By Topic

HIPAA Security Enforcement Is Here

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

Formats Non-Member Member
$33 $13
Learn how you can qualify for the best price for this item!
Become an IEEE Member or Subscribe to
IEEE Xplore for exclusive pricing!
close button

puzzle piece

IEEE membership options for an individual and IEEE Xplore subscriptions for an organization offer the most affordable access to essential journal articles, conference papers, standards, eBooks, and eLearning courses.

Learn more about:

IEEE membership

IEEE Xplore subscriptions

1 Author(s)
Nahra, K.J. ; Wiley Rein LLP

Enforcement has been slow in coming for the administrative simplification rules under the US's Health Insurance Portability and Accountability Act (HIPAA). For more than five years, the Office of Civil Rights in the Department of Health and Human Services (HHS) has been responding to criticism that it has not been enforcing HIPAA's privacy rule as evidenced by its lack of formal enforcement penalties during this period. At the same time, although reports of security breaches continue to grow, no enforcement efforts have occurred related to HIPAA's security rule. This now appears to be changing, at least incrementally, with three new enforcement developments in the information security area. These actions—which include a significant enforcement penalty, an aggressive audit, and a series of security compliance reviews, clearly demonstrate that we've entered a new era for HIPAA enforcement. They also provide healthcare companies with a wide range of useful information about areas of potential concern for security compliance, along with clues as to how the HHS might proceed.

Published in:

Security & Privacy, IEEE  (Volume:6 ,  Issue: 6 )