HHS prioritizes patient-centric healthcare, enhancing interoperability and access to health information while addressing privacy concerns and technology disparities.
Understanding HIPAA's Privacy Rule clarifies how incidental disclosures in health care settings are permissible, ensuring patient privacy while facilitating essential communications.
Practice administrators seeking federal grants or contracts must look beyond HIPAA, completing SAM registration and adopting FAR 52.204‑21’s 15 essential cybersecurity controls to safeguard PHI, PII, FCI and CUI.
Two class-action lawsuits targeting the University of Maryland Medical Center and the University of Kansas Health System for years-long cyberstalking and unauthorized access to protected health information spotlight massive HIPAA risk-analysis failures and underscore the urgent need for stronger health care cybersecurity safeguards.