An article for HealthITSecurity looks at the impact a federal privacy law would have on the health care industry. While most organizations focus on compliance with the Health Insurance Portability and Accountability Act, Impact Advisors Principal Advisor for Information Security, Privacy and Disaster Recovery Shefali Mookencherry explained health care organizations must also consider the Federal Information Security Management Act, other federal legislation and even the EU General Data Protection Regulation. Mookencherry added, “We need some other regulations, besides the federal laws, that can drive into data privacy to help organizations determine how to turn those regulations into actionable steps for cybersecurity.” 
Full Story