The HIPAA Security Rule is expected to be finalized by May 2026, with a compliance period following its release.