HHS Press Office November 16, 2023
Summary:
OCR’s Director’s reflections on October cybersecurity awareness month and on OCR’s enforcement of the HIPAA Privacy, Security and Enforcement Rules.
As the Director of the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS), I am proud of my team’s work towards increasing cybersecurity awareness last month, and in fact, every month. OCR enforces the Health Insurance Portability and Accountability Act’s (HIPAA) Privacy, Security, and Enforcement Rules to protect individuals’ health information private and secure.
To keep individuals’ protected health information safe, an organization must have strong cybersecurity measures. When a HIPAA regulated entity understands and has good cybersecurity practices in place, this lowers the risk of protected health information becoming compromised. To...