New York hospitals encounter fresh cyber rules. Will other states adopt?

New York Governor Kathy Hochul has proposed cybersecurity regulations for hospitals in the state in an effort to combat the increasing number of cyberattacks on the healthcare industry. The proposed regulations would require hospitals to establish a cybersecurity program and assess internal and external risks. New York state will also set aside $500 million in grant funding to support hospitals in implementing technology upgrades and training programs. The proposed regulations aim to complement and supplement the existing cybersecurity responsibilities that hospitals have under the Health Insurance Portability and Accountability Act (HIPAA). While New York is taking action, it is unclear whether other states will follow suit, but health systems across the country are likely to look to the New York law as a guiding set of requirements.