In the wake of a number of high-profile ransomware attacks against hospitals, legislators are moving to update cybersecurity laws to include protection against these kinds of threats, SC Magazine reports. During a joint hearing of the U.S. House's Subcommittee on Information Technology and the Subcommittee on Health Care, Benefits, and Administrative Rules, Rep. Ted Lieu, D. Calif., explained that the 2009 HITECH Act does not cover ransomware. “HITECH law has cybersecurity requirements and requires notification for data breaches, but the law says nothing about notification for data that is frozen or held hostage where it is stored,” said Lieu, who further argued for specific legal safeguards against future attacks.
Full Story