HIPAA News and Policy Updates
July HIPAA Security Update: Duo Verified Push
In August 2025, HIPAA workforce members will switch from standard Duo Push to Duo Verified Push for two-factor authentication. What is Duo Verified Push? Standard Duo Push involves simply tapping “Approve” or “Deny” on a push notification. Duo Verified Push adds a code verification step: When logging in, a 4-digit code will be displayed... More
HIPAA Final Rule – Effective December 23, 2024
On April 22, 2024, the U.S. Department of Health and Human Services (HHS), through the Office for Civil Rights (OCR), issued a Final Rule to revise HIPAA (HIPAA Final Rule). The primary purpose of the HIPAA Final Rule is to support reproductive health care privacy. It prohibits the disclosure of protected health information (PHI) related to lawful reproductive health care in certain circumstances, mandates a signed attestation for certain requests, and requires a modification to the Notice of Privacy Practices (NPP). Compliance with the Final Rule is required by December 23, 2024, except for modifying the NPP, which isn’t required until February 16, 2026. More