The document summarizes key points from a symposium on rethinking compliance. Some memorable quotes from speakers include that on average 205 days pass before a data security breach is discovered, that staff training should focus more on teaching people to rethink rather than just teaching the law, and that encryption alone is not enough to ensure security and that additional safeguards are needed. The document also lists common topics discussed at the symposium like information privacy, security risk analysis, training, and breach response.

1. Rethinking Compliance
A Symposium Synopsis
Provided by:

2. I attended University of the
Cincinnati’s 28th Annual
Corporate Law Center
Symposium- Rethinking
Compliance.

3. The Symposium had a lot of great
speakers, great information, and
food for thought. Here are some
memorable quotes from the
speakers:

4. • On average, 205 days lapse
between when a data security
breach occurs and it is discovered.

5. • Staff training is not about
teaching the law, it more about
teaching staff to re-think.

6. • If an unencrypted laptop is
stolen, the OCR wants to talk. The
laptop should have been encrypted
a long time ago.

7. • Deliberate disregard and
indifference is the same as
knowing.

8. • If no one is following
company policy, it is a red flag.

9. • Billing and HIPAA are my
biggest worries.

10. • The health care industry sends
3% of its technology budget on
security, while all other industries
spend an average 10%.

11. • 90% of breaches are caused
by failure to safeguard.

12. • 123456 and ‘password’ are
still the most common
passwords to be breached.

13. • Encryption is not enough. It
was on these surfaces and
hackers go in.

14. • Most people want to do the
right thing. It is a matter of
people knowing the right thing.

15. Information Privacy
• Security Risk Analysis
• Training
• Assessment – Breach
Response
• Tracking – Monitoring
For health plan, providers,
and Business Associates
www.gettinslaw.com 513-400-3895 mbgettins@gettinslaw.com