215 - Protecting Patient Data: Navigating IT Security Risks for Occupational Health Professionals

Session Description: Practical Strategies and Pitfalls to Avoid in the Digital Age
In today’s digital landscape, occupational health professionals face increasing challenges in protecting patient data from evolving IT security risks. This panel discussion will provide an essential overview of common data risks and penalties under regulations such as GDPR and CCPA, clarifying the critical distinctions between security and privacy and how each can contribute to data breaches. Attendees will learn to recognize key security concepts—such as HTTPS, REST, and OWASP Top Ten vulnerabilities—and understand the dangers of poor credential management. The session will also cover practical guidance on collaborating with software vendors, evaluating their commitment to security, and preparing effective incident response plans. By highlighting real-world pitfalls and offering actionable strategies, this panel aims to empower occupational health professionals to safeguard sensitive health information and foster a culture of proactive data protection.

Educational Gaps: Physicians may lack awareness of evolving IT security risks, regulatory requirements, and best practices for vendor collaboration. This session will bridge gaps in understanding security concepts, potential penalties, and proactive strategies for safeguarding patient data.

Is this session being sponsored by an ACOEM Section or Component?: no but may consider combining with Mani's talk with the privacy attorney if the planning committees deem fit. Otherwise, I was going to have panelists from a company that recently went through this process and give live and practical examples of the trails and challenges they had implementing this globally. The panelist would include an OEM physician/informatics/software engineer, Cyber security specialist and I would moderate.

Has this session previously been presented?:

The AOHC 2026 theme is Healthy workers. Healthy world: Our proposed session directly supports the AOHC 2026 theme, "Healthy workers. Healthy world," by emphasizing the integral role of data protection in occupational health. In today’s interconnected environment, the well-being of workers is not limited to physical health—it also encompasses the privacy and security of their sensitive health information. By equipping occupational health professionals with up-to-date knowledge of IT security risks, regulatory obligations, and collaborative strategies with software vendors, this session empowers attendees to proactively safeguard patient data. This not only minimizes the risk of data breaches and the associated harm to individuals and organizations, but also fosters trust among workers, enabling them to participate fully and confidently in health programs.
Furthermore, a culture of proactive data protection enhances organizational resilience, supports regulatory compliance, and demonstrates a commitment to ethical care—all essential components of a healthy workplace. By helping professionals bridge gaps in understanding and implement practical, actionable strategies, our session contributes to the broader mission of protecting workers’ health in a rapidly evolving digital world, ultimately advancing the spirit of "Healthy workers. Healthy world."