The Department of Health and Human Services is lowering its top fines for less egregious HIPAA violations. Meanwhile, it’s pledging to make a “big push” to enforce patients’ right to access their health records. HHS will keep its revised interpretation of the HITECH Act penalty caps in mind “for all enforcement operations,” says Roger Severino, director of the HHS Office for Civil Rights, which enforces HIPAA.
The need for robust cybersecurity legislation has never been more urgent. The Cybersecurity and Resiliency Act (HCCRA) of 2024 is a proposed bipartisan bill aimed at enhancing cybersecurity resilience across the health care sector.