Recognized Security Practices News Today

Updates to the Health Insurance Portability and Accountability Act Security Rule (“HIPAA Security Rule”) are planned for Spring 2024. New guidance from The Department of Health and...

Jointly developed as a public-private partnership, the new Cybersecurity Framework Implementation Guide from HHS aims to help healthcare organizations assess their current practices and risks and identify gaps.

HIMSS, MGMA and the Connected Health Initiative are among the groups who responded to HHS Office for Civil Rights' call for comment on about privacy protections and monetary penalties.

STATE & LOCAL LAWS & REGULATIONS - Connecticut Passes Comprehensive Privacy Bill - The Connecticut Legislature has become the fifth state in the United...

As cyber threats increase, this RFI aims to help the agency support implementation of security best practices and better share enforcement funds with individuals harmed by HIPAA violations.

Cybersecurity Policies While the HIPC has not been updated since 2018, a review of recent data breaches in healthcare suggests that the identified threats are still relevant. For example, a 2019 study by the Journal of American Medicine of 95 simulated phishing campaigns at six US health care institutions noted almost one in seven test emails sent were clicked by employees [4]. And recently, a ransomware attack affected 250 Universal Health Systems facilities taking their systems offline for a...

Thursday, January 14, 2021 On January 5, 2020, President Trump signed into law H.R. 7898. This new statute amends the Health Information Technology for Economic and Clinical Health (HITECH) Act to require the Department of Health and Human Services (HHS) to consider efforts by HIPAA covered entities and business associates to implement “recognized security practices” when assessing fines or penalties under the HIPAA Security Rule.  The statute provides that if a HIPAA covered ent...