|
OCR Releases New HIPAA Proposed Rule Focused on Cybersecurity.
The Office for Civil Rights (OCR) has released a proposed rule that seeks to improve cybersecurity and better protect the health care system from cyberattacks. The proposed rule would modify the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule to require HIPAA covered entities (health plans, health care clearinghouses, and most health care providers) and their business associates to strengthen cybersecurity measures for protected health information (PHI) against both external and internal threats.
OCR proposes to modify the HIPAA Security Rule by clarifying and providing more specific instruction regarding what covered entities and their business associates must do to protect the security of electronic PHI. The proposal also would require that policies and procedures be in writing, reviewed, tested, and updated on a regular basis. Additionally, it seeks to align the Security Rule with modern best practices in cybersecurity. According to the agency, the proposed rule will address: (i) Changes in the environment in which health care is provided; (ii) Significant increases in breaches and cyberattacks; (iii) Common deficiencies OCR has observed in investigations into Security Rule compliance by covered entities and their business associates; (iv) Other cybersecurity guidelines, best practices, methodologies, procedures, and processes; and (v) Court decisions that affect enforcement of the Security Rule. Go here to access the proposed rule in the Federal Register and here to review the OCR fact sheet.
| |
|
The Annual Member Meeting held earlier this month, we recapped the highlights from our work in 2024. These include:
- Three successful conferences (Spring, Summer and National) and each event smashed previous registration records!
- Convened two Member Position Advisory (MPAs) Sessions and multiple CMS Listening Sessions.
- Welcomed 11 new industry members and 4 new Government and Patient Advocacy members and maintained a 91% retention rate.
- Integrated a Patient Centric approach by welcoming two patient advocacy organizations to our membership roster, introduced the patient voice into workgroup discussions, and held multiple sessions specifically related to “the patient voice” and how customer data can improve the patient experience.
- Produced a multi part Spotlight series on The Road to Interoperability on the new CMS rule and a new series on 0057 to come in 2025!
- The WEDI Podcast (The Collective Voice of Health IT) Achieved 19,000+ total downloads all-time, 5434 downloads in 2024 (All time downloads for a year) and broke all time download month total (826 downloads, October 2024).
- The WEDI workgroups produced a dozen new workgroup products including the Top 10 Cybersecurity Tips and Claims and Remittance Survey.
- Grown our advisory role, notably with CMS at the Remittance and Payment and Prior Authorization SWGs and No Surprises Act Taskgroup.
- Updated and elevated the WEDI website with more changes to come.
We continue to build on this momentum as an industry convener into 2025!
| | |
|
|
Michael chats with LA Care CEO John Baackes, who is retiring at the end of the year after 48 years in healthcare. The two discuss John's legacy at LA Care, the industry's evolution, how he thinks the new administration will affect Health Equity initiatives, and his closing words of wisdom to current and future healthcare professionals.
Click HERE to listen, or subscribe to the WEDI podcast on your favorite streaming service!
| | |
|
Free to the Industry!
Join us for an in-depth spotlight designed for health care stakeholders—payers, providers, vendors, government, HIEs, SDOs, and more—focused on the latest developments in implementing the Payer-to-Payer API, Provider Access API, and Patient Access API from the CMS-0057-F final rule. As the health care landscape evolves toward greater interoperability, these APIs will critical to facilitate seamless information exchange, improve patient care coordination, and support value-based care.
| |
Join us for an engaging and informative Virtual Spotlight exploring how health care stakeholders—payers, providers, and innovators—are leveraging data and technology to bridge gaps in health care accessibility for under-resourced communities. | | |
|
|
Confirmed Speakers Include

- Vanessa Candelora, HL7 Gravity Project
- Alex Li, MD, Chief Health Equity Officer, LA Care
- Vanessa Hill, Manager, Community Health, Sentara
- Darylin Doublehead, Clinical Solutions Architect, Cherokee Nation Health Services
- Kendra Wyatt, Founder, New Birth Company
| |
Use code "WINTERWEDI" for a 25% discount until January 13th, 2025 | |
|
Join the Conversation and Help Shape the Future of Cybersecurity in Healthcare.

In an era of rapid technological advancements and increasing digital connectivity, the health care industry faces an unprecedented wave of cybersecurity challenges. Join us for an insightful Virtual Spotlight as we explore the latest trends, threats, and solutions shaping the future of health care cybersecurity.
| |
Thank you to all our WEDI Workgroup volunteers! The workgroup meetings will begin again in January 2025. Stay tuned for information on upcoming projects and ways to get involved! | |
|
WEDI, a national membership association since 1991, advises on health IT policy and implementation, focusing on enhancing health care through efficient data sharing and education across all stakeholders. Learn more about becoming a member here!
Connect, collaborate & communicate for a better health system
| | |
|  |
|
Was this email shared with you?
Subscribe today and stay a step ahead of the competition with the latest news, regulatory information, free resources and more!
| | | | |
