HHS's $9 Billion HIPAA Overhaul Mandates MFA, Encryption Across All ePHI by Late 2026
The proposed 2026 HIPAA Security Rule eliminates addressable safeguards, requiring MFA, encryption, and twice-yearly vulnerability scans with a 240-day implementation window. HHS estimates $9B year-one compliance cost.

