Health Supply-Chain Hacks Targeted by HHS Cybersecurity Rule

The Department of Health and Human Services’ first major revamp in two decades to its cybersecurity rules would require the ever-growing health-care supply chain to overhaul security practices that have enabled an explosion of cyberattacks against providers from major hospital network to local clinics.

HHS’s Office for Civil Rights’ Jan. 6 notice of proposed rulemaking seeks to strengthen the cybersecurity of electronic protected health information under the 1996 Health Insurance Portability and Accountability Act. If adopted, the rules would bring stringent compliance requirements across the health-care ecosystem, which has expanded with new entrants including artificial intelligence and data analytics providers. ...