HealthIT Answers December 30, 2024
By Jay Trinckes, Data Protection Officer/CISO, Thoropass
In recent years, healthcare organizations have struggled to address the rising number of data breaches and cyberattacks plaguing the industry. The Change Healthcare breach in particular caused the exposure of the protected health information (PHI) of as many as one in three Americans earlier this year. While the Health Insurance Portability and Accountability Act (HIPAA) aims to protect such data and prevent these kinds of breaches, enforcement remains incomplete at best.
For example, a recent report found that the Office for Civil Rights (OCR), the primary government body enforcing HIPAA compliance, has focused its audits on just 8 out of the 180 regulatory requirements outlined by HIPAA. These assessments primarily target specific administrative...