HHS Loosens Security and Transparency Rules for Hospital EHR Software

· Health · United States

The US Department of Health and Human Services removed several security, privacy and transparency requirements for vendors of electronic health record software used by hospitals, according to STAT. The change, attributed to the Trump administration, eases obligations on EHR vendors in a market dominated by a small number of large suppliers. Electronic health records underpin nearly every clinical and billing workflow in US hospitals, so adjusting vendor requirements touches data protection and the ability of hospitals to compare and switch systems. The items do not specify which requirements were dropped or when the change takes effect.

Why it matters：EHR vendors hold the most sensitive patient data in the health system, so loosening their obligations shifts risk onto hospitals and patients and could set a precedent for health-IT regulation.

Key points

  • HHS removed several security, privacy and transparency requirements for EHR vendors.
  • The change is attributed to the Trump administration.
  • EHR software is used by hospitals across the US.

Sources (original reporting)

More stories from this day