HHS cyber plan for updating HIPAA security rules includes first-time AI requirements

A proposed rulemaking from the Department of Health and Human Services to establish cyber requirements under the Health Insurance Portability and Accountability Act features first-time requirements for assessing risks from the burgeoning use of artificial intelligence by the healthcare industry.

The 393-page regulatory proposal would update the Security Rule under the Health Insurance Portability and Accountability Act, and is likely intended as a parting shot by HHS on addressing what it says has been an onslaught of cyber attacks...