The SEC’s March 2022 proposed rules related to cybersecurity risk management, corporate governance, and incident disclosure by public companies may be finalized soon. Many health care organizations, especially nonprofits and private equity-backed health IT companies, may think these rules apply only to public companies and not to them. Bob Chaput, Founder and Executive Chairman, Clearwater, and Rachel V. Rose, Principal, Rachel V. Rose—Attorney at Law PLLC, discuss the new requirements and outline why all organizations in the health care ecosystem should pay attention to and meet the spirit and intent of these disclosure requirements. Bob and Rachel recently authored an article on this issue for AHLA’s Health Law Weekly. Sponsored by Clearwater.Essential Legal Updates, Now in Audio AHLA's popular Health Law Daily email newsletter is now a daily podcast, exclusively for AHLA Premium members. Get all your health law news from the major media outlets on this podcast! To subscribe and add this private podcast feed to your podcast app, go to americanhealthlaw.org/dailypodcast. Stay At the Forefront of Health Legal Education Learn more about AHLA and the educational resources available to the health law community at https://www.americanhealthlaw.org/.

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.