HIPAA MFA requirements and what to do before the final rule lands

In February 2024, a Change Healthcare security breach affecting 192.7 million individuals prompted HHS to propose HIPAA Security Rule changes making multi-factor authentication an explicit requirement for healthcare organizations accessing electronic protected health information. The post outlines what organizations should do before the final rule lands.