<< All Publications
March 24, 2025

Evaluating the Impact of Proposed Changes to the HIPAA Security Rule

In this article published by The Legal Intelligencer, Marci Rozen discusses the growing cybersecurity risks facing health care organizations and the vendors that support them. She highlights the massive impact of recent ransomware attacks, including one that affected the protected health information (PHI) of over half the U.S. population. Despite the rising sophistication of these threats, HIPAA’s security rule has not been updated since 2013. The article explores proposed changes by the Department of Health and Human Services (HHS) and how covered entities and business associates can prepare for the evolving regulatory and threat landscape. This article is paywalled.

Read the full article →