http://www.fiercehealthcare.com/regulatory/why-hipaa-needs-update

Definitely needs an update. The original regulation was introduced in 1996. Very few experts or legislators could ever envision ransomware and the sheer number of attack vectors. Also, passing legislation is never a clean process. Making laws is similar to making sausage. Neither process is pretty.