New HIPAA Rules Mandate MFA and Encryption for ePHI—Is Your Organization Ready? | Cyera Blog

The document summarizes proposed HIPAA Security Rule updates published January 6, 2025, which would mandate stronger cybersecurity controls for ePHI — including mandatory MFA, encryption at rest and in transit, comprehensive asset inventories and network mapping, and more rigorous risk analysis and documentation of addressable controls. It explains expected compliance timelines, emphasizes the need for visibility into ePHI, and positions Cyera’s data discovery, classification, and assessment capabilities as solutions to help organizations meet the new requirements.