Lexology May 26, 2022
McGuireWoods LLP

  • In 2021, HITECH was amended to add “recognized cybersecurity practices” as a mitigating factor when determining fines, audits and remedies against covered entities and business associates for violations of HIPAA.
  • HHS now seeks public comment on what should be considered a recognized cybersecurity practice.
  • Covered entities and business associates should update their HIPAA compliance plans to incorporate the recognized cybersecurity practices, implement the identified security practices and ensure they have been actively and consistently used over the prior 12-month period of time.

On Jan. 5, 2021, Public Law 116-321 amended the Health Information Technology for Economic and Clinical Health (HITECH) Act to require the Department of Health and Human Services (HHS) to consider covered entities’ (most healthcare providers,...

Today's Sponsors

LEK
ZeOmega

Today's Sponsor

LEK

 
Topics: Cybersecurity, Govt Agencies, Health IT, HIPAA, HITECH, Technology
As Change reviews data impacted by cyberattack, here's what the notification process could look like
Healthcare security culture steadily improving, but gaps remain
CISA proposes rule for hospitals to disclose ransom payments
What Change Healthcare And The Postal Service Can Tell Us About The Coming Platform Revolution
UnitedHealth pays $3.3B to providers following Change hack

Share This Article