The Office for Civil Rights at the U.S. Department of Health and Human Services (“HHS”), which administers and enforces the HIPAA Security Rule (“Security Rule”), recently issued a Notice of Proposed Rulemaking (NPRM) to strengthen cybersecurity protections for electronic protected health information (ePHI). The proposed rule introduces several new requirements and clarifications that will have […]