- Home
- Advocacy
- Latest News and Practice Data
- Patient Cybersecurity Protections Proposed in HIPAA Update
The US Department of Health and Human Services (HHS), through its Office for Civil Rights, published a proposed rule to improve cybersecurity and better protect the US health care system from a growing number of cyberattacks. The proposed rule would modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) security rule to require health plans, health care clearinghouses (an organization that enables the exchange of health care data between a provider and a payer (insurance company), and most health care providers and their business associates, to strengthen cybersecurity protections for individuals’ protected health information.
This proposed rule is the latest step taken by HHS to address more frequent cyberattacks targeting the US health care system.
A summary of the proposed rule is available online.
Additional resources: