AHA urges OCR to expedite regulatory relief for certain cybersecurity practices

Nov 16, 2021 - 08:43 AM
FDAcybersecurity

The AHA today urged the Department of Health and Human Services’ Office for Civil Rights to quickly initiate rulemaking for a legislative provision (H.R. 7898) enacted by Congress this year to recognize certain recommended security practices when making determinations related to Health Insurance Portability and Accountability Act audits, fines and resolution agreements.

“The law appropriately recognizes that covered entities and business associates, like all entities including the Federal Government, can never fully eliminate the risk of cyberattacks,” AHA wrote. “When the inevitable attack occurs, entities should not be penalized, but rather treated as the victims of a crime. The law translates this concept by allowing certain measures of regulatory relief if the HIPAA-covered entity or business-associate victim had in place federally recognized security practices, such as those defined under the National Institute of Standards and Technology (NIST) Cybersecurity Framework and developed under Section 405(d) of the Cybersecurity Act of 2015.”
 

Related News Articles

Headline
White House announces tariffs on goods imported from Canada, Mexico, China
The White House Feb. 1 announced it placed tariffs on imported goods from Canada, Mexico and China. The tariffs for Mexico and Canada have since been delayed…
Headline
CISA, FDA warn of vulnerabilities in Contec patient monitors 
The Cybersecurity and Infrastructure Security Agency and Food and Drug Administration Jan. 30 released notices warning of vulnerabilities found in the Contec…
Headline
Advisory details ransomware attacks on SimpleHelp remote access software
The AHA yesterday released an advisory alerting members that the association and the Health Information Sharing and Analysis Center have identified attempted…
Headline
Senate introduces bill reauthorizing Dr. Lorna Breen Health Care Provider Protection Act
The AHA Jan. 28 voiced support for bipartisan legislation to reauthorize for five years the Dr. Lorna Breen Health Care Provider Protection Act, which provides…
Headline
Reports: Change Healthcare cyberattack exposed data of 190 million people
The ransomware attack last year against UnitedHealth Group subsidiary Change Healthcare exposed data of more than 190 million people — up from previous reports…
Chairperson's File
Chair File: Leadership Dialogue — Tackling Today’s Health Care Challenges with AHA Leaders Stacey Hughes and Ashley Thompson
There is so much for health care leaders to navigate when it comes to public policy and government relations. Thankfully, the AHA has an expert team with…