Under a new HIPAA proposal, organizations would need to conduct penetration testing at least once a year to help identify any ...

While organizations invest millions in advanced medical technologies, their approach to protecting sensitive data remains ...

The NPRM introduces the first significant updates to HIPAA’s security rule in over a decade. The NPRM revises definitions of ...

Researchers planning to use PHI held by an outside institution (non-University PHI) are also required to submit an application to the IRB for review, but must follow the HIPAA requirements of the ...

Major cybersecurity breaches continue to plague the US healthcare industry, and on December 27, 2024, the U.S. Department of ...

Federal regulators have quietly resumed compliance audits of HIPAA-regulated organizations. With the surge in ransomware and ...

The updates aim to fortify the confidentiality, integrity and availability of electronic protected health information, or ...

The HIPAA Privacy and Security Rules require covered entities (including healthcare providers and health plans) and their ...