The U.S. Department of Health and Human Services (HHS) is poised to finalize the most significant update to the HIPAA Security Rule since ...

Healthcare providers face sweeping HIPAA changes in 2026 as security controls become mandatory and testable, ending the era of optional safeguards. The move targets persistent weaknesses that have ...

The proposed update to strengthen the cybersecurity of electronic protected health information fails to account for "information technology complexities of modern health care delivery organizations" ...

Healthcare entities and their business associates (healthcare companies) have spent the better part of two decades navigating the Health ...

The cybersecurity and privacy regulation update proposed in January would place "extreme and unnecessary regulatory burden" on providers, the groups wrote in a letter to the department. () More than ...

Federal policymakers have extended Medicare telehealth flexibilities through 2027, maintaining pandemic-era access gains while introducing stricter HIPAA security measures. New mandates require ...

The HIPAA Security Rule may soon undergo its first major overhaul in over two decades. Although finalization could come as early as May 2026, timelines remain uncertain. Regardless, the proposed ...

The HIPAA Privacy Rule establishes standards for how protected health information (PHI) is used and disclosed. The updates for 2026 include expanded patient access to ...

A reorganization of the U.S. federal office charged with enforcing health privacy and security has close observers worried that it will focus less on an epidemic of breaches and more on ...

The HHS Office for Civil Rights is soliciting questions for a video the department is producing about a HIPAA rule. The prerecorded video will review the requirements of the HIPAA Security Rule’s risk ...