HIPAA Privacy & Security Changes 2026: Identifying Operational Risks

This session reviews upcoming and proposed HIPAA and HITECH changes expected in 2026, with a focus on how these developments may influence.

This session reviews upcoming and proposed HIPAA and HITECH changes expected in 2026, with a focus on how these developments may influence daytoday compliance operations.

It highlights areas where organizations may be relying on outdated interpretations of regulations, particularly in relation to patient rights, permitted disclosures, and digital communication practices.

The webinar also examines how regulators are approaching enforcement, using recent breach cases and audit observations to illustrate where compliance gaps are commonly identified.

Attendees will gain a clearer understanding of where closer review may be needed within their own programs, especially in areas such as documentation, vendor management, and risk mitigation.

After this webinar attendees will be able to answer

• What proposed 2026 HIPAA and HITECH updates may impact current compliance practices
• Where existing privacy and security policies may not align with evolving expectations
• How enforcement trends and audit findings are shaping compliance priorities
• What risks exist in areas such as patient access, communication methods, and vendor oversight
• How to recognize gaps in documentation, risk assessments, and breach response processes

This webinar benefits the following agencies

• Hospitals and healthcare systems
• Physician practices and clinics
• Behavioral health organizations
• Health plans and payers
• Business associates handling PHI
• Healthcare compliance and consulting firms

Who should attend?

• HIPAA Privacy and Security Officers
• Compliance Officers and Risk Managers
• Healthcare Administrators
• IT and Information Security Professionals
• Legal and Regulatory Professionals in healthcare
• Anyone responsible for managing or safeguarding protected health information

Speaker:

Brian L Tuttle, CPHIT, CHP, CBRA, Net+, A+, CCNA, MCP is a Certified Professional in Health IT (CPHIT), Certified HIPAA Professional (CHP), Certified HIPAA Administrator (CHA), Certified Business Resilience Auditor (CBRA), Certified Information Systems Security Professional (CISSP) with over 18 years' experience in Health IT and Compliance Consulting. With vast experience in health IT systems (i.e. practice management, EHR systems, imaging, transcription, medical messaging, etc.) as well as over 18 years’ experience in standard Health IT with multiple certifications and hands-on knowledge, Brian serves as compliance consultant and has conducted onsite and remote risk assessments for over 1000 medical practices, hospitals, health departments, insurance plans, and business associates throughout the United States.