Lexology September 15, 2023
On September 13, 2023, the National Coordinator for Health Information Technology (“ONC”) and the Office for Civil Rights (“OCR”) at the U.S. Department of Health and Human Services released version 3.4 of the Security Risk Assessment (“SRA”) Tool under the Health Insurance Portability and Accountability Act (“HIPAA”) Security Rule.
The HIPAA Security Rule requires HIPAA covered entities to perform a risk assessment to identify and evaluate potential risks and vulnerabilities associated with the processing...