The Department of Health and Human Services is lowering its top fines for less egregious HIPAA violations. Meanwhile, it’s pledging to make a “big push” to enforce patients’ right to access their health records. HHS will keep its revised interpretation of the HITECH Act penalty caps in mind “for all enforcement operations,” says Roger Severino, director of the HHS Office for Civil Rights, which enforces HIPAA.

As more of the healthcare ecosystem depends on large-scale cloud providers, executive teams must ensure they have the visibility, governance, and architectural resilience to withstand the next unplanned disruption whether it lasts minutes or hours.

