{"id":207253,"date":"2026-04-29T23:24:00","date_gmt":"2026-04-30T03:24:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/04\/29\/why-some-hospitals-wont-be-able-to-comply-with-upcoming-hipaa-updates\/"},"modified":"2026-04-30T00:50:09","modified_gmt":"2026-04-30T04:50:09","slug":"why-some-hospitals-wont-be-able-to-comply-with-upcoming-hipaa-updates","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/04\/29\/why-some-hospitals-wont-be-able-to-comply-with-upcoming-hipaa-updates\/","title":{"rendered":"Why Some Hospitals Won\u2019t Be Able to Comply With Upcoming HIPAA Updates"},"content":{"rendered":"

Why Some Hospitals Won\u2019t Be Able to Comply With Upcoming HIPAA Updates<\/a><\/p>\n

https:\/\/medcitynews.com\/2026\/04\/hipaa-hhs-healthcare-cybersecurity-security\/<\/a><\/p>\n

Publish Date: 2026-04-29 23:24:00<\/a><\/p>\n

Source Domain: medcitynews.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Next month, the Department of Health and Human Services is slated to finalize the first major update to HIPAA in more than a decade, which will force hospitals to adopt more robust security measures.<\/p>\n

With this update, HHS is seeking to eliminate the distinction between \u201crequired\u201d and \u201caddressable\u201d implementation specifications. Currently, HIPAA has two types of security rules for protecting sensitive health information \u2014 \u201crequired\u201d rules that must be followed and \u201caddressable\u201d rules that providers can choose not to obey.<\/p>\n

By getting rid of these two categories, HHS is aiming to make all cybersecurity rules mandatory for healthcare organizations. Under the department\u2019s proposal, several cybersecurity protocols will be required for all providers, such as two-factor authentication, data encryption and network segmentation.<\/p>\n

Kumar Sokka, CEO of cybersecurity platform Acre Security, thinks the biggest impact of the HIPAA update is that physical security safeguards will no longer be optional or flexible.<\/p>\n

Providers won\u2019t be able to just document policies anymore \u2014 they will have to demonstrate actual implementation for tools focusing on access control, intrusion detection and visitor management, he explained.<\/p>\n

He isn\u2019t confident in hospitals\u2019 ability to comply with the new requirements. Sokka said that most providers still rely on fragmented, siloed security tools and lack the connected infrastructure needed to meet the updated rule\u2019s more rigorous, integrated standards.<\/p>\n

\u201cThere are different ways to meet the needs based on the different budgets that these hospitals have. And I think unification is a big one, and also moving to the cloud and modernizing technology,\u201d he remarked.<\/p>\n

Sokka noted that a hospital\u2019s physical security and cybersecurity are deeply intertwined.<\/p>\n

Weak physical security, like unsecured server rooms, can directly enable cyberattacks, he added. For instance, someone physically accessing a server and plugging in a USB device can bypass even strong cyber defenses.<\/p>\n

\u201cThere\u2019s always the chance of people walking through,\u201d Sokka stated. \u201cThat\u2019s why a visitor management tool is a big deal, because you want to make sure you\u2019re running background checks, you\u2019re doing compliance checks to ensure that the right people are entering the hospital. There\u2019s a lot of weak points \u2014 things are just in flux, with guests coming in to visit and the accessibility of coming to a hospital.\u201d<\/p>\n

Under the updated HIPAA rule, these types of physical vulnerabilities will no longer be treated as secondary concerns \u2014 but as core security requirements that providers must actively address.<\/p>\n

However, this shift is likely to expose how many providers are still unprepared to deploy a more stringent security framework, Sokka said.<\/p>\n

Photo: MoMo Productions, Getty Images<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Why Some Hospitals Won\u2019t Be Able to Comply With Upcoming HIPAA Updates https:\/\/medcitynews.com\/2026\/04\/hipaa-hhs-healthcare-cybersecurity-security\/ Publish Date:…<\/p>\n","protected":false},"author":1,"featured_media":207254,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/medcitynews.com\/wp-content\/uploads\/sites\/7\/2026\/04\/doctor.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24],"class_list":["post-207253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/207253"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=207253"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/207253\/revisions"}],"predecessor-version":[{"id":207255,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/207253\/revisions\/207255"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/207254"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=207253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=207253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=207253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}