New data reveals that the number of healthcare data breaches continues to climb, causing financial and reputational damage to healthcare providers. HIPAA Journal reported 692 large healthcare data breaches between July 2021 and June 2022 that exposed the records of over 42 million individuals. The number of records breached in June 2022 was more than 65% higher than the monthly average over the previous year, highlighting the need for providers to stay on top of their game when it comes to protecting patient data. In a recent conversation with PYMNTS, Chris Wild, Experian Health’s Vice President of Adjacent Markets and Consumer Engagement, discussed the consequences of healthcare data breaches and set out the key steps providers should take to prevent and resolve security incidents. Compromised patient records send financial and reputational costs soaring IBM reports that financial damages resulting from data breaches have reached a 12-year high, with the average breach in healthcare costing $10.1 million, up nearly $1 million since 2020. Wild notes that this includes a huge range of costs, from HIPAA fines to operational costs to curb and resolve breaches: “The cost of dealing with a breach is enormous. There’s anything from penalties of $100 per incident to $1.5 million per year. You’ve got reconciliation costs – trying to patch the holes in technology stacks and things like that. You’ve also got inbound phone calls from concerned patients who’ve just heard about a breach and want to know if it impacts them.” But Wild says that beyond HIPAA fines and operational expenses, the greatest cost is repairing the reputational damage of breaching patient trust: “the reputational cost is enormous because once you lose a patient, you lose a patient.” Wild suggests a two-pronged approach to mitigate the risk and impact of a healthcare data breach that focuses on prevention and preparation. Protecting patient identities to deliver a satisfying and secure consumer experience  An unfortunate side effect of the accelerated adoption of digital health solutions during the pandemic was that it opened the door to new methods of medical crime and fraud. Patients interact with their data electronically more often, thus increasing their vulnerability to cyber-criminal attacks. Preventing infiltration by bad actors before they occur should be the priority. In the past, efforts to secure a patient’s identity have relied on personal security questions, considered unanswerable by anyone but the patient. However, Wild says that asking for past addresses and details of previous living arrangements may no longer be the gold standard: “We’re finding that this is a little bit passé now. There’s a lot more that goes into identifying somebody, and that goes along with improving security, but it also improves the patient experience. There’s always been a balance between trying to make sure that data is secure on the one hand, but also make sure that it’s easy to access on the other.” To this end, providers should look for patient engagement solutions that deliver a flexible, convenient and consumer-friendly patient experience, while ensuring that patient data is secure. Wild suggests a few specific strategies, such as monitoring device ID and validating the identification documents used during patient registration: “When you have your cell phone or your tablet or your laptop, or your computer, or even your voice assistant devices, they all have a device ID. We keep track of those and see which ones are being naughty, which ones are being nice. We can start to ramp up when we see a naughty device acting naughty. But also think about things like document verification, validating that a driver’s license being shown to a registrar is actually a real driver’s license, or things of that nature.” A multi-layered approach to securing patient portals and other digital patient access tools will ensure there is no single point of vulnerability. Experian Health’s patient portal security solutions with Precise ID include a range of protections, including two-factor sign-in authentication, device intelligence and additional checks on risky requests to proactively secure patient identities. Each element protects against a specific type of threat, building up defensive depth to thwart attempts to breach patient data. Responding quickly in the event of a healthcare data breach Prevention only goes so far, though. Evidence suggests that most healthcare providers will be hit by a data breach at some point. Wild suggests that regular “fire drills” can help ensure that everyone in the organization knows how to respond, should the worst happen: “For a healthcare data breach or any sort of misappropriation of patient or member data, you want to make sure you’re keeping things safe, keeping things secure, and make sure that all of the associated people know what to do.” Wild says this must include front desk staff who will be answering phones from worried patients, through to marketing teams who will need to put out proactive messages about what happened and how it will be dealt with. How a provider responds may have an even greater impact on their reputation and patient loyalty than the breach itself. All of this can be pulled together in a data breach response plan, which sets out exactly what needs to be done and by whom, to help organizations avoid missteps in the aftermath of a breach. Experian Health’s Reserved ResponseTM program can help healthcare organizations put together a data breach preparedness plan in as little as three days. The program is based on 17 years of real-world experience dealing with data breaches and has evolved as security threats and consequences have increased. The program offers providers guides, templates, checklists and service-level agreements to guarantee manpower, infrastructure and response readiness at the most crucial moments. As the uptake of patient portals and other digital patient access solutions accelerates, finding the right data security partner to help navigate the unprecedented threats and consequences will be essential. Watch the full interview with Chris Wild and find out more about how Experian Health helps healthcare providers protect patient identities to prevent healthcare data breaches.

Telehealth access is here to stay. Healthcare providers should consider these 3 steps to maximize the opportunities that come with delivering virtual care.

As the COVID-19 pandemic collides with flu season, patient volumes are likely to climb. Here are 5 ways to improve the patient registration process.

Discover 3 strategic investments healthcare providers can make to improve the patient financial experience.

Discover how healthcare providers can use data-driven technology to prevent surprise billing and create high-quality patient experiences.

As healthcare labor shortages continue, how can providers maximize the return on their investment in automation?

COVID-19 provided an unexpected use case for patient portals. In a matter of weeks, the benefits of remote patient access were undeniable. Patient portals allowed patients to schedule, register and pay for care from the comfort and safety of home. Now, as the latest omicron sub-variant triggers another surge in case numbers, providers are again reminded of the value in making digital channels available to minimize face-to-face interaction. With staffing shortages continuing and patient numbers rising, it’s worth recapping the benefits of patient portals. Why should healthcare providers prioritize patient portals? Here are 7 reasons: 1. Patient portals can be used to communicate safely with patients as Covid-19 cases rise Health officials may be cautious about reinstating extreme measures in response to the latest wave of infections. However, they can’t afford to be complacent about an uptick in hospital admissions. Patient portals can mitigate the risks associated with increasing foot traffic by allowing patients to schedule and register for care without attending in person. Completing paperwork from home eliminates the need for patients to share clipboards or sit in stuffy waiting rooms, while online scheduling platforms enable staff to manage the flow of patients safely and efficiently. Remote patient monitoring, secure messaging and online prescription refill requests can also be managed via portals, further reducing the need for in-person visits. 2. They can ease pressure on understaffed teams Providers need to find efficient ways to handle the administrative workload that comes with higher patient volumes. It’s even tougher given increasing retirement and resignation figures. More nurses are embracing the occupational benefits of remote and virtual care and are opting to switch from high-stress facilities to telehealth positions. While this speaks to the growth and impact of remote healthcare, it leaves a gap to be filled in hospitals. Patient portals can alleviate some of the burdens by reducing the need for staff input at various points in the patient journey. For example, online scheduling reduces the number of calls to call centers. Pre-filled data and automated registration can reduce the risk of errors during patient intake, which are time-consuming to fix. Portals can also be used to help patients navigate the payments process, speeding up collections and reducing the time staff spend chasing payments. 3. Patient portals can address inefficient patient access workflows Because patient portals are tethered to the patient’s electronic health record (EHR), they provide a hub for every piece of data relating to the patient. Patients can access that golden record at any time. They get an engaging and transparent experience, and are less likely to call up to ask questions – they already have the answers. They can also check data to make sure that it's accurate, which helps avoid the delays and misunderstandings that cause friction for patient access teams. It's important to ensure that the portal itself doesn’t introduce friction. Patients need to be able to enroll in the portal without too much trouble. Automating the patient enrollment process and implementing a multi-layered identity-proofing solution can create a secure and efficient way for patients to get the most out of their portal, without compromising safety or efficiency. 4. To improve patient engagement and meet consumer expectations One of the biggest reasons to invest in patient portals is because patients say they want them. Research from Experian Health and PYMNTS found that 44.1% of patients have obtained test results through patient portals, while 18% used patient portals to fill out forms for their most recent healthcare visit. Overall, two-thirds said they use patient portals. Beyond offering a convenient patient experience, this is also a matter of patient loyalty and retention: 61% of patients say they’d consider switching providers to one that offered a patient portal, which could have a significant impact on revenue. 5. They can boost revenue by offering easy ways to pay Experian and PYMNTS research shows that around a fifth of patients uses their portal to make payments. Unfortunately, 16% of those patients said they’d faced difficulty viewing invoices, setting up payment plans and making payments through their portal, which suggests some room for improvement. Experian Health’s Patient Payment Solutions solves these challenges. A range of self-service, mobile-optimized tools simplify the patient financial journey by giving patients upfront pricing estimates, personalized payment plans and easy ways to pay. 6. Using patient portals can improve health outcomes (especially for “frequent flyers”) Patient portals also play an important role in promoting better health outcomes for patients. Research shows that when patients have access to their medical information, they feel empowered and prepared to speak to their doctor and adhere to care strategies. Multiple providers can engage with the patient through the same platform, and see what other treatments are being prescribed. This helps improve communication between the patient and provider and helps improve care management. It’s especially useful for older patients and those with chronic conditions. In this way, portals support effective care coordination, helping value-based care providers achieve their goals of reducing healthcare costs, promoting population health and closing the gaps in care that have widened over the last few years. 7. Patient portals can support compliance with price transparency regulations Finally, portals offer a route to ensuring compliance with new regulatory requirements around price transparency. The No Surprises Act and hospital price transparency rule call on providers to give patients accurate, upfront cost estimates so they can plan for their financial responsibility more easily. Patient Payment Estimates can be delivered in several ways, including through patient portals. And as noted, once the patient has their estimate, they can also be directed to easy and convenient payment methods, including through their portal. Whether it’s a surge in COVID-19 cases, rising inflation, or labor shortages, providers must find ways to build resilience, stay competitive, and continue to offer patients the flexible and transparent healthcare experience they desire. Patient portals should be part of the plan to open the digital front door. Contact us to find out how Experian Health helps healthcare organizations deliver a reliable and secure patient portal experience.

Learn how providers can find efficient ways to screen for charity care eligibility and remain compliant with new regulations.

Learn how healthcare providers can ease financial pressures on consumers by introducing transparent pricing and improving patient payments.