Lexology January 9, 2024
The Department of Health and Human Services (“HHS”) has released a concept paper outlining its new cybersecurity strategies for the health care sector, identifying cybersecurity priorities, potential future regulations and expectations of industry practices, and possible future enforcement.
In December 2023, HHS released a paper outlining new cybersecurity strategies for the health care sector to improve cyber resiliency. Although this paper does not establish express regulatory requirements, it identifies HHS’s cybersecurity priorities and previews potential future regulations. The paper noted a 93% increase in large breaches reported to the Office of Civil Rights (“OCR”); and a 278% increase in large breaches involving ransomware, from 2018 to 2022. To combat this trend, HHS outlines four categories for action:
- Voluntary Health...
Today's Sponsors
Today's Sponsor