HealthPolitics

STAT+: HHS relaxes security, transparency rules for health record software used by hospitals

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 27/10/2026, 06:36:25 UTC.

Briefings

The Trump administration on October 26, 2026, removed 14 security and privacy requirements for electronic health record vendors, including Epic and Oracle, to streamline regulations and support new technologies. This action follows a final rule from the Office of the National Coordinator for Health IT that eliminated 14 of 60 certification criteria. Seven other criteria were substantially revised, with many changes made after commenters raised concerns about undermining health information security and AI product safety.

Key points

• The Trump administration removed 14 security and privacy requirements for electronic health record vendors, including Epic and Oracle, on October 26, 2026.
• The Office of the National Coordinator for Health IT eliminated 14 of 60 certification criteria, with seven other criteria substantially revised.

Context

This policy shift occurred during the Trump administration's efforts to streamline government regulations and support the development of new technologies in health IT. The changes were made after commenters raised concerns that the modifications would undermine the security and privacy of sensitive health information.

Limitations

Evidence is limited to the Trump administration's removal of 14 requirements and the Office of the National Coordinator's final rule; specific impact on hospital operations or patient data security outcomes are not detailed.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 27/10/2026, 07:39:50 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeifwb3il3mrje646zhwttl7vav7o62evrbi7ewtwvjekug4dvovbde