ERISA Advisory Council - Cybersecurity Issues Affecting Health Benefit Plans

This document is about the 2022 ERISA Advisory Council's examination of cybersecurity issues affecting health benefit plans. The examination aims to identify issues and vulnerabilities faced by plan sponsors, fiduciaries, and service providers, and how they may differ by plan size. The Council will also review existing relevant frameworks, approaches, and initiatives related to healthcare and health plan cybersecurity, as well as the interaction between overlapping regulatory regimes for health plans. The work of the Council is intended to assist the Department of Labor in determining the need for cybersecurity guidance, education, or other initiatives related to health information or health plans, and to inform plan sponsors and fiduciaries about the vulnerabilities they face and resources available to address them.