While the text of the Security Rule has not changed since 2013, the way in which the Rule is applied has changed in response to the COVID-19 health emergency and also the Cybersecurity Safe Harbor provision in 2021. Changes to the HIPAA Privacy Rule are currently being discussed, and these may have an impact on the content and/or the application of the HIPAA Security Rule in the near future.