Daily Dashboard

One-Hour Breach Reporting Provision Scrapped

HEALTHCARE PRIVACY—U.S.

September 3, 2013

A proposal that would require state health insurance exchanges to report data breaches to federal regulators within an hour of their discovery has been dropped from the final regulation, GovInfoSecurity reports. Instead the Department of Health and Human Services (HHS) will rely on the “strict” breach reporting provisions included in the HHS final rule, to be published in the Federal Register, slated to take effect by October 1.
Full Story