Drafter
Clerk 02/21/2019
Title
A MOTION calling on the county executive to create a commission to investigate the data breach by the University of Washington Medical System that potentially left almost one million health records unprotected.
Body
WHEREAS, on December 4, 2018, the University of Washington suffered a data error leaving protected health information available to the public, and
WHEREAS, on February 20, 2019, the University of Washington Health System announced that it had left some health records of almost one million patients improperly protected, and
WHEREAS, these records were related to the transfer of information between the University and public health - Seattle & King County, and
WHEREAS, these patients are typically some of the most vulnerable population in King County;
NOW, THEREFORE, BE IT MOVED by the Council of King County:
A. The executive is requested to convene a commission to investigate the data breach and report to the executive, the council and the public on:
1. The causes of the breach;
2. The total scope of the breach;
3. Why the University of Washington took more than sixty days to inform the public;
4. The communication method with those impacted by the breach; and
5. Lessons learned to prevent future breaches from occurring again.
B. The commission shall be comprised of thirteen members appointed by the executive and confirmed by the council by motion. Each councilmember shall provide the executive with one potential nominee.
C. The commission shall issue its draft report by June 30, 2019. The draft report shall be posted for public comment for a thirty days and may be presented in front of the council's committee of the whole.
D. After the thirty-day public comment period, the report shall be finalized within thirty additional days and transmitted to the executive and clerk of the council who shall provide each member with a hard copy and electronic copy and shall also provide
copies to ...

Click here for full text