Call us now:
U.S Federal Agency Health and Human Services, Office of Civil Right (OCR), is investigating UnitedHealth Group and Change Healthcare following their February 2024 cyber incident. An incident that had a significant effect on the healthcare industry across the U.S. (https://lnkd.in/eRZchkc6)
OCR administers and enforces HIPAA, that sets the minimum privacy and security requirements for protected health information(PHI), and breach notification requirements of covered entities. They are investigating whether Change Healthcare implemented appropriate safeguards over the protection of PHI. Making clear that while not a priority today, they have an interest in entities that have partnered with Change Healthcare and their regulatory obligations and responsibilities.
This investigation will be one to watch. The impact of the Change Healthcare cyber attack across the U.S healthcare industry has been significant, with Congress being approached to help remediate the effects of the attack. One suspects cybersecurity regulation for the healthcare industry will not be far off. The investigation will shape the role of healthcare boards in the oversight, assurance and attestation of cybersecurity risk management.
Will the SEC be high on the list of regulators interested in United Health and Change Healthcare, following the OCR investigation?
Veritas GRC
@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Rich Waite, M.Ed. George Sawyer Bob Dix Ryan Buckner Adam Perella U.S. Department of Health and Human Services (HHS) UnitedHealth Group
#cybersecurity #cyberriskmanagement #cyberregulation #3lod #internalaudit
#audit
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7177938239968661506