Lexology January 2, 2025
On December 27, 2024, for the first time in over a decade, the United States Department of Health and Human Services (HHS) issued a notice of proposed rulemaking to modify the HIPAA Security Rule (the NPRM) to bolster cybersecurity protections for electronic protected health information (ePHI). The HIPAA Security Rule, which establishes standards for the security of ePHI, was last updated in 2013. The NPRM generally applies to HIPAA-covered entities, including health plans, healthcare clearinghouses and most healthcare providers, as well as the business associates of covered entities (together, referred to as regulated entities). HHS states that the purpose of the NPRM is to “strengthen cybersecurity by updating the Security Rule’s standards to better address ever-increasing cybersecurity threats to the...
Today's Sponsors
Today's Sponsor