The U.S. Department of Health and Human Services (HHS) has proposed amendments to the HIPAA Security Rule.The proposed changes aim to enhance cybersecurity protection for electronic health information (ePHI).Key provisions include removing the 'addressable' standard, requiring risk analysis, and prompt notification of access changes.The Proposed Rule also includes specific requirements for business associates and group health plans.