Share on LinkedInShare on LinkedIn

ARTICLE · 18 MAY 2026

Stay Off The HIPAA Wall Of Shame

The Department of Health and Human Services is preparing a sweeping refresh of HIPAA Security Rule requirements that will fundamentally transform how healthcare organizations must safeguard electronically-protected health information. With OCR estimating first-year compliance costs at approximately $9 billion and the removal of "addressable" implementation specifications, organizations face strategic imperatives requiring immediate operational and investment planning.

United StatesTechnology

The surge in cyberattacks across the U.S. healthcare system has been matched by tightening enforcement of data privacy rules. The compliance bar is about to rise and requires operational and investment planning. 

The Department of Health and Human Services (HHS) is preparing a sweeping refresh that will fundamentally transform how covered entities and business associates must safeguard electronically-protected health information. 

As seen in the below figure, the number of violations pursued by the agency’s Office for Civil Rights (OCR) is already climbing, detailed on the ‘Wall of Shame’ on its website and fueled in part by the expansion of agentic AI services that require additional safeguards from providers. 

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from