10 Key Takeaways from the Proposed HIPAA Security Rule Update: What You Need to Know

On December 27, 2024, the U.S. Department of Health and Human Services (HHS), through its Office for Civil Rights (OCR), unveiled its long-awaited proposed rule to update the HIPAA Security Rule for the first time since 2013. This update aims to strengthen cybersecurity measures to protect personal health information amid a surge of cyber threats targeting the healthcare sector. With 71% of healthcare organizations reporting a rise in cybersecurity incidents last year, understanding these changes is crucial for healthcare providers and associated organizations.