HIPAA Under the Microscope: Security Rule Updates (On Demand)-Webinar Recording

Video Transcription

Video Summary

TJ Blackman of TASPAC explained the proposed 2026 HIPAA Security Rule changes and what they could mean for dental offices. He stressed that these are still proposed rules and could change, but the overall direction is clear: stronger, more mandatory cybersecurity requirements.<br /><br />Key changes discussed included making currently “addressable” safeguards mandatory, especially multi-factor authentication (MFA), encryption for data at rest and in transit, network segmentation, regular vulnerability scanning, annual penetration testing, stronger backup and disaster recovery standards, updated asset inventories and network maps, tighter vendor oversight, and faster breach reporting.<br /><br />He emphasized that healthcare, including dental practices, is a major cyber target because patient data is valuable and ransomware is common. TJ advised practices to start asking IT providers, cloud vendors, and phone companies whether they are preparing for these changes and what plans are in place.<br /><br />He also noted that some requirements may be costly, especially penetration testing, and that the final rule’s details and timeline are still uncertain. The session closed with audience Q&A about consultants, documentation retention, and estimated costs.

Keywords

HIPAA Security Rule

2026 proposed rules

dental offices

cybersecurity requirements

multi-factor authentication

encryption

vulnerability scanning

penetration testing