A continuously updated tracker of U.S. and international AI laws and regulations affecting healthcare and regulated industries.
For years, healthcare leaders could read about information blocking without seeing many public examples of its consequences. That position is getting harder to defend. In June,
State laws put a physician in the loop on AI-assisted denials. A signature shows who signed, not who decided. Six measures give an examiner proof that the review was real.
A former colleague called me within hours of the Change Healthcare attack. His organization was down hard. I thought then what I think now: this was
Imagine a mechanic who finds nine problems with your car. You pay for nine repairs. Later you learn he earns a commission on every problem he
Last week, ONC held a webinar on updates to its Security Risk Assessment Tool. It brought me back to a question I keep hearing from healthcare
Every year, I get some version of the same call. A practice manager or a compliance lead has just been told to run their annual security
On April 23, 2026, the HHS Office for Civil Rights announced four HIPAA settlements in a single day: Assured Imaging, Regional Women's Health Group,
Breach costs are usually measured in fines and notification letters. The real cost is measured in patients, and it does not show up on a compliance checklist.
On April 23, 2026, the HHS Office for Civil Rights settled four ransomware investigations in a single announcement: $1,165,000 in penalties, more than 427,
I remember exactly where I was when the Change Healthcare attack hit the news. Pharmacies could not process claims. Clinicians could not verify eligibility. Hospitals that
A bipartisan bill would let DHS order a shutdown of frontier AI systems in a loss-of-control scenario. Here's why the kill switch is warranted, how the bill actually works, and why "loss-of-control scenario" is the definition that decides whether it's a credible deterrent or a political gesture.
