18 pages. "If finalized, these would be the first modifications of the Security Rule since 2013 and could entail significant additional compliance obligations and costs for HIPAA covered entities and business associates.... [A] redline of the existing language of the Security Rule with the NPRM's proposed modifications is available ... HHS states that the NPRM is intended to address ... significant increases in breaches and cyberattacks; common deficiencies OCR has observed in investigations into Security Rule compliance; ... and court decisions that affect the enforcement of the Security Rule."  MORE >>