As cyber threats evolve, legal provisions like the Health Insurance Portability and Accountability Act (HIPAA) may not be sufficient to protect healthcare data. Proposed legislation, including the Healthcare Cybersecurity Act and the Health Infrastructure Security and Accountability Act (HISAA), could strengthen protections. However, these fail to address non-traditional health data like fitness tracker information. A more comprehensive approach is required, encompassing consumer health data and collaboration between tech and healthcare companies, as well as robust leadership from CISOs.
European Commission Publishes Action Plan on Cybersecurity of Hospitals and Healthcare Providers
The European Commission has released an action plan aimed at improving the cybersecurity of hospitals and healthcare providers, according to Inside Privacy.