Cyber Insurance: Questions to Ask Your Broker

As we have reported, the New York State Department of Health (DOH) recently adopted hospital cybersecurity regulations containing extensive requirements for hospitals. While most of the requirements do not go into effect until October 2025, the incident reporting requirements went into effect last month. GNYHA has received many questions about how and when hospitals must...

Change Healthcare has begun the process of notifying, via letter, its customers whose patient data was breached in the February cyber incident. GNYHA member hospitals should review who is listed as the contact for notifications from Change in your contracts to ensure that your counsel and privacy officers receive the letter and can act on...

GNYHA submitted comments to the New York State Department of Health (DOH) urging the State to avoid misaligning Federal and State cybersecurity standards for hospitals by waiting to finalize their proposed regulations until updated Federal requirements are released. The State’s proposed rule, which is significantly more expansive than current HIPAA regulations, arrives as the US...