Case Study: HealthEquity achieves faster, compliant privacy and breach incident response with IBM Resilient

Transforming Privacy and Breach Incident Response: HealthEquity

HEALTHEQUITY, the nation’s oldest and largest dedicated health savings trustee, needed a faster, more secure way to manage privacy and breach incidents. As a healthcare and financial services provider handling sensitive member data across 46 states and many health plan partners, it struggled with a manual process based on spreadsheets, Word documents, and internal systems that was slow, hard to maintain, and risky to use during an incident.

IBM Resilient provided HealthEquity with its Incident Response Platform (IRP), giving the company an out-of-band repository and action system to manage breaches securely. The solution streamlined response workflows with prepare-assess-manage-report capabilities, automated regulatory assessment, and timestamped communications; HealthEquity said it reduced risk, improved speed and accuracy, and cut research time from 3–4 hours to minutes for key compliance decisions.

HEALTHEQUITY

Dickson Leung

Chief Privacy Officer and General Counsel, Healthequity