CIRCIA Final Rule Expected Late 2026; HIS-BSP Proposal Signals HIPAA Security Rule Updates

Health-ISAC analysis indicates the long-delayed CIRCIA rule will likely publish in December 2026, while HHS appears to be preparing HIPAA Security Rule amendments via the HIS-BSP proposal. The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) final rule, long overdue since its...