{"id":4771,"date":"2021-04-22T18:32:03","date_gmt":"2021-04-22T23:32:03","guid":{"rendered":"https:\/\/www.kraftgrp.com\/?p=4771"},"modified":"2021-04-22T18:32:03","modified_gmt":"2021-04-22T23:32:03","slug":"hipaa-cybersecurity-safe-harbor-laws","status":"publish","type":"post","link":"https:\/\/www.kraftgrp.com\/hipaa-cybersecurity-safe-harbor-laws\/","title":{"rendered":"HIPAA Cybersecurity Safe Harbor Laws"},"content":{"rendered":"

HIPAA Cybersecurity Safe Harbor Laws<\/h2>\n

When it comes to cybersecurity breaches, the health sector is one of the most impacted. In 2020 alone, from January to November,\u00a0cybersecurity cases accounted for about 79%<\/a> in this sector. There was also an increase in attacks aimed at health care entities by up to 45% from November 2020 to January 2021. As a result, former President Trump signed the\u00a0HR 7989<\/a> bill on January 5, 2020. The bill, the HIPAA Cybersecurity Safe Harbor Laws, creates a safe harbor for the companies that implement the recognized security best practices before experiencing cyber-attacks.<\/p>\n

\"Hospital<\/p>\n

What Is the HIPAA Safe Harbor Bill?<\/h3>\n

The high number of cyberattacks on health organizations in 2020 also affected those companies with best security practices. It seemed unfair for the HHS to fine such businesses, yet they had measures to protect against data breaches. Notably, even the FBI raised concerns about the imminent\u00a0ransomware attacks<\/a>.<\/p>\n

The HIPAA Safe Harbor bill was then developed to protect those entities that had met the recognized security practices but still faced security breaches. Consequently, the HHS has to evaluate the security measures implemented by a health organization within the last 12 months by availing incentives.<\/p>\n

Additionally, HHS should consider the following factors:<\/p>\n