Lexology November 30, 2023
New York is the first state to propose cybersecurity requirements for all hospitals operating in the state to address patient safety and other cybersecurity related issues.
On November 16, 2023, New York Governor Kathy Hochul proposed cybersecurity regulations applicable to all hospitals operating within the state. The proposed regulations are expected to complement the Security Rule of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) by strengthening the data privacy and cybersecurity protocols of hospitals and mitigating disruptions to the provision of health care. With these regulations, New York is continuing its trend of issuing industry-specific cyber regulations, the first being its NYDFS Cybersecurity Regulations (2017), amended November 1, 2023, which contain similar provisions applicable to financial institutions...