--- title: The Power of Diligence on Data Privacy description: For healthcare organizations, protecting patient data is only the beginning. image: https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-1307905796-1.jpg --- ** - [Careers](https://jobs.crelate.com/portal/cerecore/) - [CereCore US](http://cerecore.net/) - [Events](https://cerecoreinternational.net/events-blog) [![](https://resources.cerecoreinternational.net/hs-fs/hubfs/CereCore_June2021/Images/CereCoreLogo-International.png?width=2120&height=944&name=CereCoreLogo-International.png)](https://cerecoreinternational.net/) # The Power of Diligence on Data Privacy ![](https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-1307905796-1.jpg) ![](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/elipse-shape-1.png) #### Stay up to date on our latest blogs and content [Subscribe](https://cerecoreinternational.net/resources-library-subscribe) By [Josh Dunaway](https://resources.cerecoreinternational.net/author/josh-dunaway) | Jan 28, 2022 ** 2 minute read ** [Blog](https://resources.cerecoreinternational.net/tag/blog)| [Technology](https://resources.cerecoreinternational.net/tag/technology)| [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr) Data breaches, stolen identities, and fraudulent charges are a fact of life in our modern age. However, for healthcare organizations, protecting patient data is only the beginning. Additional complexity comes in the form of maintaining compliance with data privacy regulations and the high number of healthcare IoT devices and endpoints in a health system.   **Data diligence and privacy considerations**  1. Store only what’s needed.   While the number of federal and state regulations [demonstrated in this HIMSS Infographic](https://www.himss.org/resources/health-data-privacy-policy-compliance-challenges-us-infographic) is an eye-opening visual of the requirements around healthcare data privacy, it is still a best practice for healthcare organizations to be as thoughtful about deleting data that is no longer useful or required as they are about storing and protecting data. This task requires thorough planning, policies, training, access management, software technology, monitoring, mitigation, and more. Healthcare organizations store large volumes of private patient data, growing by the second. While storage and protecting access to the data are important, it may seem counterintuitive to make retiring data part of a privacy strategy. You might be saying, “Why would we ever get rid of data - who knows if we will need it in the future?”  Maybe that thinking supports your business model, maybe it doesn’t. If it does, maybe you seek to eliminate duplications of the same data in multiple storage locations. Meaning, if data are in our data warehouse, do we also need it to remain in the legacy storage source?   The benefits: reduced storage costs, fewer access points to data, and overall decreased risk.   1. Assess device and network vulnerabilities. According to the [HIPAA Journal](https://www.hipaajournal.com/more-than-half-of-all-healthcare-iot-devices-have-a-known-unpatched-critical-vulnerability/), more than half of all healthcare IoT devices have a known, unpatched critical vulnerability. When it comes to the most commonly used healthcare device – the IV pump, the majority of these devices were found to have a vulnerability that could be potentially exploited to gain access to networks and sensitive data, or even worse, impact patient safety. Steps such as segmenting the network can be a start to protecting data, along with performing a comprehensive IT asset inventory and analysis to identify issues such as outdated software, weak credentials, and more. The payoffs can result in reduced risk, efficiency gains, and cost savings through the discovery of overprovisioned licenses.    The list of [most common HIPAA violations](https://www.hipaajournal.com/common-hipaa-violations/) involve all facets of safeguarding PHI from improper data disposal to failing to control access to patient data. Healthcare technology leaders must make smart, tough decisions based on reducing risk, optimizing costs, and improving data quality, reporting, and accessibility.    **Recommendations** When your organization is ready to take the next step toward enhancing patient data privacy, consider the following next steps:   1. **Make data diligence a priority. **It is often easy to push the deletion of data to the bottom of the priority list, but making it an organizational priority increases the likelihood of realizing the above benefits.  2. **Evaluate which data is necessary to store and why. **The first step to knowing what data can be deleted is knowing what data is needed and why.   3. **Create and employ a data diligence strategy. **  - Establish an internal governing body to offer clear strategy and action items around data privacy.  - Explore options for cost-effective and secure data storage, such as CereCore's Legacy Data Archive.   ##### About the Author: Josh Dunaway Senior Director, Data Solutions, CereCore [** ](https://www.linkedin.com/in/josh-dunaway-abb09539/) Read Bio ** #### Josh Dunaway Senior Director, Data Solutions, CereCore ** Senior Director, Data Solutions, CereCore ## Related Posts [![Userlane and CereCore International Plan Global Partnership to Drive Faster EHR/EPR Adoption and Maximise Healthcare IT Value](https://resources.cerecoreinternational.net/hubfs/Resource%20Thumbnails/GettyImages-2217159720-1.jpg)](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) #### [Userlane and CereCore International Plan Global Partnership to Drive Faster EHR/EPR Adoption and Maximise Healthcare IT Value](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) [CereCore News](https://resources.cerecoreinternational.net/tag/cerecore-news), [Technology](https://resources.cerecoreinternational.net/tag/technology), [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr) 2 minute read By CereCore on May 8, 2026 **Munich, Germany -- **Userlane announced its intention to establish a strategic partnership with CereCore International, a global healthcare IT services provider, to help healthcare organisations... [Read More **](https://resources.cerecoreinternational.net/userlane-and-cerecore-international-plan-global-partnership-to-drive-faster-ehr/epr-adoption-and-maximise-healthcare-it-value) [![Why Tech Makes Care More Human: Sir David Sloman’s Lessons from the NHS](https://resources.cerecoreinternational.net/hubfs/CC%20Intl%20-%20Website%20Blog%20photo%20965x634px%20(29).png)](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) #### [Why Tech Makes Care More Human: Sir David Sloman’s Lessons from the NHS](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) 1 minute read By CereCore Media Coverage on Nov 18, 2025 What happens when bold leadership meets groundbreaking technology? [Read More **](https://resources.cerecoreinternational.net/why-tech-makes-care-more-human-sir-david-slomans-lessons-from-the-nhs) [![Mater Private Network -  Supporting the Implementation of an Electronic Cardiac Rehab Programme](https://resources.cerecoreinternational.net/hubfs/MPN%20Case%20Study.png)](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) #### [Mater Private Network -  Supporting the Implementation of an Electronic Cardiac Rehab Programme](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) [MEDITECH](https://resources.cerecoreinternational.net/tag/meditech), [Case Study](https://resources.cerecoreinternational.net/tag/case-study), [EHR/EPR](https://resources.cerecoreinternational.net/tag/ehr-epr), [Client Perspectives](https://resources.cerecoreinternational.net/tag/client-perspectives) 4 minute read By CereCore on Oct 22, 2025 ###### **The Client ** Mater Private Network is one of Ireland’s leading private healthcare providers, known for delivering world-class services in medical and surgical care. [Read More **](https://resources.cerecoreinternational.net/mater-private-network-supporting-the-implementation-of-an-electronic-cardiac-rehab-programme) ## Put Us to Work Let us know how we can support your initiatives and take some of the heavy lifting from healthcare IT. ![Untitled-4](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/Untitled-4.png) ![](https://resources.cerecoreinternational.net/hubfs/Web%20Design%20Items/accent-shape.png) [![CereCore Logo](https://resources.cerecoreinternational.net/hs-fs/hubfs/CereCore_June2021/Images/CereCoreLogo-International_reverse.png?width=180&height=90&name=CereCoreLogo-International_reverse.png) ](https://cerecoreinternational.net/) [tel:](tel:) 2 Cavendish Square, London, England W1G 0PU Connect With Us: [ Careers ](https://jobs.crelate.com/portal/cerecore/) [** info@cerecoreintl.net](mailto:info@cerecoreintl.net) - - - [ CereCore US ](https://cerecore.net/) © All Rights Reserved CereCore [ Terms of Service ](https://cerecoreinternational.net/terms-of-service) [ Notice at Collection ](https://resources.cerecoreinternational.net/privacy-policy#ccpa) [ Privacy Policy ](https://cerecoreinternational.net/privacy-policy) [ Do Not Sell My Personal Information ](https://resources.cerecoreinternational.net/privacy-policy#how-we-disclose-personal-info) [ Responsible Disclosure ](https://cerecoreinternational.net/responsible-disclosure) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Josh Dunaway", "url" : "https://resources.cerecoreinternational.net/author/josh-dunaway" }, "dateModified" : "2022-11-07T18:54:09.486Z", "datePublished" : "2022-01-28T05:00:00.000Z", "headline" : "The Power of Diligence on Data Privacy", "image" : [ "https://resources.cerecoreinternational.net/hubfs/Imported_Blog_Media/GettyImages-1307905796-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://resources.cerecoreinternational.net/the-power-of-diligence-on-data-privacy", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://resources.cerecoreinternational.net/hubfs/CereCore_June2021/Images/CereCoreLogo-International.png" }, "name" : "CereCore International" } } ```