Lexology December 8, 2023
The U.S. Department of Health and Human Services (HHS) recently issued a strategy paper highlighting key aspects of its plan to revamp cybersecurity requirements in the healthcare industry. Citing a 93% increase in large data breaches in healthcare from 2018 to 2022 and a rapid increase in ransomware attacks against U.S. hospitals, HHS issued the strategy as part of a broad effort to implement the Biden Administration’s National Cybersecurity Strategy. As a part of its strategy, HHS is focusing on four primary goals:
1) Establish voluntary cybersecurity performance goals for the healthcare sector;
2) Provide resources to incentivize and implement these cybersecurity practices;
3) Implement an HHS‑wide strategy to support greater enforcement and accountability; and
4) Expand and mature the...