Wednesday, July 15, 2026

1. Signal of the Day · Regulation & Policy

   OCR Delays Final HIPAA Security Rule to July 2027 as Privacy Rule Changes Near

   HHS Office for Civil Rights has pushed final action on the HIPAA Security Rule overhaul to July 2027 (RIN 0945-AA22) while slating the Privacy Rule final rule for August 2026 (RIN 0945-AA00) — meaning the rulemaking that would have brought ePHI used in AI training data and prediction models explicitly into HIPAA scope, and required an AI asset inventory in the security risk analysis, is delayed 14 months, leaving the 2003 Security Rule and existing OCR risk-analysis enforcement as the operative floor for healthcare AI.

   HighBy Jennifer C. Everett, Angela T. Burnette, Jennifer Pike · Alston & BirdRead at source ↗

2. Regulation & Policy

   Global WHO Conference: Shaping AI in Health

   WHO/Europe and the Government of Portugal co-hosted the first-ever global WHO conference on AI in health on July 15–16, focused on governance and strategic leadership, and on legal, ethical and accountability frameworks including liability and risk management — convened alongside a WHO study finding significant AI-governance weaknesses across European health systems.

   LowBy WHORead at source ↗

3. SNF / Post-Acute

   AI Adoption in Senior Living Requires Infrastructure Investments to Fill Digital Gaps, Provider Groups Tell HHS

   In comments to HHS on accelerating AI in clinical care, AHCA/NCAL pointed to fragmented baseline digital capability across skilled nursing and assisted living and argued that most long-term and post-acute providers lack the staffing and capital for enterprise-style AI procurement, while LeadingAge called limited adoption capacity across aging services the major barrier to health AI innovation and urged sector-appropriate guardrails against fraud and harm to older adults.

   HighBy McKnight's Senior LivingRead at source ↗

4. Regulation & Policy

   Feds Delay Planned HIPAA Security Rule Overhaul to Mid-2027

   Regulators placed the 23-year-old HIPAA Security Rule's sweeping rewrite on the Long-Term Actions agenda after roughly 5,000 comments and heavy industry pushback on cost and feasibility, while advancing separate Privacy Rule changes aimed at patient access and care coordination — a signal that healthcare organizations should not read the delay as abandonment and should continue preparing for finalization in some form.

   MedBy Marianne Kolbasuk McGee · GovInfoSecurityRead at source ↗

Get the Daily Dispatch by email · free, about 8 a.m. Eastern · RSS