Resource Details

Cyber Insurance & HIPAA Breaches Tip Sheet

Year Developed: 2024

Resource Type: Publication.

Primary Audience: Administrative Staff; Board of Directors; C-Suites (CEOs, CFOs, CIOs, CMOs, COOs, etc.)
Secondary Audience: Clinicans' Enabling Staff; Outreach Staff

Language(s): n.a.

Developed by: National Association of Community Health Centers (See other resources developed by this organization).

Resource Summary: This Tip Sheet specifically addresses how cyber insurance coverage can support health centers in meeting their obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to respond to security incidents and to report breaches.

Resource Details: This Tip Sheet specifically addresses how cyber insurance coverage can support health centers in meeting their obligations under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to respond to security incidents and to report breaches.This Tip Sheet provides a review of the following HIPAA requirements: • Security Incidents and Incident Response • Breach Determination • Breach Reporting • Responding to Investigations, Compliance Reviews and Lawsuits Each section also includes suggested “key terms” to be included in a cybersecurity insurance policy and “key questions” what to ask your insurance carrier or broker.

Resource Topic: Health Information Technology (HIT)/Data

Resource Subtopic: Administrative Policies, Compliance, —Operations, Privacy and Security.

Keywords: Data Collection, Management, and Analytics, Education of Staff (e.g., Competency-Based), Governing Boards, Privacy/Protected Health Information (e.g., Health Insurance Portability and Accountability Act (HIPAA)).