Informing patients about identity theft risk is not a strict legal requirement but not informing them could lead to serious consequences, not only for the individual involved but also for the hospital or clinical practitioner who decided not to inform the patients of identity theft risk. In this article we will look at a number of ideas to help you establish how, when and whether you should inform your patients about the possible risk of identity theft.
The first principle which you should always try to stick to is one of data security. Hopefully with proper security systems in place the need to inform patients about breaches in this security will be minimal. Data security involves systems such as secure passwords on all your computers, data encryption, anti-spyware software and any other security measures which your IT specialists may suggest. If these security measures are strictly adhered to and staff are trained in these and the importance of data privacy then informing patients about identity theft risk should only happen on the very rare occasion.
Some people feel that by informing patients too often of the risk of identity theft that they will become...