Your clinicians can see the radiology report from another health system, yet the actual CT stays out of reach. Epic just closed that gap with one click, and now wants the federal framework to follow. Source: Epic’s Doyle Says TEFCA Should Adopt Open Standards for Diagnostic Image Exchange on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Most AI scribe rollouts measure success by the go-live date. Cleveland Clinic wrote onboarding volumes into the vendor contract itself, then reported utilization figures that come with a qualifier worth reading closely. Source: Cleveland Clinic Tied Vendor Payments to Onboarding Waves in 4-Month AI Scribe Rollout on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Disclosing AI use is no longer enough at medical publishing’s largest network. Three categories of work are now closed to the technology entirely, and one of them will surprise the clinicians on your leadership team. Source: JAMA Bars AI From Peer Review, Opinion Writing and Clinical Images on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Health systems have spent two years turning on AI features somebody else designed. Four just started building their own inside Epic, and Epic plans to hand the best of that work to everyone else. Source: Epic Almanac Says Health Systems Moving AI Past Pilots, Early Adopters Building Agents on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

A $50 billion federal program is pouring money into rural health technology, and its rules quietly rule out the purchase most people assume it would cover. Where those dollars are going changes who rural systems call next. Source: EHR Replacement Cap Steers $50B Rural Health Program Toward Interoperability Work on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Nearly every health system says it validates AI before go-live. Fewer than half have anywhere to actually run those tests. The distance between those two numbers says something about what validation currently means. Source: Most Health Systems Validate AI Without a Testing Environment, Find KLAS and CCM at UPMC on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Your compliance team tracks HIPAA breach notification. GAO just counted 17 federal cybersecurity regulations aimed at healthcare, and only four involve incident reporting. The other 13 ask for something harder to produce. Source: Health Systems Carry 17 Federal Cyber Reporting Rules as CIRCIA Deadline Nears on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Stripping 18 identifiers used to settle the question. Gartner now expects AI-generated inferences to drive most privacy incidents by 2029, and the de-identification determination sitting in your compliance file was written for a different risk picture. Source: Gartner Warns De-Identified Data Faces Rising AI Re-Identification Risk on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Your compliance team says no because saying no is the safe answer, and the clinician on the other end never learns what was held back. New guidance maps the legal, technical, and workflow gaps most consent programs still carry. Source: Consent Experts Warn Paper-Era Workflows Push Health Systems Toward Over-Withholding on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Everyone shows up for the kickoff. Three weeks later the room is empty and the AI literacy program quietly stalls. Three health system leaders trace the cause to a decision made before day one. Source: AI Literacy Stalls Without Operational Ownership, Panelists Say on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Advisory committees feel like governance until a request needs an answer nobody in the room can give. Sharp HealthCare's new digital chief rebuilt the structure around decision rights, then found the harder problem underneath it. Source: One Year In, Sharp HealthCare’s Couts Says Restructuring Governance Was the First Order of Business on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Apple hardware stalled in healthcare on a question nobody had answered, namely which device controls actually satisfy healthcare compliance. Emory's team built the mapping with NIST, and it changes where a Mac deployment begins. Source: Emory’s Kikano Says New Healthcare Security Baseline Gives Apple Deployments a Place to Start on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Your vendor SBOM clause probably points to a document that no longer sets the bar. CISA and 17 partners just replaced the 2021 baseline, and the new one lets you ask for far more than a top-level parts list. Source: CISA SBOM Update Expands What Health Systems Can Demand of Software Vendors on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Staying in the Epic suite looks like the easy call until the bill arrives. Providence’s CMIO walks through the cost math, the governance, and why some AI features are still waiting. Source: Providence Onboards Epic AI Tools in Project Pixel; Smitherman Says Some Stay on the Watch List on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders

Your firewall never sees this one. An AI server left reachable from the open internet hands attackers a clean path to the data behind it, and Health-ISAC's newest quarterly count shows how quickly that surface is spreading. Source: Health-ISAC: Exposed AI and MCP Servers Became a New Attack Surface in Q2 on healthsystemcio.com - Interviews & Webinars with Health System IT Leaders