The Department of Health and Human Services’ Office for Civil Rights yesterday released a video on recognized security practices under the HIPAA security rule and how covered entities may demonstrate implementation.

“An amendment to the HITECH Act passed in January 2021, through the efforts of AHA and other prominent health care organizations, provided regulatory relief for a HIPAA covered entity that becomes victim of a cyberattack and can demonstrate that it had recognized security practices such as the Health Industry Cybersecurity Practices in place for the previous 12 months, said John Riggi, AHA’s national advisor for cybersecurity and risk. “This important video outlines what type of evidence and documentation must be presented to OCR to qualify for the regulatory relief. The evidence must demonstrate that the recognized cybersecurity practices have been implemented and are functioning on an organizational wide basis. In the face of continued high-impact cyberattacks and increased government scrutiny of health care cybersecurity practices, this statute provides significant incentive for hospitals and health systems to voluntarily implement recognized cybersecurity practices.” 

Related News Articles

Headline
The Food and Drug Administration yesterday released a safety notice announcing a software patch is available to address cybersecurity vulnerabilities in…
Headline
The Cybersecurity and Infrastructure Security Agency, FBI, Department of Defense Cyber Crime Center and the National Security Agency June 30 released a fact…
Headline
The Centers for Medicare & Medicaid Services today announced it has identified a fraud scheme targeting Medicare providers and suppliers. CMS said scammers…
Headline
The FBI, Cybersecurity and Infrastructure Security Agency and Australian Cyber Security Centre June 4 released an advisory on updated actions and tactics used…
Headline
The National Security Agency, Cybersecurity and Infrastructure Security Agency and international partners May 22 released guidance on securing data used for…
Headline
The FBI, along with the National Security Agency and other international cybersecurity agencies, this week released a joint agency advisory on cyber operations…