[{"innerBlocks":[],"name":"core\/freeform","postId":1134,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Much of the nation\u2019s healthcare stakeholders aren\u2019t doing enough to take cybersecurity measures necessary to mitigate cyber threats.

The lack of sufficient action is despite continuing assaults from hackers and mounting regulatory actions by the HHS Office for Civil Rights, which enforces the laws on data protection.

OCR regulators want to see more effort to secure data; they want to see adequate cyber technology, processes and additional appropriate controls by providers and insurers, says attorney Laura Hammargren, a partner in the Mayer Brown law firm in Chicago.

\u201cThis is not a technology problem, but it requires information technology, legal, privacy and human resources compliance, of which all at some time will be involved,\u201d she explains.

Also See:<\/b> 7 emerging data security and risk management trends<\/a>

OCR has become more actively involved in oversight and has previously issued guidance covering information security and customized incident response plans that should be followed.

Hammargren can\u2019t say for sure if OCR\u2019s moves are intended as a warning, but she believes that failure to implement enhanced security \u201cwill lead to negative consequences in the future if appropriate controls are not put in place. HHS explicitly expresses this for healthcare and it should not be ignored. HHS guidance is intended to highlight the need to improve security.\u201d

Hammargren also emphasizes that HHS will be watching this year for signs of how well the industry is moving toward better security. State attorneys general and other regulators also are becoming more active, she cautions.","saveContent":"Much of the nation\u2019s healthcare stakeholders aren\u2019t doing enough to take cybersecurity measures necessary to mitigate cyber threats.

The lack of sufficient action is despite continuing assaults from hackers and mounting regulatory actions by the HHS Office for Civil Rights, which enforces the laws on data protection.

OCR regulators want to see more effort to secure data; they want to see adequate cyber technology, processes and additional appropriate controls by providers and insurers, says attorney Laura Hammargren, a partner in the Mayer Brown law firm in Chicago.

\u201cThis is not a technology problem, but it requires information technology, legal, privacy and human resources compliance, of which all at some time will be involved,\u201d she explains.

Also See:<\/b> 7 emerging data security and risk management trends<\/a>

OCR has become more actively involved in oversight and has previously issued guidance covering information security and customized incident response plans that should be followed.

Hammargren can\u2019t say for sure if OCR\u2019s moves are intended as a warning, but she believes that failure to implement enhanced security \u201cwill lead to negative consequences in the future if appropriate controls are not put in place. HHS explicitly expresses this for healthcare and it should not be ignored. HHS guidance is intended to highlight the need to improve security.\u201d

Hammargren also emphasizes that HHS will be watching this year for signs of how well the industry is moving toward better security. State attorneys general and other regulators also are becoming more active, she cautions.","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Attorney warns HHS is likely to get tougher on data security

More for you