<- Back to Insights
June 4, 2024
HHS says hospitals impacted by Change Healthcare cyberattack can delegate breach notifications to UnitedHealth Group | AHA News
aha.org
|
Contributed by: Drex DeFord
Summary
The Department of Health and Human Services (HHS) announced that hospitals and health systems impacted by the February 22 Change Healthcare cyberattack can require UnitedHealth Group to notify patients if their data was compromised. HHS’ Office for Civil Rights Director Melanie Fontes Rainer emphasized the importance of prioritizing HIPAA breach notifications. The American Hospital Association (AHA) expressed satisfaction with the decision, noting it aligns with their earlier request and helps avoid confusion and additional costs for hospitals. According to updated FAQs, if Change Healthcare handles the breach notifications as per HIPAA and HITECH standards, the affected entities will have no further notification obligations. UHG CEO Andrew Witty had previously agreed to this approach during May hearings with Senate and House committees.
Explore Related Topics
