HIPAA

Health Insurance Portability and Accountability Act Security Rule · HHS Office for Civil Rights (OCR) · Official site

US federal law protecting the privacy and security of individually identifiable health information. The Security Rule (45 CFR 164) governs electronic PHI; a major NPRM proposes mandatory MFA, encryption, and incident response exercises, with a final rule expected July 2027.

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 2 official sources. Watching since 7 September 2026. Last checked 3 hours, 41 minutes ago.