Physicians Practice February 1, 2024
Cybersecurity is important for patient piece of mind, but it’s also required by law.
Overview
“Cybersecurity is patient safety.”1 Meeting the requisite technical, administrative, and physical safeguards to protect the confidentiality, integrity and availability of protected health information (“PHI”) and individually identifiable health information (“IIHI”) are also required by law under the Health Insurance Potability and Accountability Act of 1996, Pub. L. 104-191 (Aug. 21, 1996) (“HIPAA”) and the Health Information Technology for Economic and Clinical Health Act (“HITECH Act”).The healthcare and public health sector is also considered part of critical infrastructure by the United States Government’s Cybersecurity & Infrastructure Security Agency (“CISA”).2 The United States Department of Justice’s (“DOJ”) October 6, 2021, announcement regarding the launch of its Civil...