July 13, 2026
New HIPAA Security Rule Delayed Until 2027
The U.S. Department of Health and Human Services' Office for Civil Rights (OCR) reportedly has updated its regulatory agenda. According to the timeframe on the reginfo.gov site, OCR expects to issue a final HIPAA Security Rule in July 2027.
This delay provides welcome relief to HIPAA covered entities and business associates who are struggling to anticipate and come into regulatory compliance with the proposed Security Rule.
For additional information or training on the HIPAA Security Rule, Privacy Rule, or Breach Notification Rule, feel free to reach out to Gina Greenwood, Brad Moody, Will Horkan, Marielle Montecillo, Sara Hubaishi or any attorney on the Healthcare team.
These materials have been prepared for informational purposes only and are not legal advice. This information is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Internet subscribers and online readers should not act upon this information without seeking professional counsel.
