The American College of Radiology (ACR) is reviewing proposed cybersecurity changes to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule.
The changes, proposed by the U.S. Department of Health and Human Services, aim to substantially increase the rigidness of the cybersecurity requirements for regulated entities in the security rule. The intent of the proposed rule is to address prevalent cyberattack threats to electronic protected health information (ePHI). This includes proposing changes to various risk analyses, review, documentation, and other practices.
The ACR in its media statement said that compliance costs for these proposals are estimated by the Office of Civil Rights to be significant. However, the incoming Trump administration highlighted its intent to review the transition period’s major rules and proposals.
Along with reviewing the proposed rule, the ACR said it is communicating with other national physician organizations.