MGMA urges Trump Administration to rescind proposed HIPAA Security Rule (February 17, 2025)

February 17, 2025  

RE: Request for Rescission of Biden Administration’s Proposed Regulation on HIPAA Security

Dear President Trump & Secretary Kennedy,

The undersigned organizations, representing a broad range of clinicians, providers, and other healthcare stakeholders nationwide, write to you today to express our unified opposition to the proposed HIPAA Security Rule. Firstly, we look forward to continuing to be a trusted stakeholder and resource to you and continuing to deepen the long-standing relationship we have shared.

However, we all share deep concerns regarding the Biden administration's proposed regulation from the Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) titled “HIPAA Security Rule To Strengthen the Cybersecurity of Electronic Protected Health Information,”1 as published in the Federal Register on January 6, 2025. As stated in your Executive Order “Regulatory Freeze Pending Review,” we believe that this proposal raises substantial questions of fact, law, and policy that warrant careful consideration. Despite our diverse perspectives, we stand together in our belief that this proposal should be rescinded immediately, for reasons discussed below.

The combination of the depth and breadth of the proposed requirements on an unreasonable timeline presents significant challenges, and the unfunded mandates associated with this regulation would place an undue financial strain on hospitals and healthcare systems.

Additionally, the economic impact of this proposed rule cannot be overlooked or overstated. The healthcare sector is a significant contributor to the national economy, and the financial burden imposed by these new requirements could have far-reaching consequences. Increased costs for compliance would lead to higher healthcare costs for patients, reduced investment in other critical areas, and devastate patient access – particularly in rural America. The economic ripple effect could extend beyond healthcare, affecting related industries and the broader economy.

View the full letter