News and Analysis

New York State is planning new cybersecurity regulations for hospitals, which include a two-hour window for reporting major breaches and the appointment of a Chief Information Security Officer. The proposed rules come with a request for $500m in funding to aid providers in boosting their cybersecurity in accordance with the new regulations. Hospitals may also have to adhere to technical standards for risk assessments and incident response plans.