The US Department of Health and Human Services is proposing new cybersecurity requirements for healthcare organizations to protect patients’ private data from cyberattacks. The rules, estimated to cost $9 billion in the first year, include mandatory multifactor authentication, network segmentation, and encryption of patient data. These proposals will update the 1996 Health Insurance Portability and Accountability Act.
OIG Report on OCR’s HIPAA Audit Program
Due to the rise in cyberattacks against healthcare organizations, the Department of Health and Human Services’ Office of Inspector General (OIG) has highlighted deficiencies in
