Reference no: EM133583739

Case study : aBeing healthya is a healthcare provider that provides Telehealth services to its clients. They render their services by utilizing a prominent videoconferencing platform. At aBeing healthya, it is the responsibility of the front desk executive to collect and store the patient's data in the clinical software system. Patients are asked to fill up their details and relevant information when they come for the appointment. This data is then transferred to the database and after storing the information in the database, the front office executive leaves the forms at the front counter where it is easily accessible to all. The database used by aBeing healthya to store their patient's personal information is unsecured and has no password protection or security protections in place. a Being Healthy also lacks any privacy policy in their organisation. Files are transferred to other practitioners without any secure electronic system.
A nutritionist named Cathy also shares their patient's private information with her friends.
Recently, there was a cyberattack on aBeing Healthya in which the personal details of their clients were compromised, and their security numbers were used for identity theft.

Questions: From the above-provided information, answer the following questions:

a. List any two (2) laws that have been breached in the above scenario. Give specific example of how they have breached them.

b. Identify any two (2) security related risks when sharing information on Telehealth platforms.

c. How can aBeing healthya maintain and manage confidentiality and comply with information privacy principles?

d. Is Cathy maintaining her duty of care as a health practitioner? Explain.

e. In the above scenario, explain how Cathy could promote and maintain compliance.