The U.S. Department of Health and Human Services plans to overhaul the Health Insurance Portability and Accountability Act (HIPAA) security rule to strengthen cybersecurity. Proposed changes include multi-factor authentication, enhanced encryption, updated technology inventories, and routine vulnerability scans. The cost is estimated at $9 billion in the first year and $6 billion for the following four years. Stakeholders have 60 days to submit comments after the proposal’s publication.

The True Cost of Focusing on Cost Instead of Cost-Effectiveness
When payors consider only the cost of the medication and not the cost and risk to the patient, doctor, and healthcare system, the irony is


