Health IT Security June 3, 2024
OCR updated its FAQ webpage and affirmed that covered entities may delegate breach notification responsibilities to Change Healthcare.
The HHS Office for Civil Rights (OCR) updated its frequently asked questions (FAQ) webpage regarding the Change Healthcare cyberattack, clarifying breach reporting requirements for affected covered entities.
As previously reported, more than 100 industry groups undersigned a letter to OCR in mid-May seeking clarity about data breach reporting responsibilities related to the Change Healthcare cyberattack, which resulted in operational and financial difficulties for healthcare providers nationwide.
UnitedHealth Group (UHG) offered to “make notifications and undertake related administrative requirements on behalf of any provider or customer,” which would ease individual reporting requirements for affected entities. However, OCR’s initial FAQ page stressed that it...
Today's Sponsors
Today's Sponsor