Aug 2, 2026 / By

TEFCA’s new updated IAS Implementation SOP, version 3.0, takes effect August 3, 2026

TEFCA’s Individual Access Services (IAS) rules are getting an update! Effective August 3, 2026, the revised requirements aim to help patients obtain their health records while strengthening identity verification and secure access. What changes for apps gathering those records, and the providers and health plans releasing them? Here’s what you need to know, including which requirements take effect now and which come later.

Feb 16, 2026 / By

Time is Up! OCR Complaint Intake & Breach Reporting Go Live for 42 CFR Part 2

Time is up, and the enforcement infrastructure is now live. OCR’s complaint portal is open to 42 CFR Part 2, and Part 2 breach reporting is no longer a future workflow. A live portal changes behavior: it lowers the friction to file, increases complaint volume, and accelerates how quickly organizations receive the familiar “we have received a complaint, please explain” letter. If you are a Part 2 program, a QSO, or a lawful holder (including many HIPAA covered entities and business associates), this is the moment Part 2 stops being a policy project and becomes immediate operational exposure.

Jan 2, 2026 / By

HTI-5 and Information Blocking: Your Bots Are Covered, and Your Excuses Are Getting Smaller

HTI-5 is calling out two things the market already knows: EHI is increasingly accessed through automation and AI, and “infeasible” has been doing suspiciously heavy lifting in some corners of the ecosystem. If you are an HIE/HIN, a developer of certified health IT, or a provider, these proposed information blocking changes tighten the exception playbook, put contract gating on notice, and make it harder to hide a “no” behind nicer paperwork.

Subscribe & Survive the onslaught of new healthcare regulations requiring updates to affected compliance programs.

Get access to exclusive subscription-only access to resources, tools, industry analysis and other valuable solutions.