HealthIT Answers December 11, 2025
More than 100 hospital systems, healthcare provider organizations, and provider associations have signed a joint stakeholder letter led by the College of Healthcare Information Management Executives (CHIME) calling on the U.S. Department of Health & Human Services (HHS) to withdraw its proposed update to the HIPAA Security Rule and instead engage with healthcare providers to develop a more practical, risk-based cybersecurity framework.
The proposal would dramatically expand and fundamentally alter existing federal cybersecurity requirements for hospitals and healthcare providers. While providers firmly agree that cyber safety is patient safety, signatories warn that the rule would impose significant unfunded mandates, mandate prescriptive technical controls that conflict with modern healthcare IT architectures, and substantially increase documentation, reporting, and compliance burdens for already...
Today's Sponsors
Today's Sponsor