Wednesday, September 16, 2026

1. Signal of the Day · Security & AI Risk

   Healthcare survey: 72% say AI is deployed without formal IT approval "at least occasionally" — and post-acute is not in the sample

   What happenedAn Imprivata-commissioned survey of 250 U.S. healthcare leaders found 72% say AI tools are deployed without formal IT approval "at least occasionally"; 17% call identity approaches sufficient.

   Why it mattersThe sample is hospitals and health systems only; SNF, senior living and home health are absent by construction, so there is no post-acute benchmark.

   For leadersMeasure unapproved AI use in-house rather than borrowing acute-care figures, and note the "at least occasionally" qualifier often drops out when quoted.

   HighBy Imprivata · ImprivataRead at source ↗

2. AI Tech & Frameworks Surfaced late · published September 14

   Oracle Health's clinical AI agent reaches nurses with voice chart navigation and acute nursing summaries

   What happenedOracle Health made its Clinical AI Agent for nurses available in the U.S.: voice chart navigation, AI acute nursing summaries and voice-enabled discrete charting.

   Why it mattersNursing documentation AI raises different questions than physician tools, and in a SNF a mis-coded assessment element can flow into regulatory data submissions.

   On the floorA voice-charted assessment element needs a nurse's check before it becomes the record.

   For leadersAsk nursing-documentation AI vendors who validates AI summaries and how voice-charting errors are caught before data is submitted.

   MedBy Jill Hughes · OracleRead at source ↗

3. Security & AI Risk

   Home health and hospice provider in 28 states breached through the vendor platform running referral management and care coordination

   What happenedLHC Group, a home health and hospice provider in 28 states, was breached through an unnamed vendor's referral and care-coordination platform after a voice-phishing attack in April 2026.

   Why it mattersMore than 28,000 people have been notified so far. No AI was involved, but that vendor layer is where scribes and predictive tools would connect.

   For leadersTreat vendor platforms holding referral and care data as AI attack surface: phishing-resistant credentials and access reviews come before new AI integrations.

   MedBy Steve Alder · HIPAA JournalRead at source ↗

4. Regulation & Policy Living page · read September 16

   EFF corrects WISeR denial count to 5,944 as the FOIA records reach national coverage

   What happenedEFF corrected its count of WISeR prior-authorization denials by two vendors in the first three months to 5,944; the rest of its CMS records stand.

   Why it mattersWISeR covers Traditional Medicare in six states and not SNF payment, but its records show an AI prior-auth pilot launching with one vendor's software not fully functional.

   For leadersWatch the floated expansion to air ambulance, cancer treatment and MRI, and use these records as a checklist when vetting payer AI prior-auth.

   MedBy EFFRead at source ↗

5. Regulation & Policy Living page · read September 16

   CMS adds five condition tracks to its technology-supported chronic care model, starting April 2027

   What happenedCMS's ACCESS chronic-care payment model adds heart failure, COPD, substance use disorder, tobacco cessation and musculoskeletal pain tracks from April 1, 2027.

   Why it mattersIt pays for care delivered through FDA-authorized devices and software — the category AI chronic-care tools sit in — though the page never mentions AI.

   For leadersTrack ACCESS G-codes and data-submission rules to see how algorithmic tools reach Medicare payment.

   MedBy CMSRead at source ↗

Get the Daily Dispatch by email · free, about 8 a.m. Eastern · RSS