HEALTHCARE

Healthcare in the US is anchored by HIPAA and the HHS HPH cybersecurity proposed rule. Covered entities and business associates that handle PHI are in scope, and a breach affecting more than 500 records, or ransomware that hits unencrypted ePHI, is the kind of event that triggers breach notification, OCR scrutiny, and class-action exposure.

/healthcare