Cyberattacks are growing more common and more devastating. Organizations without a clear plan of action could be left scrambling to mount a unified response—and running afoul of HIPAA.
Poor cybersecurity in the healthcare industry amounts to a public health concern, according to the Health Care Industry Cybersecurity Task Force, a federal task force established to fulfill requirements of the Cybersecurity Act of 2015.
Consumer-facing health apps and personal health records are booming, and some covered entities such as health plans or clinics leverage these services to help patients. But it can sometimes be difficult to determine whether these vendors fall under HIPAA or not.