Back to today’s briefing

Story perspectives

HHS Proposes Tougher Cybersecurity Rules Amid Data Breach Surge

1/5/2025

27 6

Summary

Story summary

The U.S. Department of Health and Human Services is taking bold steps to bolster cybersecurity for electronic protected health information (ePHI) amid a staggering 102% rise in data breaches since 2018. Proposed updates to the HIPAA Security Rule mandate multifactor authentication, encryption, and regular risk assessments. Stakeholders will have 60 days to weigh in after the proposal is published on January 6, 2025.

1 of 1

Story summary

The U.S. Department of Health and Human Services is taking bold steps to bolster cybersecurity for electronic protected health information (ePHI) amid a staggering 102% rise in data breaches since 2018. Proposed updates to the HIPAA Security Rule mandate multifactor authentication, encryption, and regular risk assessments. Stakeholders will have 60 days to weigh in after the proposal is published on January 6, 2025.