FTC official urges use of contracts to address vendor risks, ensure security of health data

The Federal Trade Commission's chief of privacy and identity protection is recommending the use of contracts and oversight of vendors to minimize the cybersecurity risks of handling medical information and personal health records.

“Companies need to have contracts in place to specifically address privacy and security” for protected health information, said FTC's Molly Crawford in response to a question about vendor risks at the National HIPAA Summit in Arlington, VA on Tuesday.

Crawford, who is chief of staff for the...