Healthcare IT News June 3, 2024
While UnitedHealth has yet to file a data breach report with HHS, covered entities can delegate the job of notifying patients that their healthcare data was exposed in the crippling ransomware attack to the UHG subsidiary.
The U.S. Department of Health and Human Services’ Office for Civil Rights updated its Change Healthcare cybersecurity incident frequently asked questions page on Friday to address questions the agency has received asking which entities are responsible for performing breach notification to HHS, affected individuals and where applicable, the media.
WHY IT MATTERS
Published on April 19, the FAQ addresses HIPAA rules as it relates to the February 9 cybersecurity incident impacting Change Healthcare, a unit of UnitedHealth Group, which had a widespread impact...