Medical identity theft is a killer

Posted by Robert Siciliano on September 29th, 2009

Robert Siciliano is a NextAdvisor.com Expert Guest Blogger

Medical identity theft can make you sick. As I once eloquently explained on CBS's Early Show, if medical identity theft happens to you, "you're screwed." And it's true.

Medical identity theft occurs when the perpetrator uses your name and, in some cases, other aspects of your identity, such as insurance information, to obtain medical treatment or medication or to make false claims for treatment or medication. As a result, erroneous or fraudulent entries wind up on your medical records, or sometimes entirely fictional medical records are created in your name. Having somebody else's ailments noted on your medical records can create a great deal of confusion, potentially even negatively impacting your own health or medical treatment.

As of last week, a new rule requires health care providers, health plans, and other entities covered by the the Health Insurance Portability and Accountability Act (HIPAA) to notify individuals of any breaches of their medical information. A breach, in this case, is defined as, "the acquisition, access, use, or disclosure of protected health information in a manner not permitted [by the HIPAA Privacy Rule] that compromises the security or privacy of the protected health information."

Most states have required corporations to disclose data breaches for the past few years. Ever since the ChoicePoint breach in 2005, states have been implementing notification laws. At the time, ChoicePoint was only required to notify California residents. Once word spread that residents of other states had also been compromised in the breach, ChoicePoint became the poster child for what not to do in response to a data breach.

Since health care facilities often handle and store some of the same sensitive personal information that corporations do, these facilities are now subject to similar regulations. But protecting yourself from medical identity theft isn't as easy as protecting yourself from financial identity theft.

Medical statements and identification or insurance cards can be stolen from your mail and used to impersonate you. Install a locking mailbox to prevent this. You should also avoid carrying medical identification or insurance cards in your wallet unless absolutely necessary, such as when you have an actual appointment. Store these cards and other medical paperwork in a locked drawer or file cabinet, and shred sensitive documents before disgarding them. When you recieve a new card, destroy the old one.

If a thief can't steal your financial identity, your medical identity may be less attractive. Either get a credit freeze, set up your own fraud alerts, or invest in identity theft protection. Some identity theft protection services, such as TrustedID, monitor your medical records in order to detect medical identity theft.

Robert Siciliano, identity theft speaker, discusses medical identity theft on CBS's Early Show.

[youtube]http://www.youtube.com/watch?v=6IpSNameOkc[/youtube]

Robert Siciliano is CEO of IDTheftSecurity.com , an identity theft expert, professional speaker, security analyst, published author and television news correspondent. Siciliano works with Fortune 1000 companies and startups as an advisor on product launches, branding, messaging, representation, SEO and media. Siciliano's thoughts and advice on all these matters appear often in both the televised and print news media including CNN, MSNBC, CNBC, FOX, Forbes and USA Today. He has 25 years of security training as a member of the American Society of Industrial Security. He is the author of two books, including The Safety Minute: Living on High Alert; How to take control of your personal security and prevent fraud. He's also partnered with Uni-Ball to help raise awareness about the growing threat of identity theft and to provide tips on how you can protect yourself.