Back to today’s briefing

Story perspectives

Health Dept. Proposes Stronger Cybersecurity for Patient Data

1/10/2025

32 7

Summary

Story summary

The U.S. Department of Health and Human Services is taking a bold step to bolster cybersecurity for electronic protected health information (ePHI) by proposing crucial updates to the HIPAA Security Rule. With mandatory encryption, multi-factor authentication, and thorough documentation, these changes are designed to combat escalating cyber threats, demanding compliance within 180 days of the anticipated 2025 final rule.

1 of 1

Story summary

The U.S. Department of Health and Human Services is taking a bold step to bolster cybersecurity for electronic protected health information (ePHI) by proposing crucial updates to the HIPAA Security Rule. With mandatory encryption, multi-factor authentication, and thorough documentation, these changes are designed to combat escalating cyber threats, demanding compliance within 180 days of the anticipated 2025 final rule.