Health Plans Must Strengthen Cybersecurity as DOL Expands Guidance
Due to the vast amounts of sensitive data handled, health plans are prime targets for cyberattacks. No longer just a best practice—cybersecurity is now an essential fiduciary responsibility for plan sponsors.
To address these risks, the U.S. Department of Labor (DOL) first issued cybersecurity guidance in April 2021, outlining best practices for retirement plans. In September 2024, the DOL updated this guidance to explicitly apply to health and welfare plans, removing any prior ambiguity about their inclusion.