The Department of Health and Human Services’ Office for Civil Rights yesterday released a video on recognized security practices under the HIPAA security rule and how covered entities may demonstrate implementation.

“An amendment to the HITECH Act passed in January 2021, through the efforts of AHA and other prominent health care organizations, provided regulatory relief for a HIPAA covered entity that becomes victim of a cyberattack and can demonstrate that it had recognized security practices such as the Health Industry Cybersecurity Practices in place for the previous 12 months, said John Riggi, AHA’s national advisor for cybersecurity and risk. “This important video outlines what type of evidence and documentation must be presented to OCR to qualify for the regulatory relief. The evidence must demonstrate that the recognized cybersecurity practices have been implemented and are functioning on an organizational wide basis. In the face of continued high-impact cyberattacks and increased government scrutiny of health care cybersecurity practices, this statute provides significant incentive for hospitals and health systems to voluntarily implement recognized cybersecurity practices.” 

Related News Articles

Headline
A pro-Russian hacktivist group known for distributed denial-of-service (DDoS) attacks against countries supporting Ukraine on Jan. 28 allegedly released attack…
Headline
The FBI last night seized control of servers and websites used by the Hive ransomware network to target hospitals and other critical infrastructure, and…
Headline
The Royal and Blackcat ransomware groups continue to aggressively target the U.S. health sector, according to a recent advisory from the Department of…
Headline
National Coordinator for Health Information Technology Micky Tripathi talks with AHA’s Nancy Foster about what his office is doing to help achieve a health…
Headline
The latest quarterly bulletin from the Department of Health and Human Services’ Healthcare Cybersecurity Coordination Center reviews cyberthreats to the…
Headline
The Clop ransomware group has been sending health care facilities ransomware-infected medical files disguised to appear to come from legitimate doctors, then…