Depressing example of hospital failing to mange the security of patient data when sending it off site.
I think the key element of this is that you may outsource the storage or destruction of data – but you do not and cannot outsource your responsibility to the patient for maintaining the confidentiality of their personal information.
As a result…South Shore Hospital in South Weymouth, Mass., has agreed to a $750,000 settlement for a 2010 data breach.