The U.S. Department of Health & Human Services Office of Civil Rights (OCR) has modified a Final Rule updating the HIPAA Privacy Rule. This rule prohibits the use or disclosure of reproductive protected health information (PHI) by covered entities and their business associates.

In February, Change Healthcare, the nation’s largest processor of medical claims, experienced one of the largest cyberattacks in the healthcare industry, resulting in the loss of patient and claims data.