SEC Proposed Cybersecurity Rule Changes: Why All Health Care Organizations Must Care

The SEC’s March 2022 proposed rules related to cybersecurity risk management, corporate governance, and incident disclosure by public companies may be finalized soon. Many health care organizations, especially nonprofits and private equity-backed health IT companies, may think these rules apply only to public companies and not to them. Bob Chaput, Founder and Executive Chairman, Clearwater, and Rachel V. Rose, Principal, Rachel V. Rose—Attorney at Law PLLC, discuss the new requirements and ou...