On September 2-3, 2026, the Department of Health and Human Services (“HHS”) Office for Civil Rights (“OCR”) and the National Institute of Standards and Technology (“NIST”) hosted the Safeguarding Health Information: Building Assurance Through HIPAA Security 2026 conference.
This post shares takeaways in three key areas highlighted at the conference.
The past several years have proven difficult for healthcare entities due to increasing cybersecurity threats, breaches and regulatory enforcement. Following these trends, on April 6, 2022, the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) released a Request for Information (RFI) soliciting public comment on how regulated entities are voluntarily implementing security practices under the Health Information Technology for Economic and Clinical Health Act of 2009 (HITECH Act) and also seeking public input on sharing funds collected through enforcement with individuals who are harmed by Health Insurance Portability and Accountability Act of 1996 (HIPAA) rule violations.
Recent Updates
- Congressional Action on Health Care Cybersecurity: HISAA is Re-Introduced and the Health Care Cybersecurity and Resiliency Act Moves Forward
- DOJ Corporate Fraud Enforcement Memo: What Health Care Companies Need to Know Now
- Attorneys General of Three States File Two Sweeping Lawsuits Targeting Telehealth Abortion Providers and State Shield Laws
- RFI Seeks Input on Medicare Part D’s Pharmacy Contract Standards
- Proposed H.R. 10336 Would Balance Innovation, Access to Dietary Supplements—Yet Change the Definition