Lexology September 4, 2025
The Florida Agency for Health Care Administration (AHCA or the Agency) recently issued a new proposed rule that would require all “providers” licensed by AHCA to have a “continuity plan” for data and information technology disruptions. The proposed rule would also mandate the reporting of certain information to AHCA upon the occurrence of an “information technology incident.”
Continuity Plans
Many providers that would be subject to the proposed rule (see section on Applicability below) are currently required by AHCA to have a Comprehensive Emergency Management Plan (CEMP) in place for patient care and operations in the event of a disaster or emergency. To satisfy the proposed rule’s continuity plan requirement, a provider would need to adopt a written policy detailing...







