December 10, 2019

For experienced Privacy Officers within healthcare organisations.

This one day training course focuses on how to handle difficult privacy situations using real-life (but anonymized) case studies and role-play. Full details and registration here...

Free healthcare privacy webinar - ask me anything!

August 7 and September 4, 2019, 10-11am EST

Free webinars - advance registration needed

Whether you're an experience privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

The Biggest Mistake Health Teams Make When Receiving Privacy Concerns. Claim your free privacy officer training vid… https://t.co/RKnmq5OdCU

about 19 hours ago

[Starts JAN 20] Globally, healthcare accounted for more privacy breaches than any other industry in 2018.… https://t.co/coT04cQ3E1

12:01 PM Aug 18th

contact details

901 King Street West Suite 400 East Tower
Toronto Ontario M5V 3H5

(416) 855 9557

.