The U.S. Department of Health & Human Services Office for Civil Rights (OCR) issued a Notice of Proposed Rulemaking (Proposed Rule) aiming to strengthen cybersecurity protections and better defend against large-scale data breaches involving patient health information (PHI). The comment period will close on March 7, 2025 (60 days after the Proposed Rule was published in the Federal Register).
