AHA pushes back on HHS proposal to penalize hospitals for cyberattacks

American Hospital Association (AHA) warns U.S. Department of Health and Human Services' (HHS) new cyber resilience strategy for medical sector may adversely impact hospitals following cyberattacks. The strategy includes new cybersecurity requirements for hospitals and financial measures for non-compliance, despite AHA's billion-dollar investments in cybersecurity. AHA asserts cyber defense should involve collaboration of federal government against sophisticated, often foreign, hackers and opposes mandatory cybersecurity rules for hospitals. HHS alongside Congress plans to increase civil monetary penalties for HIPAA violations.

Opens on Healthcare IT News