SC Media June 14, 2022
If the Department of Health and Human Services wants to improve and support adoption of best practice security measures in healthcare, it should avoid an “all-or-nothing” approach to security implementations. Rather, HHS should better educate and provide recommendations on the importance of adopting industry standards.
Specifically, HHS should consider just how far along healthcare covered entities have implemented chosen security measures, rather than enacting strict requirements that may actually inhibit adoption, according to comments from several leading stakeholder groups.
The comments were sent to HHS in response to its request for information released in April, which asked for feedback on the current state of security practices used in healthcare, as outlined in HITECH and suggestions on how HHS Office for...