Hospital groups urge feds to hold Change accountable for breach notifications

Multiple hospital groups, including the American Medical Association and CHIME, are urging the U.S. Department of Health and Human Services to ensure that Change Healthcare, a UnitedHealthcare subsidiary, complies with breach notification protocols following a February cyberattack. In a letter to HHS Secretary Xavier Becerra, the groups called for clarity on how the department will enforce HIPAA-related reporting requirements. They emphasized the need for Change Healthcare to assume full responsibility for breach notifications, relieving affected providers of this obligation. UnitedHealthcare has stated it will notify impacted parties once the nature of the compromised information is confirmed and manage the necessary administrative tasks.

Opens on Becker's Hospital Review