Lexology November 13, 2023
The U.S. Department of Health and Human Services (“HHS”) Office of Civil Rights (“OCR”) recently released updated guidance in its October 2023 Cybersecurity Newsletter emphasizing the importance of sanction policies in maintaining HIPAA compliance. This guidance builds upon a threat brief previously issued in August 2022 by HHS’ Health Sector Cybersecurity Coordination Center (“HC3”). The 2022 HC3 brief outlined various methods hackers use to gain access to health care systems and data, along with recommendations for protective measures. This latest OCR guidance provides further recommendations for establishing effective sanction policies, offering valuable insights for organizations looking to bolster their HIPAA and organizational policy compliance.
Background
Under the HIPAA Privacy, Security, and Breach Notification Rules (“HIPAA Rules”), covered entities and business...
Today's Sponsors
Today's Sponsor