HealthIT Answers January 13, 2026
Why Stronger Mandates Are Necessary and Why Action Cannot Wait
Healthcare organizations are being urged to prepare for an update to the HIPAA Security Rule expected in the early part of this year. The proposed changes would require mandatory twice-annual vulnerability scanning, annual penetration testing, and formal verification of Business Associate security through expert analysis and certification.
While the direction of the rule is clear, the timeline is less certain. Based on the volume and intensity of industry feedback during the comment period, the proposed update is more likely to be delayed than fast-tracked. However, a potential delay should not be misinterpreted as a lack of necessity. In fact, the resistance itself underscores why stronger regulatory mandates are required.
Why...
Today's Sponsors
Today's Sponsor