The surge in cyberattacks across the U.S. healthcare system has been matched by tightening enforcement of data privacy rules. The compliance bar is about to rise and requires operational and investment planning.
The Department of Health and Human Services (HHS) is preparing a sweeping refresh that will fundamentally transform how covered entities and business associates must safeguard electronically-protected health information.
As seen in the below figure, the number of violations pursued by the agency’s Office for Civil Rights (OCR) is already climbing, detailed on the ‘Wall of Shame’ on its website and fueled in part by the expansion of agentic AI services that require additional safeguards from providers.