1/23/2026 9:14:05 PM | less than a minute read

OCR Kicks Off 2026 with Reminders about "System Hardening" for HIPAA Covered Entities

Get in touch

Lisa Prather

Special Counsel

Get in touch

Lisa Prather

Special Counsel

The January 2026 Cybersecurity Newsletter released by the U.S. Department of Health and Human Services Office for Civil Rights focuses on the importance of “system hardening” methods to help protect electronic protected health information. The newsletter provides HIPAA-covered entities with reminders about system processes to implement or monitor, suggestions and tips to consider for those processes, and links to resources that may be useful in relation to those processes.

System hardening and security baselines can be an effective means to enhance security, and for regulated entities to protect ePHI. However, defining, creating, and applying system hardening techniques is not a one-and-done exercise.

www.hhs.gov/...