confeplanet


The 2025 Proposed HIPAA Security Rule: What Providers Need to Know

All Days
Healthcare | Recorded Webinar | Duration: 90 Minutes
Brian L Tuttle

Live webinar instructions will be emailed to you 3 days prior to the event. || The recording, digital download, and full transcript will be available within 48 hours after the webinar.
Description

The HIPAA Security Rule has remained largely unchanged for over 15 years. In the final days of the Biden Administration, the Office for Civil Rights (OCR) issued a proposed rule to significantly revise and modernize the Security Rule. This update responds to growing cybersecurity threats—such as ransomware, hacking, and other forms of data breaches—and aims to align compliance standards with current technological realities. The proposed changes impose more stringent and specific requirements on covered entities and business associates to safeguard electronic protected health information (ePHI).

Webinar Objectives

This program is designed to help attorneys, compliance professionals, and technology advisors better support healthcare providers and organizations in understanding and meeting the expanded requirements of the proposed HIPAA Security Rule. Attendees will gain insights into key changes, practical compliance strategies, and how to prepare for increased enforcement activity in this evolving regulatory landscape.

Webinar Agenda

I. Introduction & Background

  • History and purpose of the HIPAA Security Rule
  • Key terminology and foundational principles

II. Overview of the Proposed Revisions

  • Summary of significant changes
  • Key areas of enhanced compliance obligations
  • Updates to risk analysis and risk management expectations

III. Addressing Modern Threats and Technologies

  • Cybersecurity risks: ransomware, phishing, unauthorized access
  • Incorporating new standards for encryption, authentication, and system monitoring

IV. Operational Impacts and Common Compliance Challenges

  • Real-world examples of vulnerabilities and enforcement actions
  • Practical tips for policy updates, training, and incident response

V. Next Steps and Resources

  • Preparing for the final rule and potential implementation timeline
  • Tools, templates, and references for ongoing compliance
  • Live Q&A and discussion

Webinar Highlights

  • Prepare attendees to meet the new, strengthened risk analysis requirements, including the mandated development of a technology asset inventory and a detailed network map.
  • Identify updated requirements for HIPAA compliance audits and what organizations must do to stay audit-ready.
  • Discuss new provisions for emergency preparedness and contingency planning, emphasizing enhanced expectations for continuity and recovery.
  • Explain the elimination of the “required” vs. “addressable” distinction, and how this change significantly raises the bar for compliance.
  • Describe new mandates for encryption and multi-factor authentication (MFA) to secure access and protect electronic protected health information (ePHI).

Who Should Attend

Attorneys, in-house counsel, Privacy officers, Security officers

Rhanda McKown

Brian L Tuttle

Brian L Tuttle, CPHIT, CHP, CBRA, Net+, A+, CCNA, MCP is a Certified Professional in Health IT (CPHIT), Certified HIPAA Professional (CHP), Certified HIPAA Administrator (CHA), Certified Business Resilience Auditor (CBRA), Certified Information Systems Security Professional (CISSP) with over 18 years' experience in Health IT and Compliance Consulting. With vast experience in health IT systems (i.e. practice management, EHR systems, imaging, transcription, medical messaging, etc.) as well as over 18 years’ experience in standard Health IT with multiple certifications and hands-on knowledge, Brian serves as compliance consultant and has conducted onsite and remote risk assessments for over 1000 medical practices, hospitals, health departments, insurance plans, and business associates throughout the United States. In addition, Mr Tuttle has served in multiple litigated court cases serving as an expert witness offering input related to best practices and requirements for securing and providing patient access to protected health information. Mr. Tuttle has also worked directly with the Office of Civil Rights (OCR) both in defending covered entities and business associates as well as being asked by the Federal government to audit covered entities and business associates on behalf of the OCR. Almost all of Brian’s clients are earned by referral with little or no advertising. 

Live webinar training is a virtual event that takes place in real time, where a speaker presents information, and participants can interact through a web conferencing platform.
Login to your dashboard and get your Live Instruction. You will also receive a notification via email. Live instructions will be emailed 12 hours before the live webinar.
Recording and Transcript will be available 24 hours after the live date.
Login to your dashboard and download the presentation (PDF).
A Digital Download is a digital file (webinar, video, audio, or other content) that can be downloaded and used without further processing. The download link is valid for 30 days. Please save it to your local storage for lifetime access. This link is unique to you and should not be shared.
Login to your dashboard and click on Digital Download. Download instructions will also be sent via email.
A transcript is a written record of the spoken words in a webinar, including presenter content and participant questions. It can be accessed within 30 days.
Login to your dashboard and download the transcript (PDF). Download instructions will also be emailed. The transcript is available for 30 days.
An on-demand session is a pre-recorded webinar that can be watched anytime with 30 days’ access.
Login to your dashboard and watch the recording. Instructions will also be emailed. Access is valid for 30 days with unlimited views.
Login to your dashboard and download the Invoice (PDF). A confirmation email will also be sent once the order is confirmed.
You can download the registration form or request a call.
Login to your dashboard, go to My Profile, and change your password.