Strengthens and increases oversight of security standards for health information.

The bill amends titles XI and XVIII of the Social Security Act to strengthen, increase oversight of, and compliance with, security standards for health information. It mandates the adoption of minimum and enhanced security requirements for covered entities and business associates, including annual audits and stress tests. The Secretary of Health and Human Services is required to review and update these requirements every two years. The bill also increases civil penalties for failure to comply with security standards and requirements for health information.

Strengthens and increases oversight of security standards for health information.

The bill amends titles XI and XVIII of the Social Security Act to strengthen, increase oversight of, and compliance with, security standards for health information. It mandates the adoption of minimum and enhanced security requirements for covered entities and business associates, including annual audits and stress tests. The Secretary of Health and Human Services is required to review and update these requirements every two years. The bill also increases civil penalties for failure to comply with security standards and requirements for health information.