--- title: HIPAA FAQs Updated Regarding Recent Cybersecurity Incident description: The U.S. Department of Health and Human Services’ Office for Civil Rights updated its HIPAA FAQs after the recent cybersecurity incident. image: https://blog.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg --- ![HIPAA FAQs Updated Regarding Recent Cybersecurity Incident](https://blog.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg) # HIPAA FAQs Updated Regarding Recent Cybersecurity Incident - Home - [Employee Benefit News for School, City and County Employers](https://blog.nisbenefits.com) - HIPAA FAQs Updated Regarding Recent Cybersecurity Incident [ Mari Wagner ](https://blog.nisbenefits.com/author/mari-wagner) 06/07/2024 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [0 Comments ](https://blog.nisbenefits.com/cybersecurity-hipaa-faqs#postComment) 1 Minutes *1 minute read* On May 31, 2024, the U.S. Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) updated its [FAQs](https://www.hhs.gov/hipaa/for-professionals/special-topics/change-healthcare-cybersecurity-incident-frequently-asked-questions/index.html) regarding HIPAA and the recent cybersecurity incident involving Change Healthcare, part of UnitedHealth Group. OCR enforces HIPAA [Privacy](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html), [Security](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html) and [Breach Notification](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html) Rules (HIPAA Rules) which require entities to protect PHI and report breaches to HHS and affected individuals.   ## **FAQ Updates** The updated FAQs discuss the obligation to notify HHS, impacted individuals, and, when relevant, the media about breaches. The FAQs state that: - Covered entities affected by the Change Healthcare breach can delegate breach notifications to Change Healthcare - Only one entity needs to provide breach notifications, and - if Change Healthcare provides the required breach notifications in a manner consistent with the HIPAA Rules, covered entities have no additional breach notification obligations.   ## **Cybersecurity Measures** OCR has urged HIPAA-covered entities and their business associates to promptly review cybersecurity measures to protect health information. Employers using third-party vendors like third-party administrators (TPAs) and pharmacy benefit managers (PBMs) should verify their cybersecurity practices and have secure business associate agreements in place for electronic PHI. Download the [bulletin](https://blog.nisbenefits.com/hubfs/blog-supporting-docs/bulletin-hipaa-faqs-cybersecurity.pdf) for more details.   ### **Compliance Resources** [HIPAA Security Rule Guidance Material](https://www.hhs.gov/hipaa/for-professionals/security/guidance/index.html?language=es) [OCR Webinar on HIPAA Security Rule Risk Analysis Requirement](https://www.youtube.com/watch?v=hxfxhokzKEU) [HIPAA Security Risk Assessment Tool](https://www.healthit.gov/topic/privacy-security-and-hipaa/security-risk-assessment-tool) [Fact Sheet: Ransomware and HIPAA](https://www.hhs.gov/hipaa/for-professionals/security/guidance/cybersecurity/ransomware-fact-sheet/index.html) [![Guide to Restructuring Retiree Benefits](https://no-cache.hubspot.com/cta/default/3325505/49cf7061-b64c-4370-b6e1-d10ec78158b6.png)](https://cta-redirect.hubspot.com/cta/redirect/3325505/49cf7061-b64c-4370-b6e1-d10ec78158b6) --- #### Tag: [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions) [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) #### Share: - [Follow us on Facebook ](http://www.facebook.com/share.php?u=https://blog.nisbenefits.com/cybersecurity-hipaa-faqs) - [Follow us on Twitter ](https://twitter.com/intent/tweet?url=https://blog.nisbenefits.com/cybersecurity-hipaa-faqs&text=HIPAA%20FAQs%20Updated%20Regarding%20Recent%20Cybersecurity%20Incident) - [Follow us on Linkedin ](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.nisbenefits.com/cybersecurity-hipaa-faqs) - [Follow us on Pinterest ](http://pinterest.com/pin/create/button/?url=https://blog.nisbenefits.com/cybersecurity-hipaa-faqs&text=HIPAA%20FAQs%20Updated%20Regarding%20Recent%20Cybersecurity%20Incidentdescription=1%20minute%20read%20On%20May%2031,%202024,%20the%20U.S.%20Department%20of%20Health%20and%20Human%20Services’%20(HHS)%20Office%20for%20Civil%20Rights%20(OCR)%20updated%20its%20FAQs%20regarding%20HIPAA%20and%20the[...]&media=https://info.nisbenefits.com/hubfs/blog-headers/cyberattack-hipaa-b.jpg) --- [ #### The Impact of DOL's New Overtime Rule on Employee Benefits ##### Previous Post ](https://blog.nisbenefits.com/new-overtime-rule-employee-benefits) [#### Battling Healthcare Affordability ##### Next Post ](https://blog.nisbenefits.com/battling-healthcare-authority) ### Leave a Reply This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ### Category - [Legislative News (1149)](https://blog.nisbenefits.com/topic/aca-other-legislative-news) - [Health Insurance Solutions (504)](https://blog.nisbenefits.com/topic/health-insurance-solutions) - [COVID-19 (209)](https://blog.nisbenefits.com/topic/covid-19) - [Ancillary Benefits (175)](https://blog.nisbenefits.com/topic/ancillary-benefits) - [Mental Health (122)](https://blog.nisbenefits.com/topic/mental-health) ### Popular Posts [ Steve Smith ](https://blog.nisbenefits.com/author/steve-smith) 02/16/2024 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions) [ Understanding Embedded vs. Nonembedded Deductibles ](https://blog.nisbenefits.com/understanding-embedded-nonembedded-deductibles) [ Erin Woulfe ](https://blog.nisbenefits.com/author/erin-woulfe) 02/09/2026 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ IRS Releases 2027 Health Plan Cost-sharing Limits ](https://blog.nisbenefits.com/2027-health-plan-cost-sharing-limits) [ Valerie Ortiz ](https://blog.nisbenefits.com/author/valerie-ortiz) 02/17/2026 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner) [ 4 Employee Wellness Trends You Can’t Ignore in 2026 ](https://blog.nisbenefits.com/2026-employee-wellness-trends) [ Dina Lubben ](https://blog.nisbenefits.com/author/dina-lubben) 11/14/2025 [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ Trump Administration Unveils Plan to Make GLP-1 Drugs Affordable ](https://blog.nisbenefits.com/trump-administration-plan-glp1-drugs-affordable) --- ## Related Posts [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner) [ Valerie Ortiz ](https://blog.nisbenefits.com/author/valerie-ortiz) 07 July, 2026 #### [New CMS Report: Healthcare Spending Trends Through 2034](https://blog.nisbenefits.com/healthcare-spending-trends-through-2034) New projections from the U.S. Centers for Medicare and Medicaid Services (CMS) Office of the… [Read More](https://blog.nisbenefits.com/healthcare-spending-trends-through-2034) [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news), [ The Administrator's Corner](https://blog.nisbenefits.com/topic/the-administrators-corner), [ Mental Health](https://blog.nisbenefits.com/topic/mental-health) [ Steve Smith ](https://blog.nisbenefits.com/author/steve-smith) 06 July, 2026 #### [New HHS Rule Expands Catastrophic Coverage Access](https://blog.nisbenefits.com/new-hhs-rule-expands-catastrophic-coverage-access) The U.S. Department of Health and Human Services’ (HHS) Notice of Benefit and Payment Parameters… [Read More](https://blog.nisbenefits.com/new-hhs-rule-expands-catastrophic-coverage-access) [ Health Insurance Solutions](https://blog.nisbenefits.com/topic/health-insurance-solutions), [ Legislative News](https://blog.nisbenefits.com/topic/aca-other-legislative-news) [ Mari Wagner ](https://blog.nisbenefits.com/author/mari-wagner) 25 June, 2026 #### [Federal Court Blocks Key ACA Exchange Restrictions](https://blog.nisbenefits.com/federal-court-blocks-key-aca-exchange-restrictions) A recent federal court ruling blocked stricter ACA Marketplace eligibility and enrollment… [Read More](https://blog.nisbenefits.com/federal-court-blocks-key-aca-exchange-restrictions)