Are you prepared for the new HIPAA Security Rule on cybersecurity? The new HIPAA Security Rule enhances cybersecurity for ePHI by eliminating “addressable” specifications, mandating comprehensive risk analyses, and requiring specific security measures like encryption and multi-factor authentication. It also addresses AI technology use, requiring risk assessment of AI tools that access ePHI.

Learning Objectives:

  • Understand key changes in the new HIPAA Security Rule, including the elimination of “addressable” specifications and the introduction of mandatory security measures for protecting electronic protected health information (ePHI).
  • Identify new requirements for risk analysis, technology asset inventory, and network mapping, and recognize their importance in maintaining a robust cybersecurity posture in healthcare settings.
  • Recognize the implications of AI technology use in healthcare under the new rule, including the need for risk assessment of AI tools that access or process ePHI, and understand the timeline for implementation and compliance.

Speaker

Heath Morgan

General Counsel
BC Services