Redspin, an information security company, has published an analysis of publicly available data on health information breaches reported to the Department of Health and Human Services since new rules under the HITECH Act of 2009 became effective. The report indicates the total number of records affected and the average number of records per incident both increased dramatically in 2011 as compared to 2010. Inadequate oversight and failure to encrypt data on portable devices contributed substantially to the increase.
