Consistency and efficiency are key to reducing breach risk and becoming compliant, as a Fortune 200 healthcare company discovered when they automated their privacy incident response process.
Multiple Laws Add Compliance Challenges
This company, providing healthcare solutions to more than 5.5 million members in the U.S., was managing an average of 50 incidents a month. Each has to be meticulously documented and consistently risk assessed in accordance with applicable state laws and HIPAA.
To streamline this complexity, the organization’s privacy team moved from spreadsheets to an incident response workflow platform. However, this solution lacked critical features, such as automated multi-factor, multi-jurisdictional incident risk assessments.
Then the company discovered Radar to help automate its privacy incident response process.
Radar Boosts Efficiency for Risk Assessing Incidents
Radar is up-to-date with all breach notification regulations, saving the organization’s legal team the hassle of monitoring them. The privacy team lead says they’re 90 to 95% more efficient in this regard.
The overall risk assessment is also faster:
All of the legal and regulatory requirements around breaches, notifications, and deadlines are built right into Radar. This has created an easy workflow that’s saved at least 50% of the time it used to take to complete assessments.
This efficiency is amplified for incidents that have multiple datasets. Before Radar, the healthcare company had to split such incidents into separate events—one for each dataset. Now the privacy team can document and risk assess each dataset as distinct subsets of a single incident. This helps keep an accurate account of privacy data occurrences and avoid over-counting incidents.
The privacy team also relies on the heat map Radar generates for each incident, which reveals the risk of harm to impacted individuals. And if the HHS Office for Civil Rights, a state attorney general, or another regulator requests documentation on a specific case, the privacy team can easily produce an assessment summary.
Lowered Risk, Increased Confidence
Radar’s all-inclusive law library helps the organization reduce its breach risk:
Radar helps mitigate risk. We did not have the resources for someone to monitor rule changes and updates full-time. This lack of dedicated attention increased the risk that a change to legislation or regulations could be missed.
The system also manages the company’s contractual notification obligations, avoiding the risk of missed deadlines that could cost the organization anywhere from $500 to $2,000 per contract.
When responding to a privacy incident, timing is everything—and Radar keeps the healthcare company on track.