Lexology March 12, 2024
Introduction
The health care sector continues to experience a significant rise in cyberattacks, endangering care delivery and patient safety.1 Consequently, the federal government—including the U.S. Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) and the National Institute of Standards and Technology (“NIST”)— has issued a string of new guidance and efforts, consistent with the Biden administration’s March 2023 National Cybersecurity Strategy, to bolster cybersecurity practices.2 The latest of these efforts include (1) HHS OCR and NIST jointly issuing the final version of the Special Publication 800-66 Revision 2, Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide (the “Cybersecurity Resource Guide”)3 on February 16, 2024, and (2) NIST releasing Version...