New cybersecurity regulations are proposed by the Biden administration to lessen the impact of healthcare data leaks.

 New cybersecurity regulations are proposed by the Biden administration to lessen the impact of healthcare data leaks.

FILE PHOTO: This illustration image was captured on May 13, 2017, showing a man holding a laptop computer while cyber code is projected over him. Kacper Pempel/REUTERS/Illustration/File Photo.

In order to better prevent sensitive data from being exposed by hacks such as the ones that affected Ascension and UnitedHealth, healthcare institutions might need to strengthen their cybersecurity, a top White House official stated on Friday. The U.S. deputy national security advisor for cyber and emerging technology, Anne Neuberger, told reporters that the proposed measures are required because of the vast number of Americans whose data has been compromised by significant breaches of healthcare data. 

Among the recommendations include encrypting data to prevent access, even in the event of a leak, and mandating compliance audits to make sure networks adhere to cybersecurity regulations. "In 2023, cybersecurity incidents impacted the health information of over 167 million people," she stated.

According to Neuberger, the Department of Health and Human Services' proposed rule would update requirements under the Health Insurance Portability and Accountability Act (HIPAA) and is expected to cost $9 billion in the first year and $6 billion in the following years. She stated that since 2019, the number of significant healthcare breaches brought on by ransomware and hacking has grown by 102% and 89%, respectively. "In this job, one of the most concerning and really troubling things we deal with is hacking of hospitals, hacking of healthcare data," Neuberger explained. 

Sensitive medical information, mental health information, and other data about Americans are "being leaked on the dark web with the opportunity to blackmail individuals," according to Neuberger, when hospitals are forced to function manually.

A request for comment was not immediately answered by the Department of Health and Human Services. 

(Chizu Nomiyama edited; Raphael Satter added more reporting from Washington.)