With 2025 barely three weeks old, the US Department of Health and Human Services Office for Civil Rights (OCR) has already announced six enforcement actions for the new year. Particularly significant is the advancement of...more
1/22/2025
/ Breach Notification Rule ,
Cyber Attacks ,
Data Breach ,
Data Privacy ,
Data Security ,
Department of Health and Human Services (HHS) ,
Electronic Protected Health Information (ePHI) ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Privacy Rule ,
HIPAA Security Rule ,
OCR ,
PHI ,
Phishing Scams ,
Ransomware ,
Risk Assessment ,
Risk Management ,
Training
On January 6, 2025 the U.S. Department of Health and Human Services published a Proposed Rule (90 FR 898) to strengthen the HIPAA Security Rule and afford greater cybersecurity protections for electronic protected health...more
1/7/2025
/ Business Associates ,
Covered Entities ,
Department of Health and Human Services (HHS) ,
Electronic Protected Health Information (ePHI) ,
Health Care Providers ,
Health Insurance Portability and Accountability Act (HIPAA) ,
HIPAA Security Rule ,
Incident Response Plans ,
Information Technology ,
OCR ,
Risk Management ,
Subcontractors
In March 2024, the Department of Health and Human Services—through the Office of the National Coordinator for Health IT (ONC)—released a draft 2024-2030 Federal Health IT Strategic Plan for public comment. A collaborative...more