HealthsystemCIO.com December 30, 2024
To enhance ePHI protections, address compliance gaps, and strengthen resilience against cybersecurity challenges, HHS is issuing a Notice of Proposed Rulemaking (NPRM) to bolster the HIPAA Security Rule.
Adapting to a Transforming Digital Environment
The last major revision to the HIPAA Security Rule occurred in 2013. Since then, the healthcare industry has experienced dramatic advancements in technology and an increase in cyber risks. With nearly 80% of physician practices and 96% of hospitals now utilizing EHRs, digital tools have become indispensable to modern healthcare. However, these innovations expose healthcare organizations to cyber threats, as bad actors increasingly target the sector with ransomware attacks and other malicious activities.
The notice stated that the rise in cybercrime underscores the urgency of updating...