Labcorp has agreed to pay a $2.3 million penalty and revamp how it protects patient information following lapses in its cybersecurity. The settlement requires the lab company to restrict the volume of data it hands to third-party vendors, draft a response plan for vendor-related incidents, and assemble a risk management team to monitor whether those vendors follow security rules.
Read the full story at The Record