New York Proposes Cybersecurity Regulations For Hospitals

Governor Kathy Hochul has released new cybersecurity requirements for hospitals in New York, requiring that they implement minimum cybersecurity controls to safeguard protected health information and avoid delays in care as a result of cybersecurity events. The proposed regulations would require hospitals to develop, implement and maintain a cybersecurity program that includes minimum cybersecurity standards, cybersecurity staffing, network monitoring and testing, policy and program development, employee training and remediation, incident response and appropriate reporting protocols, and records retention.

Recognizing that an effective cybersecurity program will require significant startup costs and ongoing annual costs to maintain, the governor has announced that the $500 million in funding for health technology and cybersecurity in the Statewide Health Care Facility Transformation Program V, enacted as part of the FY24 budget, will be used to assist hospitals in