Citation Edit

Department of Health and Human Services, Office of Civil Rights (OCR), FACT SHEET: Ransomware and HIPAA (Aug. 2016) (full-text).

Overview Edit

This document describes ransomware attack prevention and recovery from a healthcare sector perspective, including the role the Health Insurance Portability and Accountability Act of 1996 (HIPAA) has in assisting HIPAA covered entities and business associates to prevent and recover from ransomware attacks, and how HIPAA breach notification processes should be managed in response to a ransomware attack.