HIPAA
Health Insurance Portability and Accountability Act Security Rule · HHS Office for Civil Rights (OCR) · Official site
US federal law protecting the privacy and security of individually identifiable health information. The Security Rule (45 CFR 164) governs electronic PHI; a major NPRM proposes mandatory MFA, encryption, and incident response exercises, with a final rule expected July 2027.
Timeline
CIS blog article discussing how healthcare organizations can maintain HIPAA compliance and cybersecurity obligations while ensuring patient safety.
Sources we monitor
- Federal Register — HIPAA (45 CFR 164) checked 5 hours, 58 minutes ago
- eCFR — 45 CFR 164, section versions checked 6 hours, 43 minutes ago