Proposed changes to the HIPAA Security Rule mark the biggest update to healthcare data security in a decade, but while the rule acknowledges emerging quantum risks, it stops short of fully addressing ...

The 2026 HIPAA Security Rule update will introduce major new requirements, including universal encryption of electronic protected health information, multi-factor authentication, and annual security ...

Key Takeaways: HIPAA updates expected in 2026 will strengthen requirements to protect electronic protected health information (ePHI) and remove ambiguity regarding security safeguards. Enforcement ...

This post is part of our The Top 2025 Privacy and Security Issues Still Shaping Healthcare series, in which our team of attorneys provides essential strategies and ...

HHS’s Office for Civil Rights has proposed major updates to the HIPAA Security Rule to counter escalating cyber threats, including a 102% increase in large breach reports from 2018–2023. The changes ...

While many of the proposed modifications to the HIPAA Security Rule are reasonable expectations, others will be extremely onerous to implement - especially within a short time frame - if federal ...

Opposition is building as industry organizations weigh in on the public comment period for proposed changes to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule. In January ...

The HIPAA Security Rule may soon undergo its first major overhaul in over two decades. Although finalization could come as early as May 2026, timelines remain uncertain. Regardless, the proposed ...

The College of Healthcare Information Management Executives, the American Medical Association, and other healthcare providers and organizations are urging the U.S. Department of Health and Human ...

The HHS Office for Civil Rights is soliciting questions for a video the department is producing about a HIPAA rule. The prerecorded video will review the requirements of the HIPAA Security Rule’s risk ...

On June 18, 2025, a federal district court in Texas vacated a significant portion of the HIPAA Privacy Rule to Support Reproductive Health Care Privacy (“Final Rule ...