How ready is your clinic to protect patient data?

Most account break-ins start with a stolen or guessed password.

With shared logins, you can't tell who viewed or changed a patient record.

A backup drive plugged into the same computer can be locked by ransomware too.

Many clinics only discover their backups don't work when they need them.

Attackers target known weaknesses that updates have already fixed.

Patients' phones and laptops should never share a network with your patient records.

PHIPA expects health information custodians to have a contact person for privacy matters.

A written plan prevents rushed decisions, and certain privacy breaches must be reported.

A trained team is the best defence against fake emails and phone scams.

Vendors who can access patient information should be bound by clear written obligations.