Record details
- Classification
- proposed
- Published date
- December 27, 2024
- Source
- HHS Office for Civil Rights
What this record says
The notice of proposed rulemaking would modify the HIPAA Security Rule to strengthen protections for electronic protected health information. HHS describes proposed requirements affecting covered entities and business associates. Organizations can use the proposal to understand the direction of rulemaking, but should not present proposed provisions as current binding requirements. Track the official HHS page and Federal Register materials for later action.
Who should review this
- Covered entities
- Business associates
- Security and privacy leaders
Core concepts
- Security Rule
- ePHI
- risk analysis
- incident response
- business associates
References
- Primary source HHS Office for Civil Rights