Lexology February 22, 2024
ABSTRACT: With an increase in recent HHS enforcement and accountability for the healthcare sector, understanding cybersecurity vulnerabilities, cyberattack risks, and data breach of sensitive and confidential information is vital to prevent liability and promote best practices for risk management.
In light of the recent U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) settlements with healthcare organizations pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) last year, it is worth analyzing key potential liability concerns for healthcare clients, specifically as they relate to cyberattacks on sensitive protected health information (PHI).
HHS Resources for HIPAA Cybersecurity Compliance
The OCR has published multiple resources for covered healthcare entities to protect themselves and patients from...