Trends in Healthcare Privacy and Security: Cybersecurity, Patient Rights, and Reproductive Rights

This presentation covered updates and strategies for healthcare cybersecurity defenses and incident response, Health and Human Services' (HHS) continued enforcement of patient rights in accessing their own health information, and HIPAA's amendments to protect reproductive healthcare information. Learning objectives for this session included the following: Discussed trends in healthcare cybersecurity, including expected updates to the HIPAA Security Rule, HHS' Security Risk Analysis enforcement initiative, and recent HHS ransomware settlements Provided a refresher on HIPAA's right for individuals to access their own information, in light of HHS' continued HIPAA Right of Access enforcement initiative Discussed the status of HIPAA's recent amendments to provide additional protections for reproductive healthcare information under the incoming Trump administration Shared effective strategies for cyber event response, focusing on containment, mitigation, and recovery, with lessons learned from recent cyber incidents in healthcare Explored the role of artificial intelligence in enhancing cybersecurity defenses, including its applications in threat detection, anomaly analysis, and predictive security measures Explained how to manage cyber risks with third-party vendors, emphasizing the importance of vendor risk assessments, contract provisions, and ongoing monitoring to ensure compliance and safeguard sensitive information On January 23-24, PYA and Foley & Lardner LLP presented the seventh annual Let's Talk Compliance virtual conference. The event was moderated by Foley Health Care Partner Jana Kolarik and PYA Principal Angie Caldwell. Panelists included attorneys from Foley's Health Care & Life Sciences Sector as well as PYA's healthcare consulting, compliance, and cybersecurity experts. Each day featured two sessions that covered relevant and trending topics in healthcare and life sciences compliance.