New HIPAA rules will add over a dozen requirements to the existing 50, plus 7-8 entirely new rules. One compliance team spent hundreds of hours over six months building policies and systems to prepare, though HHS hasn't yet decided whether to roll out the changes all at once or in phases.
The only thing we haven't talked about is the future. Where is it going? You mentioned cybersecurity changes. How many more things did that add to the list? You said there was 50 on the list. How many more things per year are going to be done with this new cybersecurity stuff?
It's over a dozen more new things. Yeah. I mean, that's under the proposed rule. And our compliance team worked around the clock the last 6 months, literally hundreds of hours put into getting policy and procedures and systems ready Based on what the proposed rule says, I mean, it's it was a heavy lift, and I'm really proud of my team, and we're ready. So, having said that, HHS is going to have to decide if they're going to implement the whole boatload of changes or if they're going to phase it in or whatever, and that's yet to be seen. But we're ready for it either way. But yes, it's it adds more into our monitoring and auditing phase. We've got a number of policies in HIPAA security rule that. Are getting increased or more complex in current rules, but then they're adding, you know, like 7 or 8 new rules on top of that.
