"The proposals in this NPRM would increase the cybersecurity for ePHI by revising the Security Rule to address: [1] changes in the environment in which health care is provided; [2] significant increases in breaches and cyberattacks; [3] common deficiencies [OCR] has observed in investigations into Security Rule compliance by covered entities and their business associates; [4] other cybersecurity guidelines, best practices, methodologies, procedures, and processes; and [5] court decisions that affect enforcement of the Security Rule." [Also available: Fact Sheet and HHS Press Release]  MORE >>