Proposed changes to the HIPAA Security Rule mark the biggest update to healthcare data security in a decade, but while the ...

Key Takeaways: HIPAA updates expected in 2026 will strengthen requirements to protect electronic protected health information (ePHI) and remove ambiguity regarding security safeguards. Enforcement ...

The 2026 HIPAA Security Rule update will introduce major new requirements, including universal encryption of electronic protected health information, multi-factor authentication, and annual security ...

The HIPAA Privacy and Security Rules require covered entities (including healthcare providers and health plans) and their business associates to protect patient ...

This post is part of our The Top 2025 Privacy and Security Issues Still Shaping Healthcare series, in which our team of attorneys provides essential strategies and ...

While many of the proposed modifications to the HIPAA Security Rule are reasonable expectations, others will be extremely onerous to implement - especially within a short time frame - if federal ...

Jennifer S. Geetter focuses on emerging biotechnology and safety issues, advising hospital, industry, insurance and provider clients on matters relating to research, drug and device development, ...

Encryption becomes mandatory: AES‑256 encryption will be required for all ePHI at rest, with TLS 1.3 or higher for data in transit, removing previous flexibility. Beyond technical controls: ...

In recent years, health care organizations and the vendors that support them have been prime targets for cyber attacks. Indeed, just last year, the ransomware attack on the health care clearinghouse ...

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up for any (or all) of our 25+ Newsletters. Some states have laws and ethical rules regarding solicitation and ...

Purdue University is a Hybrid Entity under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Purdue’s primary purpose is education; however, Purdue does have departments and ...

Interested in writing for CW? Compliance Week accepts outside contributions from corporate chief compliance officers and other senior-level GRC practitioners. To learn more, contact the CW Editor.