Lexology January 13, 2025
A few days ago, the U.S. Department of Health and Human Services (“HHS”), through its Office for Civil Rights, issued the proposed rule HIPAA Security Rule to Strengthen the Cybersecurity of Electronic Protected Health Information (the “Rule”) “to improve cybersecurity and better protect the U.S. health care system from a growing number of cyberattacks.”
The Rule would amend the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) Security Rule and will mandate that health plans and the majority of health care providers and their business associates improve cybersecurity safeguards for the protected health information of individuals. The Rule reflects the pressing need to address growing cybersecurity threats in the health care sector but will undoubtedly have a big impact...