Weekly feed
13 curated updates · reviewed against primary sources
The portal consolidates TEFCA's governance details, designated Qualified Health Information Networks, and the latest Common Agreement version for nationwide health information exchange. The Sequoia Project's Recognized Coordinating Entity (RCE) portal for the Trusted Exchange Framework and Common...
The ONC's refreshed TEFCA fact sheet shows Qualified Health Information Networks now connect over 150 million unique patients and 1.8 million clinicians, underscoring rapid national scaled exchange under the Trusted Exchange Framework. The Office of the National Coordinator for Health IT (ONC)...
NIST's RFI aims to address AI-driven cybersecurity challenges by updating vulnerability management frameworks The National Institute of Standards and Technology (NIST) has published a Request for Information seeking public input on modernizing the National Vulnerability Database (NVD) to address...
Healthcare organizations struggle to patch clinical system vulnerabilities faster than threat actors can exploit them, creating acute security risks. The health sector continues to face significant challenges in patching security vulnerabilities in clinical systems, according to Health-ISAC.
The breach affects 3.75 million individuals, marking one of the largest healthcare data exposures reported in recent weeks and involving extensive protected health information. CareCloud experienced a significant data breach affecting 3.75 million individuals, as reported by the HIPAA Journal on...
KFF analysis reveals significant variation in insurer denial rates and transparency gaps for prior authorization requests issued in 2025. KFF found that health insurers denied 12% to 18% of standard prior authorization requests in 2025, with notable variation across different insurers.
Health-ISAC reports cybercriminals are using generative AI to weaponize healthcare's patient-first culture, requiring shift from static HIPAA compliance to dynamic human risk management. Health-ISAC has published a threat actor playbook detailing how cybercriminals are leveraging generative AI to...
The AMA supports CMS's revised guidance addressing payer compliance with prior authorization transparency requirements under the 2024 Interoperability and Prior Authorization final rule. The American Medical Association (AMA) has publicly endorsed updated guidance from the Centers for Medicare &...
NCQA’s new accreditation program recognizes clinics meeting national standards for behavioral health and substance use services, supporting quality and reimbursement. NCQA announced that Certified Community Behavioral Health Clinics (CCBHCs) operated by People Incorporated (Minnesota) and...
New system of records will collect PII to administer nursing workforce incentives for Medicare and Medicaid-certified nursing homes. The Centers for Medicare & Medicaid Services (CMS) is establishing a new system of records under the Privacy Act of 1974 to support the Nurses for Nursing Homes...
FDA seeks OMB clearance for a proposed information collection related to IND application requirements, with public comment open until September 16, 2026. The Food and Drug Administration (FDA) has announced that a proposed collection of information has been submitted to the Office of Management...
SAMHSA seeks OMB clearance for updated information collection defining security standards that entities must meet to access confidential substance abuse and mental health data under federal confidentiality protections. The Substance Abuse and Mental Health Services Administration (SAMHSA) has...
HHS seeks public comment on new Head Start Program Performance Standards that would reduce federal bureaucracy, defer to state policies, and increase local control while emphasizing child health, nutrition, and exercise. The Department of Health and Human Services (HHS), Administration for...