Healthcare Innovation December 28, 2024
Rule would clarify what covered entities and their business associates must do to protect the security of electronic protected health information
With large data breaches increasing in healthcare, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) is proposing to modify the HIPAA Security Rule to require health plans, clearinghouses and most providers and their business associates to strengthen cybersecurity protections for individuals’ protected health information.
This marks the first time HHS has sought to update the HIPAA Security Rule since 2013.
The rule would clarify and provide more specific instruction about what covered entities and their business associates must do to protect the security of electronic protected health information. The proposed rule also would...