🔐Proposed HIPAA Security Rule Enhancements for Cybersecurity Compliance
The Department of Health and Human Services (HHS or "Department") is issuing this notice of proposed rulemaking (NPRM) to solicit comment on its proposal to modify the Security Standards for the Protection of Electronic Protected Health Information ("Security Rule") under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act). The proposed modifications would revise existing standards to better protect the confidentiality, integrity, and availability of electronic protected health information (ePHI). The proposals in this NPRM would increase the cybersecurity for ePHI by revising the Security Rule to address: changes in the environment in which health care is provided; significant increases in breaches and cyberattacks; common deficiencies the Office for Civil Rights has observed in investigations into Security Rule compliance by covered entities and their business associates (collectively, "regulated entities"); other cybersecurity guidelines, best practices, methodologies, procedures, and processes; and court decisions that affect enforcement of the Security Rule.
Learn More🏥Copayment Exemption for Whole Health Services Proposed by VA
The Department of Veterans Affairs (VA) proposes to revise its medical regulations to exempt Whole Health well-being services from the copayment requirements for inpatient hospital care and outpatient medical care. These Whole Health well-being services, which consist of Whole Health education and skill-building programs and complementary and integrative health well-being services, are provided to Veterans within the VA Whole Health System of Care to improve Veterans' overall health and well-being.
Learn More