Jan. 15, 2025
The U.S. Department of Health and Human Services (HHS) Office of Civil Rights (OCR) published a proposed rule in the Jan. 6 Federal Register to substantially increase the stringency of the cybersecurity requirements for regulated entities in the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule.

The intent of the proposed rule is to address prevalent cyberattack threats to electronic protected health information (ePHI) by proposing changes to various risk analyses, review, documentation, and other practices. Compliance costs for these proposals are estimated by OCR to be significant. However, the incoming administration signaled its intent to review many of the transition period’s major rules and proposals.

The American College of Radiology® (ACR®) is reviewing and communicating closely with other national physician organizations. To provide input for inclusion in future ACR comments, contact Michael Peters, ACR Senior Director, Government Affairs.

Related ACR News

  • Radiology’s Fight Against Prior Authorization Delays

    ACR is leading national efforts to make prior authorization more efficient and clinically appropriate while reducing the administrative burden and supporting national legislation.

    Read more
  • ACR Supports Medicaid Coverage of Lung Cancer Screening

    ACR-backed bill would mandate Medicaid lung cancer screening, expand cessation coverage, ban prior auth—aiming to save lives and reduce disparities.

    Read more
  • Patient-Centered Imaging Care Led by Radiologists

    ACR helps its state chapters fight scope of practice expansion, such as helping to oppose bills in state legislatures that would allow non-physicians to practice independently.

    Read more