HHS Proposes HIPAA Updates to Strengthen Cybersecurity for Health Data

The Department of Health and Human Services (HHS) is proposing updates to the Health Insurance Portability and Accountability Act (HIPAA) security rule to improve the cybersecurity of electronic protected health information (ePHI). Currently under review by the Office of Information and Regulatory Affairs, these modifications aim to address the rising threats of ransomware and hacking. The new rule will revise Security Standards for ePHI and align with the Health Information Technology for Economic and Clinical Health Act of 2009. Amid ongoing compliance challenges and legal uncertainties, particularly following the AHA v. Becerra lawsuit, HHS officials anticipate the new security rule will be published within the year to better protect healthcare data systems.

Opens on Healthcare IT News