HHS Proposes New Cybersecurity Rules to Protect Patient Data

The Department of Health and Human Services (HHS) has released a Notice of Proposed Rulemaking intended to enhance cybersecurity protocols for electronic protected health information (ePHI) under the HIPAA Security Rule. This initiative addresses the rising cyber threats facing healthcare organizations by advocating for stronger cybersecurity practices, including comprehensive risk assessments and the adoption of advanced security technologies. Additionally, the proposed rule emphasizes the necessity of training healthcare staff on cybersecurity risks and best practices to mitigate the impact of human error. Overall, HHS aims to promote a culture of security within healthcare organizations to better protect patient information against emerging threats.

Opens on HHS.gov