Healthcare IT Today December 22, 2023
The U.S. Department of Health and Human Services (HHS) said it will update the HIPAA Security Rule in 2024 and will ask Congress for new laws and resources to increase civil money penalties for HIPAA violations, increase HIPAA enforcement, and conduct proactive audits.
HHS released a new Healthcare Sector Cybersecurity strategy paper which cited a 93% increase in large breaches from 2018 – 2022 and a 278% increase in large breaches caused by ransomware. It specifically called out hospitals and health systems and said HHS will work with Congress to provide a financial incentive program for hospital cybersecurity and financial assistance for low-resourced healthcare providers.
HHS will work with Congress to obtain additional enforcement authority – critical now that the...