Federal regulators are scheduled to issue a rule this month finalizing a proposed massive overhaul of the 23-year-old HIPAA ...

As of 2026, the Public Health Emergency enforcement discretion is officially over, and the OCR is treating telehealth with the same rigor as in-person PHI workflows. Pediatric practices, already ...

Risk analysis remains the foundation of HIPAA Security Rule compliance and continues to be a key OCR enforcement focus. Business associates and vendors are a major source of healthcare cybersecurity ...

Healthcare organizations are preparing for the most significant HIPAA Security Rule reforms in over a decade, introducing mandatory technical safeguards, annual audits, and stronger interoperability ...

Brent T. Hoard is a partner at Troutman Pepper Locke. This article was co-authored with his colleague, TPL Associate Emma E. Trivax. On January 6, 2025, the Biden administration’s Department of Health ...