HHS’s Office for Civil Rights has proposed major updates to the HIPAA Security Rule to counter escalating cyber threats, including a 102% increase in large breach reports from 2018–2023. The changes ...

The 2026 HIPAA Security Rule update will introduce major new requirements, including universal encryption of electronic ...

Proposed changes to the HIPAA Security Rule mark the biggest update to healthcare data security in a decade, but while the ...

New four-pillar compliance structure gives independent practices a clear path through the latest Security Rule overhaul ...

Melanie Fontes Rainer, HHS OCR director, speaking at a HIPAA summit this week (Image: Marianne Kolbasuk McGee) As the final months of the Biden administration wrap up, regulators at the agency charged ...

The HHS wants to update the HIPAA security rule for the first time in more than a decade to bolster healthcare cybersecurity, regulators said late last month. The Office for Civil Rights, which ...

In an important development for HIPAA-regulated entities looking for practical assistance in understanding, implementing, and enhancing compliance with the HIPAA Security Rule, the National Institute ...

This post is part of our The Top 2025 Privacy and Security Issues Still Shaping Healthcare series, in which our team of attorneys provides essential strategies and ...

An unmitigated revamp of healthcare cybersecurity is coming in 2025, and experts warn that the compliance burden for organizations will be steep. Since 2005, healthcare organizations have been subject ...

The Department of Health and Human Services (HHS) proposed a rule days before the new year began that would hold healthcare organizations to a higher standard for protecting sensitive healthcare ...

In examining how the Office of Civil Rights administered its periodic Health Insurance Portability and Accountability Act audit program from January 2016 through December 2020, the U.S. Department of ...

Purdue University is a Hybrid Entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Purdue’s primary purpose is education; however, Purdue does have departments and ...