The U.S. Department of Health and Human Services (HHS) has outlined voluntary goals for healthcare cybersecurity, proposing incentives and penalties for hospitals’ compliance. Essential goals lay out baseline standards, while enhanced goals suggest advanced practices. The HHS has suggested transferring funds from the Medicare Hospital Insurance Trust Fund to incentivise hospitals’ compliance. Notable penalties for non-compliance include payment reductions and potential reductions of up to 1% off base payments. The proposed measures are essential to Biden’s FY 2025 Budget, which aims to improve cybersecurity practices.
Commission wants health-dedicated centre in EU cybersecurity agency
The EU Commission has proposed an action plan to protect the healthcare sector from cyber threats, including setting up a cybersecurity centre within the EU’s