Is your pharmacy still using windows 7? Déjà vu! It was only 5 years ago that we saw the Windows XP’s “end of life” occur. Now, it is time for the discontinuation of Windows 7. Also note that Windows 8’s “end of life” will occur in January 2023.
On January 14, 2020, Microsoft will end support for Windows 7. This means if you are currently running Windows 7 on any of your computers you will no longer receive software updates, technical support for any issues, or security updates or fixes from Microsoft. Without a doubt, it increases users’ vulnerability to malware and cyber attacks but if you’re a pharmacy, the damage resulting from malware and viruses could be immeasurable. The security updates and patches address vulnerabilities that if exposed could lead to losses and breaches of data. All of this will cost your pharmacy monies and may even lead to regulatory fines.
HIPAA Compliance
Is your pharmacy still using Windows 7? If you answered yes to that, what does it mean, with regards to your HIPAA compliance? It’s not good news. Any pharmacy, physician’s office, or other health organization running Windows 7 is considered no longer compliant with HIPAA as of January 15th. The HIPAA Security Rule requires that all organizations ensure all systems maintaining and transmitting EPHI (Electronic Protected Health Information) are protected from malicious software. If you are not able to update your operating system to protect against malicious software, then it is obviously no longer secure and you are therefore no longer compliant with this requirement of the Security Rule.
HIPAA Security Rule section 164.308(a)(5)(ii)(B) states that you must implement “procedures for guarding against, detecting, and reporting malicious software.”
Risks to Healthcare Organizations and Service Providers
The 2017 WannaCry cyber attack had catastrophic consequences for the healthcare and other business sectors over the globe. The opportunity for cyber criminals to gain entry was facilitated by NHS’ use of Windows XP, which has been outdated since 2014. It was one of the largest data breaches in history, affecting many countries, healthcare institutions, hospitals, manufacturers, and businesses in general. While digitization of the healthcare industry is no doubt a boon for patients and medical professionals and organizations worldwide, it has also increased the risk to sensitive patient data due to billions of inter-connected devices and systems.
Do You Have a Secure Windows Version?
Is your pharmacy still using Windows 7? No matter what the rationale for using outdated software, whether it is the cost factor, lack of awareness or knowledge, procrastination, or time crunch, the best time to update to a secure version was yesterday. So it’s advisable to get to it as early as possible! To reiterate the potential dangers, it spells a disaster on multiple levels, some of which are risk of breaches to sensitive healthcare information, loss of integrity of data, damage to reputation and business, and penalties and fines arising out of noncompliance that could result in enormous financial losses.
What Do I Do?
Your first step is to contact your computer and software vendors for recommendations and to find out what your options are. You may need to take steps to update your software to be compatible with newer versions of Windows. Ensuring your systems are up to date increases your overall level of security and allows them to run properly and efficiently. Most importantly, it helps protect the integrity and safety of patient healthcare information and helps your pharmacy stay compatible with the HIPAA regulations.
If you need to dispose of any computers containing PHI, you must make sure you appropriately render any PHI on those hard drives unreadable and un-retrievable. In addition, you must document the disposal process based on your policy and procedure: device and media controls (if you are using the PRS HIPAATrack Program – members can login here).
Meanwhile, those of you who are still using Windows 7 and are in the process of updating to Windows 10, you need to make sure you maintain very strict controls on what software is loaded, internet usage, email usage, and ensure all antivirus, malware, and firewall protections are up to date and functioning at their strictest settings.
For more information about HIPAA and other pharmacy compliance solutions for your pharmacy, call PRS at 1-800-338-3688 and speak with one of our Specialists.