United States of America: Opened Consultation on Special Paper 800-66 providing guidance on HIPAA Security Rule

On 21 July 2022, the US National Institute for Standards and Technology (NIST) opened a consultation on a draft of Special Paper (SP) 800-66. The SP provides guidance on the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule, which requires regulated entities processing electronic protected health information (ePHI) to protect such protection from hazards, and impermissible uses and disclosures. Specifically, the SP provides guidance on topics like risk assessments, risk management, and various types of safeguards. The consultation closes on 5 October 2022.