Compliance & Legal

In healthcare, larger hospitals, all critical access hospitals, essential drug manufacturers and Class II and Class III devices would fall under the draft mandatory reporting rules, but health IT developers and others would not.

Sen. Mark Warner's legislation would require providers and their vendors to meet minimum cybersecurity standards to qualify.

Among the top global policy issues at HIMSS24: AI regulation, patient access and equity. Tom Leary, SVP and head of government relations at HIMSS, explains how the organization advocates for health policies that support those goals.  

Never before has healthcare cybersecurity been so critical. The risks to patient safety and business continuity are immense. Here are some perspectives and best practices for protecting your organization.

In an update on several looming regulatory deadlines, the HIMSS Electronic Health Records Association said it asked ONC for enforcement discretion on a December 1 deadline.

The security breach has been a major disruption and opened an opportunity for scammers, Minnesota AG warns.

How have HIMSS24 attendees been demonstrating AI's results and discussing legislation? What strategies are there to help interoperability's progress? Robert Havasy, senior director of informatics strategy at HIMSS, answers.  

The agency further defines when it considers a device to be Internet-enabled, proposes to add vulnerability disclosures and makes recommendations for cyber device maintenance plans and patch timelines.

"We thought if we could bring more transparency to decision support intervention, we can instill more trust and we can help optimize the use of these algorithms."

Meanwhile, the American Hospital Association is calling on Congress to do more in the face of a "staggering loss of revenue" for health systems.