Lexology January 16, 2025
The US Department of Health and Human Services (HHS) on January 6, 2025 issued a notice of proposed rulemaking (NPRM) seeking feedback on proposed updates to the Security Standards for the Protection of Electronic Protected Health Information (Security Rule) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act).
These modifications aim to enhance the confidentiality, integrity, and availability of electronic protected health information (ePHI) by addressing significant technological advancements since the Security Rule was last revised in 2013, as well as rising breaches and cyberattacks, observed compliance deficiencies, updated cybersecurity best practices, and relevant court decisions. Comments are due by March 7, 2025.
...Today's Sponsors
Today's Sponsor