In response to an alarming increase in the size and frequency of large-scale data breaches involving protected health information, the U.S. Department of Health & Human Services Office for Civil Rights (OCR) dropped a bit of a year-end bombshell: proposed HIPAA Security Rule amendments, currently available here.
The proposal – which represents a major revision to the Security Rule -- aims to strengthen the Security Rule in order to combat this data breach trend. New requirements will apply to covered entities and their business associates alike, as the Security Rule applies equally to covered entities and business associates.
[View source.]
