The Department of Health and Human Services reduced its fines for violations of HIPAA — the law requiring health care industries to protect customer data, according to a notice this week in the Federal Register. Driving the news: The new rules reduce a maximum fine of $1.5 million to a maximum fine of $250,000.
The need for robust cybersecurity legislation has never been more urgent. The Cybersecurity and Resiliency Act (HCCRA) of 2024 is a proposed bipartisan bill aimed at enhancing cybersecurity resilience across the health care sector.