Six-domain annual compliance checklist updated with 13 new items drawn directly from the proposed NPRM — covering every HIPAA Security Rule standard across technical safeguards, incident response, and BA oversight. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.
Six-domain annual compliance checklist updated with 13 new items drawn directly from the proposed NPRM — covering every HIPAA Security Rule standard across technical safeguards, incident response, and BA oversight. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.
