HIPAA Security Rule Update 2026: What We Know, What We Don’t, and Why It Shouldn’t Change Your Next Step

The proposed HIPAA Security Rule remains unresolved as of June 2026, leaving many therapists and practice owners wondering what comes next. While the OCR continues reviewing thousands of public comments, recent remarks from OCR Director Paula Stannard provide important clues about the agency’s priorities. Learn what we know, what we don’t, and why focusing on reasonable and appropriate safeguards remains the best path forward regardless of what happens with the proposed rule.

v2.10.0

Scheduled Maintenance

We will be temporarily taking the website offline at 10:00 PM Pacific (1:00 AM Eastern) tonight, July 6, in order to make some improvements. We plan to be back online by midnight Pacific (3:00 AM Eastern). We apologize for any inconvenience this may cause. Dismiss

jQuery( document ).ready(function() { if (typeof Boxzilla !== 'undefined' && Boxzilla !== null) { Boxzilla.on('box.show', function(box) { window[ gtm4wp_datalayer_name ].push({ 'event': 'Boxzilla.show', }); }); Boxzilla.on('box.dismiss', function(box) { window[ gtm4wp_datalayer_name ].push({ 'event': 'Boxzilla.dismiss', }); }); Boxzilla.on('box.hide', function(box) { window[ gtm4wp_datalayer_name ].push({ 'event': 'Boxzilla.hide', }); }); Boxzilla.on('ready', function(box) { window[ gtm4wp_datalayer_name ].push({ 'event': 'Boxzilla.ready', }); }); } });