Compliance & Legal

 Amy Bricker is barred from providing any services to CVS or its subsidiaries, and from disclosing Cigna's confidential information.

CIOs are focusing on third-party risk, AI tools and HIPAA compliance and tips for HIT security at the HIMSS23 cybersecurity forum, according to Aaron Miri, senior vice president and chief digital and information officer at Baptist Health.

Healthcare providers may no longer store electronic health records offshore or rely on third-party vendors who operate offshore and have access to patient data maintained in the U.S.

New initiatives launched by the White House include an updated strategic plan for artificial intelligence from the Office of Science and Technology Policy and a new RFI seeking input on mitigating AI risks.

Brian Scarpelli of the Connected Health Initiative discusses advocating for more fundamental shifts in thinking as insurers grow to understand the need for meaningful digital health and telemedicine reimbursement.

OrthoVirginia's chief information officer talks about the 18-month remediation process after a Ryuk ransomware incident and describes how a cybersecurity road map and training drove a more comprehensive cyber hygiene strategy.

The Federal Trade Commission proposes including more vendors of personal health records that access or send unsecured PHR-identifiable data in its rule governing health data sharing and unauthorized protected health information disclosure notifications.

The Federal Trade Commission alleges the company shared personal health information with two China-based firms, Google and analytics company AppsFlyer.

The HIMSS Electronic Health Record Association says it has substantial concerns with regulatory deadlines and other stipulations in ONC's proposed interoperability and AI transparency rule.

QR codes designed to improve data transfer can entice healthcare data breaches. Sharat Potharaju of Beaconstac shares advice on how to safely bolster data security while providing patients the ease of mobile access.