AHA calls proposed HHS cybersecurity penalties on hospitals “counterproductive” as attack prevention strategy

DOTmed December 15, 2023
John R. Fischer

According to the American Hospital Association, Medicare and Medicaid requirements proposed in the Department of Health and Human Services concept paper for addressing cyber threats in healthcare would worsen, not improve, the ability of hospitals to prevent cyberattacks.

Building on President Joe Biden’s National Cybersecurity Strategy released in March 2023, HHS has proposed a four-step plan for building up cyber resiliency in the healthcare sector, including an HHS-wide strategy designed to enforce adherence to cyber prevention practices and hold those in violation accountable.

Under the proposal, new cybersecurity measures would be levied on hospitals through Medicare and Medicaid and added to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule in the spring 2024. HHS would work with Congress...

Today's Sponsors

Today's Sponsor