STAT+: HHS relaxes security, transparency rules for health record software used by hospitals

The Trump administration on Monday removed 14 security, privacy, and transparency requirements for vendors of electronic health records, with the goal of streamlining government regulations and supporting the development of new technologies.

A long-awaited final rule from the Office of the National Coordinator for Health IT eliminated 14 of 60 criteria used to certify electronic record-keeping systems sold by companies such as Epic and Oracle. Seven other criteria were substantially revised.

In many cases, the administration eliminated or revised certification requirements over the objections of commenters who raised concerns that the changes would undermine the security and privacy of sensitive health information, along with efforts to ensure the safety of products that rely on artificial intelligence.