The Government Agency That Oversees HIPAA ‘Not Effective’ at Improving Cybersecurity, Report Finds

Telemedicine service online video call for doctor to actively chat with patient via remote healthcare consultant software . People can use app to contact doctors for virtual meeting from home .Telemedicine service online video call for doctor to actively chat with patient via remote healthcare consultant software . People can use app to contact doctors for virtual meeting from home .

The Government Agency That Oversees HIPAA ‘Not Effective’ at Improving Cybersecurity, Report Finds

December 19, 2024

United States
United States
United States
Healthcare Brew

Senior Counsel Leslie Bender spoke to Healthcare Brew discussing the rise in cyberattacks against healthcare systems in recent years and why the industry should be using a tool published in February that allows healthcare facilities to conduct self-audits of their cybersecurity standards.

The healthcare industry “should be” using the tool to test and audit its own cybersecurity standards, she told Healthcare Brew, adding that “it feels unfair to criticize the OCR for not doing something that it didn’t have the money to do.”

“Ransomware attacks on healthcare entities are really treasure troves of incredibly valuable information,” she said. “I think that’s why there are so many cyberattacks that target healthcare entities, and I don’t know how 91 people working for the OCR could prevent that.”

The materials on the Eversheds Sutherland website are for general information purposes only and do not constitute legal advice. While reasonable care is taken to ensure accuracy, the materials may not reflect the most current legal developments. Eversheds Sutherland disclaims liability for actions taken based on the materials. Always consult a qualified lawyer for specific legal matters. To view the full disclaimer, see our Terms and Conditions or Disclaimer section in the footer. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Services

Key contacts

lesliebender@eversheds-sutherland.com

Leslie C. Bender

Senior Counsel

Washington, DC, United States

Latest Insights

Latest News

Latest Events

EU-flags-at-the-European-Commission-Berlaymont-building-cropped

guides and reports

October 23, 2026

EU: Empowering Consumers for the Green Transition Directive

Electricity transmission pylons across rural landscape energy infrastructure power lines

legal updates

October 21, 2026

Navigating energy storage globally

An abstract image of a building

legal updates

October 21, 2026

Construction Projects in the GCC

Modern office building glass facade exterior

legal updates

October 21, 2026

Commercially Connected - October 2026

© Eversheds Sutherland 2026. All rights reserved. Eversheds Sutherland is a provider of legal and other services operating through various separate and distinct legal entities. For further information about these entities and Eversheds Sutherlands' structure please see the Legal Notice page of this website.

Eversheds Sutherland (Germany) Rechtsanwälte Steuerberater Solicitors Partnerschaft mbB is a partnership with limited professional liability (Partnerschaftsgesellschaft mit beschränkter Berufshaftung) under German law, with its registered seat in Munich, registered with the partnership register of the Munich District Court under PR 1947 and having its business address at Brienner Straße 12, 80333 München, Germany. Eversheds Sutherland (Germany) Rechtsanwälte Steuerberater Solicitors Partnerschaft mbB is part of a global legal practice consisting of separate and distinct legal entities that operate under the name Eversheds Sutherland and provide legal or other services to clients around the world. Each Eversheds Sutherland entity is a separate legal entity and is not responsible for the acts or omissions of, nor can bind or obligate, another Eversheds Sutherland entity. Eversheds Sutherland Entities are constituted and regulated in accordance with relevant local regulatory and legal requirements. The use of the name Eversheds Sutherland, is for description purposes only and does not imply that the Eversheds Sutherland Entities are in a partnership or are part of a global entity. The responsibility for the provision of services to the client is defined in the terms of engagement between the instructed firm and the client.