Back to today’s briefing

Story perspectives

New HIPAA Rules Aim to Strengthen ePHI Cybersecurity

1/7/2025

38 8

Summary

Story summary

The U.S. Department of Health and Human Services is taking bold steps to bolster cybersecurity for electronic protected health information (ePHI) with proposed updates to the HIPAA Security Rule. Key enhancements like mandatory encryption, multi-factor authentication, and thorough risk assessments aim to safeguard sensitive data. The public can weigh in until March 7, 2025, before these crucial rules are finalized.

1 of 1

Story summary

The U.S. Department of Health and Human Services is taking bold steps to bolster cybersecurity for electronic protected health information (ePHI) with proposed updates to the HIPAA Security Rule. Key enhancements like mandatory encryption, multi-factor authentication, and thorough risk assessments aim to safeguard sensitive data. The public can weigh in until March 7, 2025, before these crucial rules are finalized.