The Department of Health & Human Services (HHS) issued proposed changes to the HIPAA Security Rule (“Proposed Rule”) on January 6, 2025, and is accepting comments from the public until March 7, 2025.

HIPAA violations don't always come from malicious attacks or headline-making data breaches. More often, they stem from everyday mistakes, like misdirected emails and vendors that aren't as secure as ...

The healthcare ecosystem has closed the book on a volatile 2025, and HIPAA enforcement has moved into 2026 with sharper edges, wider apertures, and higher stakes. Regulators spent 2025 refining the ...

The Health Insurance Portability and Accountability Act (HIPAA) was introduced in 1996 to safeguard private health information and ensure continuity of coverage for individuals navigating employment ...

Since the public comment period closed on Mar. 7, 2025, the HHS Office for Civil Rights has been reviewing the thousands of comments posted on the Federal Register in response to its proposed HIPAA ...

I’ve worked with healthcare organizations long enough to notice a pattern: Many treat HIPAA compliance as a finish line. Once they've checked off a few items, passed an audit or updated a document or ...