Friday, October 9, 2026

1. Signal of the Day · Regulation & Policy

   HHS announces an EHR requirement to capture vaccine adverse events without naming a rule or date

   What happenedHHS said Oct. 8 that ONC-overseen standards "will now require" EHRs to capture vaccine adverse events. ONC's USCDI v7 bulletin lists those elements as not yet referenced in certification.

   Why it mattersSNF and assisted living operators vaccinate residents and staff; a certified adverse-event field would change nursing documentation and follow residents on transfer. No AI content.

   For leadersWatch for the ONC rule adopting USCDI v7, and ask EHR vendors when a structured vaccine adverse-event field will ship.

   HighBy HHSRead at source ↗

2. Security & AI Risk

   Reported toll of Oracle Health's legacy Cerner breach nears 20 million, with some hospitals receiving patient lists 11 months later

   What happenedPer HIPAA Journal, a Bloomberg report on Texas attorney general data suggests almost 20 million people were affected by the 2025 breach of unmigrated legacy Cerner servers.

   Why it mattersThe named clients are hospitals, but for SNF and assisted living operators the lesson is contractual: legacy-system disclosure and notification timelines. No AI content.

   For leadersWrite notification windows and disclosure of unmigrated acquired systems into EHR and AI vendor business associate agreements.

   LowBy Steve Alder · HIPAA JournalRead at source ↗

3. Security & AI Risk

   Anthropic opens a three-tier cyber program to defenders including regional hospitals, generally requiring data retention

   What happenedAnthropic merged Project Glasswing into a three-tier Cyber Verification Program on Oct. 6, naming regional hospitals as eligible; it requires data retention, with narrow zero-retention exceptions.

   Why it mattersSNF and assisted living security teams are reached only indirectly, but incident-response sessions can hold resident PHI, making retention a business associate question.

   For leadersBefore enrolling, confirm what session data is retained, for how long, and whether a business associate agreement covers it.

   MedBy AnthropicRead at source ↗

4. SNF / Post-Acute

   U.S. News taps Candid's AI voice and text conversations to gather senior living resident feedback for its ratings

   What happenedU.S. News partnered with Candid, whose AI voice and text conversations collect resident, family and staff feedback; per McKnight's, Candid is already in "hundreds" of communities.

   Why it mattersSenior living operators using it place AI conversations with residents, some cognitively impaired, inside a public ratings pipeline.

   For leadersAsk how residents consent, where recordings and transcripts are stored, and whether Candid or U.S. News may reuse them.

   LowBy Kimberly Bonvissuto · McKnight's Senior LivingRead at source ↗

Get the Daily Dispatch by email · free, about 8 a.m. Eastern · RSS