{
	"version": "https://jsonfeed.org/version/1.1",
	"title": "Health Insurance Portability and Accountability Act (HIPAA) news from Infosec Standards",
	"description": "News about Health Insurance Portability and Accountability Act (HIPAA), including major updates to our page on it.",
	"home_page_url": "https://infosecstandards.org/standards/hipaa",
	"feed_url": "https://infosecstandards.org/standards/hipaa/feed.json",
	"authors": [
		{
			"name": "Infosec Standards",
			"url": "https://infosecstandards.org"
		}
	],
	"language": "en-US",
	"items": [
		{
			"id": "https://infosecstandards.org/news/who-decides-what-to-ask",
			"url": "https://infosecstandards.org/news/who-decides-what-to-ask",
			"title": "Standard pages now say who decides your obligation, and what to ask them",
			"summary": "The HIPAA, PCI DSS, CMMC, and SOC 2 pages each gained a section naming the party that actually sets your obligation and the questions to put to them in writing. HIPAA and SOC 2 also gained a first-decision picker.",
			"content_text": "The HIPAA, PCI DSS, CMMC, and SOC 2 pages each gained a section naming the party that actually sets your obligation and the questions to put to them in writing. HIPAA and SOC 2 also gained a first-decision picker.",
			"date_published": "2026-09-03T00:00:00.000Z",
			"tags": [
				"site-updates"
			]
		},
		{
			"id": "https://infosecstandards.org/news/risk-assessment-tool",
			"url": "https://infosecstandards.org/news/risk-assessment-tool",
			"title": "Infosec Standards now has a free, browser-only risk assessment tool",
			"summary": "Infosec Standards now has a guided, NIST SP 800-30 based risk assessment tool. Everything stays in your browser; you leave with a JSON file to resume from, a spreadsheet register, and a printable report.",
			"content_text": "Infosec Standards now has a guided, NIST SP 800-30 based risk assessment tool. Everything stays in your browser; you leave with a JSON file to resume from, a spreadsheet register, and a printable report.",
			"date_published": "2026-09-02T00:00:00.000Z",
			"tags": [
				"site-updates"
			]
		},
		{
			"id": "https://infosecstandards.org/news/hipaa-osf-settlement",
			"url": "https://infosecstandards.org/news/hipaa-osf-settlement",
			"title": "OCR settles HIPAA ransomware case with OSF Healthcare for $552,250",
			"summary": "HHS OCR resolved a 2021 ransomware investigation with OSF Healthcare System for risk analysis, impermissible disclosure, and late breach-notification failures.",
			"content_text": "HHS OCR resolved a 2021 ransomware investigation with OSF Healthcare System for risk analysis, impermissible disclosure, and late breach-notification failures.",
			"date_published": "2026-08-06T00:00:00.000Z",
			"tags": [
				"enforcement",
				"breaches",
				"email-all"
			]
		},
		{
			"id": "https://infosecstandards.org/news/hipaa-security-rule-delay",
			"url": "https://infosecstandards.org/news/hipaa-security-rule-delay",
			"title": "HIPAA Security Rule overhaul pushed to July 2027 on the federal agenda",
			"summary": "HHS OCR’s proposed Security Rule update is now a long-term action with a projected final action date of July 2027. The current Security Rule stays in force.",
			"content_text": "HHS OCR’s proposed Security Rule update is now a long-term action with a projected final action date of July 2027. The current Security Rule stays in force.",
			"date_published": "2026-07-06T00:00:00.000Z",
			"tags": [
				"program-changes",
				"version-updates",
				"email-standard"
			]
		},
		{
			"id": "https://infosecstandards.org/news/hipaa-omnibus-rule",
			"url": "https://infosecstandards.org/news/hipaa-omnibus-rule",
			"title": "HIPAA Omnibus Rule is the current HIPAA rule set",
			"summary": "On January 25, 2013, HHS published the HIPAA Omnibus Final Rule. It took effect March 26, 2013, with a compliance date of September 23, 2013, and remains the rule set in force today.",
			"content_text": "On January 25, 2013, HHS published the HIPAA Omnibus Final Rule. It took effect March 26, 2013, with a compliance date of September 23, 2013, and remains the rule set in force today.",
			"date_published": "2013-01-25T00:00:00.000Z",
			"tags": [
				"version-updates"
			]
		}
	]
}